Senior Threat Intelligence Analyst, Hacks

About TRM Labs

TRM Labs is dedicated to creating a safer world by delivering AI-enhanced intelligence tools that assist public and private sectors in tracking and disrupting criminal activity. Our platforms empower investigators to trace illegal operations, assemble cases, and develop comprehensive threat network insights. Leading organizations worldwide count on TRM to enhance security and safety.

Role Overview

As a Senior Threat Intelligence Analyst focusing on hacks, you will be responsible for managing the complete response when blockchain protocols are compromised. Your role involves quickly identifying affected addresses and tracing stolen funds to support timely protections for our customers. You will lead the hacks category, overseeing key metrics, developing systems, and managing a dedicated contractor team working 24/7 to ensure rapid and accurate hack incident management.

Key Responsibilities

• Take leadership in major hack incidents by directing triage, coordinating cross-functional teams, communicating internally and with clients, and compiling incident reports.
• Ensure major blockchain hacks are incorporated into TRM’s system within hours of credible public disclosure, providing timely visibility to clients at all times.
• Maintain thorough and precise hack data records, capturing details such as entities involved, theft addresses, dates, amounts, and hack types.
• Collaborate with Data Science and Engineering teams to architect systems that track stolen assets as they move across blockchain networks.
• Leverage AI technologies to develop automated tools and agents that enhance hack analysis and response processes while maintaining human oversight for quality control.
• Conduct root-cause analyses of significant hacks and author in-depth technical reports that establish TRM as a leading source on security incidents.
• Develop predictive methodologies to identify vulnerable smart contracts before exploitation and integrate findings into our products.

Qualifications

• Over 5 years of relevant professional experience in blockchain intelligence, cryptocurrency investigations, cyber threat intelligence, incident response, or a closely related discipline.
• Proven experience managing incident response in high-pressure environments such as exchanges, security firms, or CTI teams including leading war rooms and communications under stress.
• Strong expertise in tracing blockchain transactions across multiple chains including Bitcoin, Ethereum Virtual Machine compatible chains, TRON, and Solana, with knowledge of bridges, cross-chain swaps, and mixers.
• Comprehensive understanding of DeFi exploits, bridge and exchange vulnerabilities, and attacker behaviors post-theft.
• Demonstrated application of AI as a force multiplier, with experience integrating AI-driven workflows, validating AI outputs, and recognizing AI limitations.
• Experience managing contractors or leading small teams effectively.
• Exceptional written and verbal communication skills, able to produce technical deep-dives and executive summaries.
• Highly proactive and accountable with a hands-on approach toward difficult work.

Preferred Skills

• Knowledge of smart contract reverse engineering, specifically Solidity programming.
• Background working at security auditing or blockchain analytics companies.
• Experience tracking specific, well-known hacker groups.

Team and Working Environment

You will be part of TRM's Primary Intelligence unit in the hacks function, collaborating with teams focused on nation states, cyber threat intelligence, global investigations, data science, engineering, and marketing. The role involves monthly performance reviews, weekly and cross-time-zone team syncs, leading war rooms during significant hacks, and participation in on-call rotations.

Interview Process

Applicants can expect a structured hiring process that assesses problem-solving, AI fluency, and leadership ability, including recruiter conversations, hiring manager interviews, skill-specific rounds, panel discussions, reference checks, and final offers. TRM emphasizes AI proficiency and leadership principles centered on impact, craftsmanship, and teamwork.

Company Culture and Values

TRM operates at a fast pace with a focus on ownership, adaptability, collaboration, and innovation, prioritizing impactful work at the intersection of AI, national security, and crime prevention. The team values creativity, clear communication, and rapid iteration while embracing ambiguity and high accountability.

Additional Information

TRM maintains strict policies regarding AI tool usage during interviews and ensures applicant data privacy in alignment with applicable laws. The company does not accept unsolicited agency resumes and commits to providing accommodations for candidates with disabilities.

Compensation: $140,000 to $168,000 per year.