Threat Intelligence Analyst, Threat Disruption

The role

You will find and stop threat actors attacking X, including bot networks, account compromises, influence operations, fraud and scam networks. You will run investigations, design large-scale enforcement operations and advise product, engineering and policy teams.

What you will do

• Identify and counter sophisticated threat actors who are highly motivated to evade detection
• Conduct first-principles investigations into the threat surfaces outlined above
• Design and execute large-scale enforcement operations that remove hundreds of thousands to millions of adversary-controlled accounts
• Clearly and concisely communicate investigative findings and enforcement outcomes
• Partner closely with operations, engineering, product, and policy teams across the organization
• Rapidly and rigorously handle urgent incidents escalated by leadership

Required qualifications

• Experience with SQL for querying large, complex datasets
• U.S. citizen or national, U.S. lawful permanent resident, refugee under 8 U.S.C. § 1157, or asylee under 8 U.S.C. § 1158, or eligible to obtain the required authorizations from the U.S. Department of
• Flexibility to work across time zones, including weekends and holidays, as part of an on-call rotation

Nice to have

• Comfort operating in the command line, writing scripts, and leveraging AI tools to amplify impact and scale work
• Strong respect for users' freedom of speech and privacy
• Maturity and discretion when handling sensitive information, with the ability to remain calm and effective during urgent incidents
• Experience investigating platform manipulation, account compromise, influence operations, or fraud
• Experience turning investigations into production changes and enforcement outcomes
• Experience in a 24/7 on-call rotation, including owning urgent incidents and briefing leadership
• Self-starter mindset with a proven ability to take initiative and drive work forward independently
• Deep commitment to analytical rigor and operational excellence
• Exceptional attention to detail
• Excellent written and verbal communication skills

Before you apply

• U.S. citizenship, national status, lawful permanent residency, refugee or asylee status, or eligibility for U.S. Department of State authorizations is required under U.S. export regulations (ITAR)

About the company

SpaceX's xAI team (SpaceXSI) builds Super Intelligence, including Colossus supercomputers, Grok models and applications such as Grok Bot, Grok Build, Grok Imagine, Grok Voice and X. SpaceX is an equal opportunity employer.