Threat Intelligence Investigator

Threat Intelligence Investigator (Contract)

Location: San Mateo, CA (preferred) or San Diego, CA (hybrid) - will require 2-3 days onsite.
Note: Temporary position with initial 12-month term, possible extension, employed through staffing partner Yoh.

Hours: 11am/12pm/1pm – 7pm/8pm/9pm / as needed.
Days: Sunday to Thursday.

The Threat Intelligence Investigator is a key member of the Corporate Security team responsible for receiving, evaluating, investigating, and escalating threats and security‑related incidents across internal and external platforms.

The successful candidate will leverage investigative methodologies, intelligence resources, and data systems to assess the credibility of global threats, support proactive risk management efforts, and collaborate with law enforcement agencies and internal stakeholders to mitigate risk.

This role supports investigations and threat management activities involving consumer platforms, employees, business operations, studios, assets, and the company’s reputation. The Investigator will also contribute to intelligence products, operational reporting, and proactive threat identification capabilities.

Working closely with Consumer Services, Online Safety, Moderation, Human Resources, Legal, IT Operations, Engineering, GSOC, and relevant studios, the Investigator will help ensure effective and consistent investigative, intelligence, and threat management processes.

This role is critical to identifying, analyzing, investigating, and escalating incidents that may impact SIE personnel, assets, business operations, or brand reputation.

• Conduct investigations into threats targeting SIE platforms, services, and associated ecosystems, including internal incidents involving potential corporate security breaches, ensuring appropriate escalation and stakeholder engagement.
• Conduct investigative enquiries into security incidents, threats, policy violations, and other corporate security matters, ensuring appropriate escalation, documentation, and stakeholder engagement.
• Gather, review, preserve, and assess relevant investigative material, including CCTV footage, access control records, OSINT, internal reporting, and other available evidence sources.
• Conduct interviews and information gathering with relevant stakeholders, witnesses, and involved parties to support investigative fact‑finding and threat assessment activities.
• Analyze investigative information to establish timelines, identify behavioral indicators, assess risk, and support informed operational decision‑making.
• Produce clear, accurate, and objective investigative documentation, reports, and case updates in accordance with established procedures and reporting standards.
• Prioritize and manage cases end‑to‑end based on threat level and urgency, ensuring all investigative activity is accurately documented and integrated into case management and reporting mechanisms.
• Receive, process, and evaluate threat reports using investigative tools and supporting resources to assess credibility and risk.
• Develop and disseminate actionable intelligence to support threat management, risk mitigation, and informed decision‑making across the organization.
• Support strategic intelligence development activities through horizon scanning, trend monitoring, and collection of relevant threat intelligence to identify emerging risks impacting SIE employees, operations, studios, assets, and brand reputation.
• Contribute to the production of intelligence reporting, threat trend analysis, and operational risk assessments that support proactive threat management, stakeholder awareness, and informed security decision‑making across the organization.
• Monitor and assess emerging threat trends, tactics, techniques, and procedures (TTPs), producing written intelligence assessments that support proactive threat management and maintain a forward‑looking view of the corporate security threat landscape.
• Act to safeguard people, assets, and business operations through timely and responsible decision‑making.
• Ensure compliance with SIE policies, procedures, and applicable global legal and regulatory requirements (such as the Digital…