Principal Cyber Investigator
For our client, we are seeking a Principal Cyber Investigator to join the team of a leader in the Technical Services space. This role will serve as the final technical authority on high-severity cyber misuse escalations, complex actor attribution, and emerging threat patterns. You will lead investigative rigor across abuse vectors such as ransomware and data exfiltration while partnering with stakeholders to turn ambiguous telemetry into clear, defensible action. The position also involves mentoring investigators, sharpening playbooks, and translating complex cyber findings into briefings that help leadership make informed risk decisions. Location: Remote Compensation: $140,000 – $215,000 annually
Responsibilities
Act as the final technical authority on high-severity cyber misuse escalations and complex actor attribution Develop and refine investigative playbooks targeting key abuse vectors like ransomware and data exfiltration Lead and mentor a team of investigators, ensuring consistent quality and defensible determinations Deliver precise case labeling to improve the accuracy of automated detection models Analyze telemetry to uncover coordinated adversarial campaigns and emerging tactics Synthesize complex cyber findings into actionable briefings for client leadership Cultivate relationships with external threat intelligence communities Qualifications 9+ years of hands-on experience in cyber threat intelligence, digital forensics, or offensive security Deep operational familiarity with the MITRE ATT&CK framework and exploit lifecycles Proven experience managing or mentoring an investigative unit or SOC escalation tier Ability to make decisive judgments based on ambiguous data and justify rationale in writing Demonstrated skill in translating technical threats into actionable risk assessments for various stakeholders Must be based in the U.S. with unrestricted work authorization
Benefits
Remote work setup for flexibility Opportunity to lead a dedicated cyber investigations pod Engagement with cutting-edge AI safety initiatives Access to a network of vetted external threat intelligence communities Potential for professional growth in a high-stakes environment Our client is an equal opportunity employer. We encourage you to apply even if you don’t meet every qualification—your background could be exactly what this team needs.