Cybersecurity Reach Foundation
Frontline · Scam Response UnitOpen

Field Investigator

Take one scoped question about a scam, answer it with evidence, and write the piece we publish.

Time
8–10 hours a week, including about 20–30 minutes of daily triage
Where
Remote
Reports to
Frontline Lead
Apply for this role

What the work looks like

A typical assignment: someone reports a text saying they owe an unpaid toll. You open the link inside one of our isolated investigation machines, save the page, look up who registered the domain and where it is hosted, and check our data for other sites using the same kit. Then you write up what you found, what you could not confirm, and what people should do, and send it to your lead for one review. Each assignment has a clear question and a point where you stop.

What you’ll do

  • Answer one scoped question at a time, to a stopping point agreed with your lead
  • Gather and preserve the evidence as you go
  • Separate what the evidence shows from what you think it means
  • Test the obvious alternative explanation before you conclude
  • Write the investigation that gets published
  • Spend about 20–30 minutes a day reviewing incoming reports with the rest of the team, and flag promising leads to your team lead.

What you’ll bring

  • Curiosity and patience with messy, incomplete information
  • Clear, careful writing
  • Comfort looking up domains, websites and online accounts (we'll show you our tools)

What you’ll get

  • Published work with your name on it
  • Hands-on time with real investigation tooling and data
  • A path to running your own investigations

Apply

Apply for the Field Investigator role

Five minutes. We read every application and get back to you.

Applying for Field Investigator · Frontline