Senior Threat Intelligence Analyst, Crypto

Build a Safer World.

TRM Labs provides blockchain analytics and AI solutions to help law enforcement, national security agencies, financial institutions, and cryptocurrency businesses detect, investigate, and disrupt crypto‑related fraud and financial crime. TRM’s blockchain intelligence and AI platforms trace funds, identify illicit activity, build cases, and construct threat pictures.

The threats TRM’s analysts disrupt fund violence, enable exploitation, and undermine global security. As a Senior Threat Intelligence Analyst, Crypto, you will drive TRM’s collection, analysis, and reporting on the actors and networks behind these harms, applying threat intelligence tradecraft to identify, track, and expose adversaries operating in the crypto ecosystem.

• Develop novel collection strategies and analytic methodologies to surface threat actor activity that isn’t visible through conventional tooling or open databases.
• Conduct proactive threat hunting across on‑chain and off‑chain data sources to identify emerging illicit networks before they are widely known.
• Track, analyze, and report on threat actors, campaigns, and illicit networks operating in the crypto ecosystem.
• Identify and assess adversary TTPs, infrastructure, and behavior to support detection and attribution efforts.
• Leverage OSINT and other intelligence methods to uncover hidden threats and generate actionable insights.
• Produce high‑quality intelligence that reaches law enforcement and government partners worldwide.
• Collaborate with data, engineering, and product teams to enhance TRM’s intelligence capabilities.
• Be a leading voice on the illicit use of crypto and blockchain technologies.

• Proven experience in threat intelligence, cyber intelligence, or national security intelligence roles.
• Fluency in Russian, Chinese (Mandarin or Cantonese), or Arabic, with the ability to conduct research and analysis in that language.
• Track record of generating net‑new intelligence, developing original hypotheses, pursuing non‑obvious investigative threads, and surfacing findings that others miss.
• Working knowledge of blockchain and cryptocurrency, including transaction fundamentals and on‑chain tracing concepts.
• Experience tracking threat actors, cybercrime groups, or nation‑state activity, including analysis of TTPs, infrastructure, and behavioral patterns for attribution.
• Strong analytical and communication skills with the ability to produce clear, actionable intelligence reports at high trade‑craft standards.
• Ability to collaborate cross‑functionally with technical and non‑technical stakeholders.i>
• Comfort operating in ambiguous, low‑signal environments and owning the analytic path forward.
• Hands‑on experience with blockchain analysis tools such as Chainalysis Reactor, Elliptic, or similar.
• Relevant certifications (e.g., GIAC, CEH, Chainalysis Reactor Certification) or a background in cybersecurity, intelligence, or investigations.