Senior Threat Intelligence Lead - Blockchain IR

TRM Labs; Singapore; On-site; SGD 180,000 - 280,000; Full time

Job summary

TRM Labs is seeking a Senior/Staff Threat Intelligence Analyst to lead the hacks category, drive metrics, and own end-to-end response when a protocol is drained or an exchange is compromised.

You will work with data science and engineering, apply AI to automate analyses, and publish technical insights. This role requires 5+ years in blockchain intelligence and proven incident leadership.

Qualifications

• 5+ years of professional experience in blockchain intelligence, crypto investigations, cyber threat intelligence, incident response, or a closely related field.
• Owned incident response in a high-stakes environment (war rooms, incident reports, communications under pressure).
• Strong blockchain tracing across major chains (BTC, EVM, TRON, Solana), including bridges, cross-chain swaps, and mixers.
• Understands DeFi, bridge and exchange exploits and attacker behavior post-theft.
• Applied AI fluency; able to validate outputs and treat AI as a force multiplier.
• Experience managing contractors or leading a small team.
• Clear written briefs from technical deep-dives to executive summaries.
• Hands-on and highly accountable: does the hardest work, not just coordinates it.

Responsibilities

• Take command when a big hack breaks and lead the response: triage, coordination across teams, internal and customer communications, and the incident report afterwards.
• Get every major hack into TRM fast; ensure visibility to customers within hours of the first credible public report.
• Keep TRM's hack data complete and accurate: record entity, theft addresses, date, amount, and hack type.
• Follow the money at scale; design the system with Data Science and engineering to carry hack-specific attribution downstream as stolen funds move.
• Build the machine with AI to automate key parts of hacks analysis and response, with human quality control.
• Explain how it happened; root-cause major hacks and publish best-in-industry technical analysis.
• See the next one coming; build approaches to spot vulnerable contracts before they are exploited.

Skills

5+ years in blockchain intelligence

Incident response leadership

Blockchain tracing

Applied AI fluency

Contractor management

Clear writing

Job description

TRM Labs is seeking a Senior/Staff Threat Intelligence Analyst to lead the hacks category, drive metrics, and own end-to-end response when a protocol is drained or an exchange is compromised.

You will work with data science and engineering, apply AI to automate analyses, and publish technical insights. This role requires 5+ years in blockchain intelligence and proven incident leadership.