Safety Threat Investigator, Safety Investigations

As a Safety Threat Investigator on the Safety Investigations team, you will primarily support Roblox’s Core Investigations capability: the operational backbone for repeatable, high-sensitivity matters that require speed, consistency, evidence discipline, and strong documentation. You will independently manage investigations from intake through resolution and produce clear, defensible work product that supports high-confidence safety decisions.

You will also identify when a matter requires deeper attribution, network-centric analysis, cross-platform research, proactive threat hunting, or externally meaningful work product, and partner with or escalate to Specialized Investigations as appropriate. At the CL9 level, you will own a defined safety-risk domain or pod-level workstream, improve investigative processes and standards, serve as a subject-matter expert, and mentor other investigators with limited day-to-day oversight.

Please note: This role may require reviewing graphic, controversial, and offensive content in accordance with Roblox’s handling policies. It may also require participation in an on-call rotation during weekends and holidays.

You Will

• Own repeatable, high-sensitivity investigations involving serious safety threats, including child exploitation, violent extremism, organized fraud, compromised accounts, coordinated abuse, and other high-risk matters.
• Apply structured investigative methods, evidence checklists, common templates, and approved data pulls to produce timely and consistent case outcomes.
• Gather, preserve, analyze, and corroborate evidence while maintaining accurate provenance, confidentiality, and auditability.
• Define investigative questions, scope, hypotheses, evidence plans, milestones, risk controls, and exit criteria for sensitive or ambiguous matters.
• Conduct focused account, entity, and timeline linkage as needed, and identify when a case requires deeper attribution, network mapping, or cross-platform investigation.
• Escalate cases to Specialized Investigations when they develop meaningful attribution complexity, broader network risk, external actionability, or a need for deeper synthesis.
• Prepare clear case summaries and standardized downstream work product for partners such as Legal, Safety Intelligence, Trust & Safety Operations, Law Enforcement Operations, or NCMEC, as appropriate.
• Track recurring patterns, operational pain points, and escalation trends, and translate findings into recommendations for Policy, Product, Engineering, Detection, Legal, and Safety Operations.
• Lead or contribute to durable improvements such as investigation playbooks, evidence standards, intake criteria, triage processes, tooling requirements, and quality-review mechanisms.
• Represent Safety Investigations with cross-functional stakeholders, explain and defend investigative decisions, navigate disagreement, and maintain alignment on sensitive matters.
• Mentor investigators, provide constructive feedback on casework, and raise the team’s standards for investigative rigor, documentation, and inclusive collaboration.
• Maintain strong case hygiene, document decisions and approvals, and ensure investigations are closed with clear outcomes, residual-risk ownership, and follow-up actions.
• Deliver rigorous, timely, and consistent outcomes on high-sensitivity investigations.
• Apply sound judgment in triage, lane assignment, escalation, and case closure.
• Improve the team’s investigative methods, operating processes, templates, and quality standards.
• Convert case findings into concrete safety improvements and upstream action.
• Build trust with cross-functional partners and mentor others to strengthen the team’s investigative capability.

You Have

• 4+ years conducting sensitive investigations involving severe safety, abuse, fraud, security, threat, or other high-risk matters.
• Demonstrated ability to independently manage investigations end-to-end, including intake, scoping, evidence development, analysis, findings, recommendations, and follow-through.
• Experience using SQL and/or Python, large datasets, and open-source intelligence in an investigative context.
• Strong investigative judgment and the ability to distinguish facts, inferences, allegations, unknowns, assumptions, and analytical conclusions.
• Experience with attribution, account or entity linkage, network analysis, open-source intelligence, external intelligence, or cross-platform research.
• Strong written and verbal communication skills, with the ability to produce clear, concise, and defensible work product for investigators, leadership, Legal, Product, Engineering, and external-facing stakeholders.
• Ability to turn ambiguous questions into precise investigation plans and drive complex, multi-week or multi-quarter initiatives with minimal oversight.
• Systems-oriented thinking and the ability to connect individual cases to policy, product, process, detection, legal, reputational, and user-trust considerations.
• Experience influencing partners and creating alignment in high-stakes or time-sensitive situations.
• Demonstrated mentorship, informal leadership, or subject-matter expertise that helps other investigators grow.
• Sound judgment, discretion, curiosity, resilience, and a commitment to evidence-based, fair, and proportionate investigations.