Head of Threat Intelligence

📋 Description

• Build the tripwires: monitor Wikipedia, search results, review/complaint sites, domain
• Attribute: use account-graph analysis, stylometry, metadata, and timing to produce named hypotheses
• Enforce: work platform processes (BLP noticeboards, sockpuppet investigations, takedowns, search
• Support counsel: build preservation lists, subpoena-ready evidence packages, public records
• Respond: when attribution is solid, work with counsel on appropriate consequences (platform bans
• Protect executives: handle doxxing, impersonation, phishing domains, and physical-security signals.

🎯 Requirements

• Trust and safety investigator at a major platform (threat disruption, influence operations, or
• Disinformation researcher who has attributed coordinated account networks (e.g., Graphika, DFRLab
• Threat intelligence analyst (e.g., at Nisos, Recorded Future, Mandiant, or Kroll) with
• OSINT investigative journalist with a digital forensics record.
• Fluent use of AI for both speed and detecting AI-generated output.
• Knowledge of Wikipedia's living-persons policy, sockpuppet investigations, and John Doe subpoenas.

🎁 Benefits

• Equal opportunity employer
• Reasonable accommodations for qualified individuals with disabilities, pregnant individuals, and