Senior Blockchain Threat Intelligence & Incident Lead

Jobicy; Singapore; Remote; SGD 179,000 - 231,000; Full time

Job summary

TRM Labs is seeking a Senior / Staff Threat Intelligence Analyst to own the hacks function end-to-end. You will lead rapid incident triage, cross-functional war rooms, and customer communications, with a small contractor team on rotation.

Deep on-chain tracing across BTC, EVM, TRON, and Solana is required. You will partner with Data Science and Engineering to build AI-assisted workflows and attribution systems for tracking stolen funds, operating in a fast-moving, on-call environment.

Qualifications

• 5+ years of professional experience in blockchain intelligence, crypto investigations, cyber threat intelligence, incident response, or a closely related field.
• Owned incident response in a high-stakes environment (exchange, security firm, incident response, or CTI team) with war rooms and incident reports.
• Strong blockchain tracing across BTC, EVM, TRON, Solana, including bridges, cross-chain swaps, and mixers.
• Understands DeFi, bridge, and exchange exploits and attacker behavior after theft.
• Applied AI fluency; building AI-assisted or agentic workflows and validating outputs.
• Experience managing contractors or leading a small team.
• Clear written briefs from technical deep-dives to executive summaries.
• Hands-on and accountable: does the hardest work and coordinates as needed.

Responsibilities

• Take command when a big hack breaks and lead the response (triage, cross-team coordination, communications, incident report).
• Ensure major hacks are visible to customers within hours of credible public reports, around the clock.
• Keep hack data complete and accurate with entity, addresses, date, amount, and type.
• Design scalable attribution workflows with Data Science and Engineering input.
• Build AI-enabled tools and agents while maintaining human quality control.

Skills

Blockchain intelligence

Crypto investigations

Cyber threat intelligence

Incident response

On-chain tracing

DeFi security

Cross-chain analytics

AI-assisted analysis

Threat reporting

Team leadership

Education

Bachelor’s degree or equivalent

Job description

TRM Labs is seeking a Senior / Staff Threat Intelligence Analyst to own the hacks function end-to-end. You will lead rapid incident triage, cross-functional war rooms, and customer communications, with a small contractor team on rotation.

Deep on-chain tracing across BTC, EVM, TRON, and Solana is required. You will partner with Data Science and Engineering to build AI-assisted workflows and attribution systems for tracking stolen funds, operating in a fast-moving, on-call environment.