On-Chain Threat Hunter - Blockchain Intelligence

TRM Labs; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

TRM Labs is hiring a Blockchain Intelligence Analyst to lead collection, assessment, and reporting on actors behind illicit activities in on-chain and off-chain data sources. You will drive investigations across threat networks, sanctions, and financial flows, coordinating with engineers and policy teams.

The role demands experience in threat or blockchain intelligence, strong research skills, and the ability to operate in ambiguous environments with ownership and urgency.

Qualifications

• Proven experience in threat intelligence, cyber intelligence, or blockchain intelligence roles.
• Native-level fluency in Russian, Chinese, Korean, or Spanish strongly preferred.
• Track record of generating net-new intelligence.
• Background in sanctions enforcement, financial intelligence, or corporate investigations preferred.
• Working depth and knowledge of blockchain and cryptocurrency.
• Ability to analyze corporate ownership structures and cross-border fund flows.
• Experience tracking threat actors, nation-state activity, or sanctioned entities.
• Strong research and communication skills.
• Comfort operating in ambiguous environments with ownership mindset.

Responsibilities

• Develop novel collection strategies and investigative methodologies to surface threat actor activity.
• Conduct targeted and proactive threat hunting across on-chain and off-chain data sources.
• Map financial networks used for sanctions evasion and connect them to on-chain activity.
• Track, assess, and report on threat actors, campaigns, and illicit networks.
• Identify and evaluate adversary TTPs, infrastructure, and behavior with cross-functional teams.
• Leverage OSINT and other intelligence methods to uncover hidden threats.
• Produce high-quality intelligence for law enforcement and government partners.

Skills

Threat intelligence

Blockchain knowledge

Research ability

Analytical thinking

Cross-functional collaboration

Disambiguation under ambiguity

Job description

TRM Labs is hiring a Blockchain Intelligence Analyst to lead collection, assessment, and reporting on actors behind illicit activities in on-chain and off-chain data sources. You will drive investigations across threat networks, sanctions, and financial flows, coordinating with engineers and policy teams.

The role demands experience in threat or blockchain intelligence, strong research skills, and the ability to operate in ambiguous environments with ownership and urgency.