Remote Cyber Threat Intelligence Analyst — Scams

TRM Labs; Northern (KY); Hybrid; USD 120,000 - 160,000; Full time

Job summary

TRM Labs is seeking a Cyber Threat Intelligence Analyst to lead infrastructure-driven investigations and campaign mapping for scam networks. You will synthesize CTI data, on-chain and OSINT sources, to produce actionable intelligence for law enforcement and partners.

You will own the intelligence cycle end to end, collaborating with engineering and product, while focusing on fast disruption and accurate attribution in a remote environment.

Qualifications

• 5+ years in cyber threat intelligence or threat infrastructure analysis
• Experience pivoting from indicators to campaigns
• Experience producing actionable intel for government or law enforcement
• Proficient with CTI tooling and data sources (DNS, WHOIS, certificates)

Responsibilities

• Own the intelligence cycle end to end with limited supervision
• map infrastructure to campaigns and clusters
• Develop detection rules and automation to surface malicious infrastructure
• Produce defensible targeting packages for external partners
• Collaborate with data, engineering and product teams to sharpen collection capabilities

Skills

Infrastructure attribution

Campaign tracking

CTI tooling

Detection rules

Automation

Attribution tradecraft

Tools

Passive DNS

WHOIS

Certificate fingerprinting

Job description

TRM Labs is seeking a Cyber Threat Intelligence Analyst to lead infrastructure-driven investigations and campaign mapping for scam networks. You will synthesize CTI data, on-chain and OSINT sources, to produce actionable intelligence for law enforcement and partners.

You will own the intelligence cycle end to end, collaborating with engineering and product, while focusing on fast disruption and accurate attribution in a remote environment.