Threat Intelligence Analyst, Threat Disruption in Kennington

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars.SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.ABOUT THE ROLE:Threat Disruption provides expert threat intelligence and conducts scaled operations against the adversaries attacking X. We investigate and disrupt threats across the following areas:Platform manipulation, including coordinated networks of bots attempting to pollute the information spaceCompromises of accounts owned by high-visibility individuals and organizationsSensitive allegations carrying reputational, legal, or geopolitical weight, including suspected foreign-linked influence campaignsFinancial fraud, monetization abuse, and scam networks operating on and off XOther X Rules violations, including illegal activity and child safetyWe identify how adversaries circumvent our defenses, abuse product features and core services, and benefit from the abuse. Based on these investigations, we conduct sweeps to disrupt immediate threats and provide recommendations to product, engineering, and policy teams to squash systemic vulnerabilities.Where appropriate, Threat Disruption also coordinates with law enforcement and other external parties to enhance detections and support prosecution of bad actors.Come help us defend the global town square.RESPONSIBILITIES:Identify and counter sophisticated threat actors who are highly motivated to evade detectionConduct first-principles investigations into the threat surfaces outlined aboveDesign and execute large-scale enforcement operations that remove hundreds of thousands to millions of adversary-controlled accountsClearly and concisely communicate investigative findings and enforcement outcomesPartner closely with operations, engineering, product, and policy teams across the organizationRapidly and rigorously handle urgent incidents escalated by leadershipBASIC QUALIFICATIONS:Self-starter mindset with a proven ability to take initiative and drive work forward independentlyDeep commitment to analytical rigor and operational excellenceExceptional attention to detailExcellent written and verbal communication skillsDemonstrated ability to learn quickly and adapt in a fast-paced environmentMaturity and discretion when handling sensitive information, with the ability to remain calm and effective during urgent incidentsStrong proficiency in SQL for querying large, complex datasetsComfort operating in the command line, writing scripts, and leveraging AI tools to amplify impact and scale workFlexibility to work across time zones, including weekends and holidays, as part of an on-call rotationStrong respect for users’ freedom of speech and privacyPREFERRED SKILLS AND EXPERIENCE:Experience investigating platform manipulation,