Threat Investigator - APAC

About the company

10a Labs provides the safety and threat-intelligence layer relied on by frontier AI labs, AI unicorns, Fortune 10 enterprises, and major global technology platforms. Its red-teaming, model evaluation, and intelligence-gathering work helps engineering, trust and safety, and security teams stay ahead of emerging abuse patterns and keep AI systems safe to deploy.

Role overview

The Investigations team is looking for extra support to handle urgent safety incidents and carry out investigations across a wide range of abuse categories, including violence, hate, mental health, CBRNE, child safety, cyber abuse, and related areas. In this APAC-focused role, you will support a remote-first Sydney-based team by identifying harmful behavior, responding to malicious use, preparing investigation reports, and turning findings into clear recommendations.

This position requires hands-on experience investigating threat actors, abusive behavior, cyber abuse, or similar activity. You should also be comfortable using SQL and Python to query, transform, and interpret data, while responding to escalations and reactive leads that may not be detected by existing safety systems.

Work conditions

The work may involve exposure to sensitive and distressing material, including sexual, violent, or otherwise disturbing content. The role also includes on-call coverage for urgent escalations outside standard hours, sometimes in the evenings and on weekends. The usual on-call pattern is 7 straight days every 2 months, although this may change depending on operational needs. Candidates should be flexible.

Responsibilities

• Identify suspicious or malicious actors on the platform and re-establish tracking of them when needed.
• Review possible policy breaches by analyzing internal data with SQL and Python and by validating information through open-source intelligence (OSINT).
• Prepare and communicate investigation outcomes to internal teams and other stakeholders.

Requirements

• At least 3 years of relevant investigation experience in Trust & Safety, National Security, Defense, Intelligence, or Law Enforcement, with a willingness to handle sensitive areas such as child safety.
• Based in the Asia-Pacific region and able to work Sydney business hours, 9:00 am to 5:00 pm local time.
• Available for on-call duty involving urgent escalations outside normal working hours, including occasional evenings and weekends.
• Strong command of SQL and Python, with additional programming knowledge being a plus.
• Proven technical investigation capability, including the ability to build and maintain detection pipelines.
• Comfortable switching quickly between different domains, content types, and abuse categories.
• Able to thrive in a fast-moving, ambiguous, high-impact environment.

Preferred qualifications

• Experience with AI platform risks and abuse.
• Background as an EMEA-based Threat Investigator or deep expertise in EMEA geopolitics.
• Professional fluency in Arabic, Chinese, Korean, Japanese, Farsi, Portuguese, Russian, or Spanish.
• Experience scaling and automating detection or mitigation workflows.
• Familiarity with using language models to improve scale.
• Exposure to areas such as violence, extremism, child safety, prompt injection, litigation, scams and fraud abuse, radicalization, persuasion, grooming, or hateful groups and activity.

Additional information

This role is designed for remote work, but candidates must be APAC-based and able to align with Sydney time.