Threat Investigator

Discord's mission is to give people the power to create space to find belonging in their lives, and every day millions of people trust Discord to be a place where they can talk, hang out, and build community. Keeping that space safe starts with teams like ours.

Discord's Violent Actors Team, part of the broader Threat Operations org within Trust & Safety, focuses on identifying and disrupting violent and extremist networks and threat actors. As a Threat Investigator, you'll lead investigations into these communities, identify novel detection mechanisms, and develop enforcement strategies to stay ahead of ongoing and emerging threats.

A typical day might include conducting deep-dive network investigations, compiling high-value signals to fuel proactive detection, or collaborating with internal and external partners on incident response. This role requires the ability to flex across a range of harm portfolios as team priorities evolve. This person will report to the team's Senior Manager.

What You'll Be Doing

• Leading complex investigations into violent extremist and threat actor networks, developing and iterating on detection and disruption strategies across your investigative portfolio
• Executing on roadmap projects, including cross-functional coordination with policy, engineering, and ML/AI teams, documentation of behavioral trends, and identification of scalable mitigation strategies
• Leveraging investigative signals and subject matter expertise to inform threat prioritization decisions
• Identifying emergence of novel harm behaviors, and gaps in Discord's detection, policy, and enforcement capabilities
• Partnering with team program managers to develop and prioritize improvements to operational readiness
• Serving as a subject matter resource for teammates, leadership, and cross-functional partners

What you should have

• 5+ years of experience in threat intelligence, investigations, or incident management, with a track record of leading complex, multi-stakeholder cases independently
• Deep expertise in at least one extremist or violent threat actor ecosystem, with the analytical flexibility to develop proficiency across new harm verticals as priorities shift
• Demonstrated ability to define scope, propose solutions, and drive projects to completion in ambiguous, high-change environments with minimal oversight
• Proficiency with data analysis tools, case management systems, and machine learning tooling to support network investigations and detection work
• Strong written and verbal communication skills, including the ability to translate complex, sensitive topics for non-expert audiences, and experience producing cross-functional product requests, intelligence products, and engaging with law enforcement, government, or external partners
• Collaborative approach to cross-functional work, with the ability to build consensus and coordinate across teams and time zones

Bonus points

• Additional language proficiency, particularly in languages relevant to high-harm threat actor communities
• Experience translating investigative findings into clear, actionable insights for non-expert or executive audiences

Candidates must reside in or be willing to relocate to the San Francisco Bay Area (Alameda, Contra Costa, Marin, Napa, San Francisco, San Mateo, Santa Clara, Solano, and Sonoma counties). Relocation assistance may be available.

The US base salary range for this full-time position is $132,000 to $148,500 + equity + benefits. Our salary ranges are determined by role and level. Within the range, individual pay is determined by additional factors, including job-related skills, experience, and relevant education or training. Please note that the compensation details listed in US role postings reflect the base salary only, and do not include equity, or benefits.