xAI logo
xAI Verified
Artificial Intelligence, Machine Learning, Deep Learning

Threat Intelligence Analyst, Threat Disruption

LondonOnsiteFull TimePosted 2 months ago

Is this role right for you?

Upload your resume and get a skill-by-skill breakdown — see exactly where you match, where you're close, and what to highlight. Not a mystery percentage.

Get a tailored resume highlighting what this role needs.

Required skills

  • Analytical rigor
  • Operational excellence
  • Learn quickly
  • Adaptable
  • Maturity
  • Discretion
  • Sensitive information
  • Calm under pressure
  • SQL
  • Command line

Nice to have

  • Platform manipulation
  • Account compromise
  • Influence operations
  • Fraud
  • Production changes
  • Enforcement outcomes

Role summary

We are seeking a Threat Intelligence Analyst to join our Threat Disruption team. This role involves investigating and disrupting sophisticated adversaries attacking X, focusing on areas like platform manipulation, account compromises, influence operations, financial fraud, and other X Rules violations. You will identify how adversaries bypass defenses, design and execute large-scale enforcement operations, and communicate findings to internal teams and external partners. The ideal candidate is a self-starter with strong analytical skills, proficiency in SQL, command line, and scripting, and experience handling sensitive information and urgent incidents. Experience in threat investigations and turning insights into production changes is preferred.

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars.SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.

ABOUT THE ROLE:

Threat Disruption provides expert threat intelligence and conducts scaled operations against the adversaries attacking X. We investigate and disrupt threats across the following areas:

  • Platform manipulation, including coordinated networks of bots attempting to pollute the information space
  • Compromises of accounts owned by high-visibility individuals and organizations
  • Sensitive allegations carrying reputational, legal, or geopolitical weight, including suspected foreign-linked influence campaigns
  • Financial fraud, monetization abuse, and scam networks operating on and off X
  • Other X Rules violations, including illegal activity and child safety
  • We identify how adversaries circumvent our defenses, abuse product features and core services, and benefit from the abuse. Based on these investigations, we conduct sweeps to disrupt immediate threats and provide recommendations to product, engineering, and policy teams to squash systemic vulnerabilities.

    Where appropriate, Threat Disruption also coordinates with law enforcement and other external parties to enhance detections and support prosecution of bad actors.

    Come help us defend the global town square.

    RESPONSIBILITIES:

  • Identify and counter sophisticated threat actors who are highly motivated to evade detection
  • Conduct first-principles investigations into the threat surfaces outlined above
  • Design and execute large-scale enforcement operations that remove hundreds of thousands to millions of adversary-controlled accounts
  • Clearly and concisely communicate investigative findings and enforcement outcomes
  • Partner closely with operations, engineering, product, and policy teams across the organization
  • Rapidly and rigorously handle urgent incidents escalated by leadership
  • BASIC QUALIFICATIONS:

  • Self-starter mindset with a proven ability to take initiative and drive work forward independently
  • Deep commitment to analytical rigor and operational excellence
  • Exceptional attention to detail
  • Excellent written and verbal communication skills
  • Demonstrated ability to learn quickly and adapt in a fast-paced environment
  • Maturity and discretion when handling sensitive information, with the ability to remain calm and effective during urgent incidents
  • Strong proficiency in SQL for querying large, complex datasets
  • Comfort operating in the command line, writing scripts, and leveraging AI tools to amplify impact and scale work
  • Flexibility to work across time zones, including weekends and holidays, as part of an on-call rotation
  • Strong respect for users’ freedom of speech and privacy
  • PREFERRED SKILLS AND EXPERIENCE:

  • Experience investigating platform manipulation, account compromise, influence operations, or fraud
  • Experience turning investigations into production changes and enforcement outcomes
  • Experience in a 24/7 on-call rotation, including owning urgent incidents and briefing leadership
  • COMPENSATION AND BENEFITS:

    Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.

    ITAR REQUIREMENTS:

  • To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.
  • SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.

    Ready to apply?
    You'll be redirected to xAI's application page.

    Similar roles

    See how RiseMe works

    Match, tailor, and prep so you send fewer applications and land more interviews.