Senior Cyber Threat Response Advisor
"Build a Safer, More Secure Digital World"
About This Role
TRM Labs sits at the intersection of distributed ledger technology, blockchain forensics, and real-world threat disruption. Our Cybercrime team — part of the Primary Intelligence organization — gives governments, ISACs, and critical-infrastructure defenders the actionable intelligence they need to stop attacks before they escalate. This is a hands-on, senior individual-contributor role: no layers between you and the mission, just high-stakes analysis against some of the most consequential targets in the cyber threat landscape, including those tied to crypto-enabled extortion and decentralized attacker infrastructure.
What You'll Be Doing
Own end-to-end remediation for assigned critical-infrastructure sectors — from first signal to actionable notification
Fuse OSINT, attack-surface discovery, and threat-actor collection (including on-chain and crypto-related indicators) into validated, defensible findings
Build and refine AI-driven workflows that scale your tradecraft across TRM's broader intelligence tooling
Map C2 infrastructure, malware families, and TTPs to show how threats — including those leveraging DeFi and crypto rails for laundering ransom payments — actually operate
Triage large indicator and exposure datasets, clustering infrastructure into clear, prioritized findings
Deliver finished intelligence products: exposure notifications, actor profiles, IOC packages, and infrastructure attributions
Act as a senior advisor to other analysts, elevating quality and sharing tradecraft across active cases
Partner directly with critical-infrastructure entities, government agencies, and ISACs on live threats and referrals
What We're Looking For
5+ years in cyber threat intelligence, incident response, or a related analytical discipline
Direct experience serving as primary point of contact for an external organization during a live incident
Proven ability to independently drive complex, ambiguous analysis to a defensible conclusion
Strong command of OSINT, infrastructure clustering, and threat-actor attribution methodologies
Clear, concise communicator capable of translating technical findings for non-technical stakeholders
Comfort operating in fast-moving, high-ambiguity environments typical of blockchain and crypto-crime investigations
Bonus Points
Experience tracing illicit crypto flows, smart contracts exploits, or blockchain-based money laundering schemes
Familiarity with decentralized infrastructure, web3 protocols, or distributed systems security
Government, ISAC, or critical-infrastructure sector experience
Background building or deploying AI-assisted analytical tooling
Why Join Us
Competitive compensation, equity, and benefits reflecting your seniority and impact
Fully remote, flexible culture built around trust and autonomy
Direct, measurable impact on global cybersecurity and the fight against blockchain-enabled crime
Access to cutting-edge AI and distributed ledger intelligence tools, plus continuous learning in an industry-defining space
Ready to Apply?
To submit your application for this position, please visit TRM Labs, Inc.'s official website and follow their application process.