Senior Threat Intelligence Analyst, Hacks
"About The Role"
About This Role
TRM Labs builds AI-powered intelligence tools that empower investigators worldwide to trace illicit activity across distributed ledgers and disrupt criminal networks. This role puts you at the center of our hacks intelligence function — the person who defines how TRM detects, tracks, and explains major crypto exploits. You'll have full ownership of outcomes, a small contractor team to run, and the freedom to design the systems that get it done.
What You'll Be Doing
Lead incident response when major hacks hit — coordinating triage, cross-team communication, and post-incident reporting
Ensure every significant exploit is surfaced to customers within hours of public disclosure, 24/7
Maintain a complete, accurate record of hack events, including theft addresses, entities, amounts, and attack types
Partner with Data Science and Engineering to build systems that trace stolen funds across chains as attribution data flows downstream
Deploy AI-driven agents and automation to accelerate hacks analysis while maintaining rigorous human oversight
Publish authoritative technical breakdowns of major breaches that establish TRM as the go-to source
Build predictive models that flag vulnerable smart contracts before exploitation occurs
What We're Looking For
5+ years in blockchain intelligence, crypto investigations, cyber threat intelligence, or incident response
Proven track record leading incident response in high-pressure environments — war rooms, executive communications, post-mortems
Deep blockchain tracing expertise across BTC, EVM chains, TRON, and Solana, including bridges, cross-chain swaps, and mixers
Strong understanding of DeFi, bridge, and exchange exploit mechanics and attacker behavior post-theft
Hands-on experience building AI-assisted or agentic analytical workflows, with the ability to validate and troubleshoot outputs
Experience managing contractors or small teams, with clear, confident communication across technical and executive audiences
Bonus Points
Solidity-based smart contract reverse-engineering skills
Background at a security auditing firm or blockchain analytics company
Familiarity tracking specific known hacker groups and their on-chain patterns
Why Join Us
Own a high-visibility function at the forefront of crypto security and distributed systems protection
Collaborate with world-class Cyber Threat Intelligence, Data Science, and Investigations teams
Shape how AI transforms blockchain threat intelligence from the ground up
Fully remote role with real autonomy, meaningful impact, and a direct line to making web3 safer for millions
Ready to Apply?
To submit your application for this position, please visit TRM Labs, Inc.'s official website and follow their application process.