Global Investigator (Triage)

Overview

Global Investigator on the triage team, serving as the first line of operational response in a crypto disruption pipeline. Processes inbound victim complaints, validates AI investigation tooling output, and routes cases to investigative workflows that lead to frozen scam proceeds, takedowns, and recovered assets.

What you'll do

• Validate and route hundreds of complaint dispositions each week, feeding a live asset-recovery pipeline.
• Use AI first-pass output as a co-pilot and catch errors such as false positives, merged syndicates, and misclassified scam patterns before they propagate downstream.
• Enrich complaint selectors with commercial data-source integrations and on-chain and off-chain checks to decide what is actionable.
• Own clean shift handoffs so the around-the-clock operation never drops a lead, keeping the US-hours queue moving for the rest of the triage team.
• Feed structured signal back to engineering on where the AI triage model misses.
• Hold the disposition decision: freeze, escalation, recovery handoff, victim notification, or close.

What you'll need

• Investigative or analytical experience in the private or public sector.
• 1-3 years of experience is fine.
• Strong AI fluency: comfort using AI tools as a daily co-pilot to work a high-volume queue, with the judgment to know when output is wrong.
• Baseline crypto knowledge and the ability to recognize threat types such as investment scams, pig-butchering, and ransomware.
• Ability to prioritize and work independently, with clear written handoffs, during hours when the rest of the team is offline.
• Receptive to feedback from experienced tracers and engineers, and motivated to improve the triage process.
• US citizenship required.
• Ability to obtain Public Trust clearance.

Nice to have

• Deep crypto expertise is not required; the role is designed to grow candidates toward it.

Details

• Location: United States; distributed/remote role with no routine onsite requirement.
• Primary coverage during US business hours in local time zone, with standard North American EST business hours preferred and overlap for daily handover to and from other regions.
• Formal weekly on-call rotation for high-priority events (active hacks, law-enforcement support, time-sensitive matters), with occasional weekend coverage; remote standby.
• Travel: minimal, occasional team or mission offsites.