What the work looks like
When a new case comes in, you capture the scam page before it disappears: a full archive, screenshots and a PDF, each with a hash and a timestamp. When someone reports a suspicious attachment or download, you hash it and check it against malware lookup services without ever opening it. You keep each case's evidence in order, so the investigator can cite it and we can show exactly what we saw and when.
What you’ll do
- Preserve pages, files and messages from new cases
- File each item with its hash, source and date
- Hash and look up every file attached to a report — without opening it
- Keep the evidence trail clean enough to publish from
- Spend about 20–30 minutes a day reviewing incoming reports with the rest of the team, and flag promising leads to your team lead.
What you’ll bring
- Attention to detail and a careful, repeatable process
- Basic familiarity with hashes, file types and web archiving (we'll teach the rest)
What you’ll get
- Published work with your name on it
- Hands-on time with real investigation tooling and data
- A path to running your own investigations