AI-Driven Cyber Threat Intelligence Lead

TRM; United States; Hybrid; USD 150,000 - 230,000; Full time

Job summary

TRM Labs is seeking a Staff Cyber Threat Intelligence Analyst to lead the most complex investigations on our AI Investigations platform. You will codify methods, workflows, and analytic standards, and mentor other analysts to elevate team tradecraft.

You will collaborate with engineering and data science to scale investigative capabilities, produce finished intelligence, and deliver timely, high-confidence insights to leadership and partners in a fast-paced environment.

Qualifications

• 8+ years in cyber threat intelligence, intelligence analysis, incident-driven investigations, or closely related analytical work.
• AI fluency is required — you build your own tools and agentic workflows with AI tools to automate and scale investigative work.
• A track record of raising the quality of work beyond your own cases — shaping standards and improving workflows.
• Direct experience partnering with engineering, data science, or product to make an investigative method repeatable at scale.
• Strong ability to combine direct collection and OSINT to deliver unique intelligence.
• Experience producing finished intelligence such as actor profiles, campaign reporting, attribution assessments, or infrastructure mapping.
• Judgment strong enough to guide others on evidentiary standards.
• Excellent written and verbal communication — you can package a finding for a technical analyst and for a non-technical partner.
• Comfort operating in a fast-paced environment where priorities can change quickly and ambiguity is normal.

Responsibilities

• Run high-complexity investigations end-to-end from seed indicators to attributed actors or campaigns.
• Identify new CTI collection opportunities and rapidly leverage intelligence to stay ahead of threats.
• Build the network picture around cyber threat actors including C2 infrastructure, malware families, and TTPs.
• Fuse technical indicators with OSINT and identity work, tracing findings into financial rails where relevant.
• Set the analytical standard and coach other analysts through exemplary tradecraft.
• Partner with engineering and data science to turn investigative tradecraft into scalable capability.
• Support incident responders, threat hunters, investigators, leadership, and external partners with high-quality intelligence products and briefings.

Skills

AI fluency

Cyber threat intelligence

Leadership

Cross-functional collaboration

Job description

TRM Labs is seeking a Staff Cyber Threat Intelligence Analyst to lead the most complex investigations on our AI Investigations platform. You will codify methods, workflows, and analytic standards, and mentor other analysts to elevate team tradecraft.

You will collaborate with engineering and data science to scale investigative capabilities, produce finished intelligence, and deliver timely, high-confidence insights to leadership and partners in a fast-paced environment.