Trust Investigator - Scaled Investigations

Job Description

At LinkedIn, our approach to flexible work is centered on trust and optimized for culture, connection, clarity, and the evolving needs of our business. The work location of this role is hybrid, meaning it will be performed both from home and from a LinkedIn office on select days, as determined by the business needs of the team.

This position will be hybrid in LinkedIn’s Omaha, NE office.

About the Team

We are seeking a Trust Investigator to join our Scaled Investigations Team. This role applies investigative tradecraft at scale to uncover coordinated, persistent, and high-impact abuse targeting LinkedIn members, and to drive the resulting enforcement and detection improvements. The work spans detection and mitigation of fake account networks, account takeover and credential abuse, payment and subscription fraud, and the scam infrastructure behind them.

Investigations generally begin with a single lead and expand through pivot analysis across account, device, and behavioral signals. Investigators own this work from the initial lead through enforcement, and surface the detection gaps that allowed the abuse to reach members. Their findings identify the product and model gaps that inform engineering investment.

Investigators on this team work with platform-scale data and have latitude to build their own tooling. We are looking for a self-starter who takes ownership over their work and enjoys being part of a fast-paced, collaborative, global team that values results.

Key Responsibilities

• Lead investigations into coordinated campaigns and abuse networks, expanding from an initial lead through pivot analysis across account, device, and behavioral signals.

• Track persistent abuse patterns and the actors behind them, including how they adapt after enforcement.

• Proactively hunt for undetected abuse and generate investigative leads using internal platform signals, open-source research, and threat intelligence.

• Define and validate detection logic from case findings, partner with Engineering, Product teams, and Data Science on implementation, and evaluate detection performance after deployment.

• Drive large-scale enforcement and takedown actions, including backtesting detection logic, validating targets before enforcement, and measuring false positives after action.

• Triage and route front-line signals and alerts, and provide escalation support and investigative analysis on high-severity incidents.

• Produce threat intelligence reports, briefings, and risk recommendations that identify product, policy, and model gaps exposed by investigations and inform strategic investment in our defenses.

• Use AI-assisted workflows, agents, and notebooks to scale investigation and analysis, and evaluate the quality and accuracy of AI output.

• Write SQL queries to access and analyze large-scale platform data, identify abuse patterns, test investigative hypotheses, and support enforcement and detection decisions.

• Build tooling, playbooks, and documentation that scale investigative methodology across the team.

Qualifications

Basic Qualifications

• Bachelor's Degree in cyber security, criminal justice or other related technical disciplines, or equivalent technical experience

• 3+ years of experience investigating account, behavior, or content abuse, preferably within a trust and safety, social media, or online platform context

• Experience independently writing SQL queries to access and analyze large-scale datasets in support of investigations

• Experience using Python or another scripting language to automate investigative workflows.

• Experience with open-source investigation techniques and familiarity with a variety of internet research tools

• Experience synthesizing complex data sets into clear and actionable insights for diverse audiences

Preferred Qualifications

• BS and 5+ years of relevant work experience, MS and 4+ years of relevant work experience, or PhD and 2+ years of relevant work experience. 

• 5+ years of experience in threat investigations, preferably within a trust and safety, social media, or online platform context

• A combination of investigative and technical skills, with the ability to define detection logic from case findings and work with Engineering, Product teams, and Data Science to implement detection rules

• Demonstrated AI skill development, including prompt and context engineering, agent use, and quality and accuracy review of AI output, with a record of applying AI to improve investigative workflows

• Experience conducting proactive threat and fraud hunting against large scale threats

• Experience with enforcement at scale, including bulk action preparation and false positive validation

• Technical acumen and the ability to translate data and investigative outcomes into actionable insights for Engineering, AI partners, and senior leadership

• Excellent communication skills, with the ability to inspire and influence across all levels of the organization

• Familiarity with frameworks such as MITRE ATT&CK and cyber kill chain, and the ability to adapt them to platform abuse

Suggested Skills

• Trust Investigations of coordinated & complex abuse

• Platform Abuse Prevention

• Threat Hunting

• AI-Assisted Investigation

• Data Analysis (SQL, Python)

You will Benefit from our Culture

We strongly believe in the well-being of our employees and their families. That is why we offer generous health and wellness programs and time away for employees of all levels. LinkedIn is committed to fair and equitable compensation practices.

The pay range for this role is $109,000 to $180,000 Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to skill set, depth of experience, certifications, and specific work location. This may be different in other locations due to differences in the cost of labor.

The total compensation package for this position may also include annual performance bonus, stock, benefits and/or other applicable incentive compensation plans. For more information, visit https://careers.linkedin.com/benefits.

Additional Information

Equal Opportunity Statement 

We seek candidates with a wide range of perspectives and backgrounds and we are proud to be an equal opportunity employer. LinkedIn considers qualified applicants without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, marital status, pregnancy, sex, gender expression or identity, sexual orientation, citizenship, or any other legally protected class.

LinkedIn is committed to offering an inclusive and accessible experience for all job seekers, including individuals with disabilities. Our goal is to foster an inclusive and accessible workplace where everyone has the opportunity to be successful.

If you need a Reasonable Accommodation to search for a job opening, apply for a position, or participate in the interview process, connect with us and describe the specific Accommodation requested for a disability-related limitation.
Fill out an Accommodation request here: https://app.smartsheet.com/b/form/b660a0327d044969abfd7a4e73d15c36

Reasonable accommodations are modifications or adjustments to the application or hiring process that would enable you to fully participate in that process. Examples of reasonable accommodations include but are not limited to:

• Documents in alternate formats or read aloud to you
• Having interviews in an accessible location
• Being accompanied by a service dog
• Having a sign language interpreter present for the interview

A request for an accommodation will be responded to within three business days. However, non-disability related requests, such as following up on an application, will not receive a response.

LinkedIn will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by LinkedIn, or (c) consistent with LinkedIn's legal duty to furnish information.

San Francisco Fair Chance Ordinance ​

Pursuant to the San Francisco Fair Chance Ordinance, LinkedIn will consider for employment qualified applicants with arrest and conviction records.

Pay Transparency Policy Statement ​

As a federal contractor, LinkedIn follows the Pay Transparency and non-discrimination provisions described at this link: https://lnkd.in/paytransparency.

Global Data Privacy Notice and Compliance Posters for Job Candidates 

Please use this link to access documents that provide information about how LinkedIn handles the personal data of employees and job applicants, as well as the E-Verify Participation Notice and the Department of Justice Immigrant and Employee Rights Section Right to Work posters: https://www.linkedin.com/legal/candidate-portal.