Senior Ransomware Blockchain Intelligence Analyst

Coinscapture; Northern (KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

TRM Labs is seeking a Senior Blockchain Intelligence Analyst to lead high-visibility investigations into ransomware activity, tracing funds across blockchains, analyzing threat networks, and delivering defensible intelligence for investigations and partners.

You will work with cyber threat intelligence, OSINT, and AI tooling in a fast-paced, on-site US environment, mentoring peers and shaping methodologies while maintaining rigorous standards.

Qualifications

• 5–8+ years of professional experience in blockchain intelligence or cybercrime analysis.
• Deep hands-on blockchain tracing across multiple networks and laundering techniques.
• Strong investigative tradecraft and ability to produce written intelligence.
• Familiarity with OSINT, threat intelligence, and cross-domain signals.
• Excellent written and verbal communication; ability to brief senior audiences.
• Experience using AI tools to accelerate research while ensuring accuracy.

Responsibilities

• Lead end-to-end blockchain investigations from seed indicators to full attribution.
• Produce actionable intelligence for investigations, disruption opportunities, and partner audiences.
• Trace ransomware-related funds across blockchains, bridges, and cash-out services.
• Correlate on-chain activity with OSINT and off-chain signals to map adversary behavior.
• Draft source-cited, auditable intelligence products and support internal/partner briefings.

Skills

Blockchain tracing

Threat intelligence

OSINT integration

Attribution reporting

Written communication

AI fluency

Mentoring

Critical thinking

Tools

Maltego

Palantir

TRM tools

Job description

TRM Labs is seeking a Senior Blockchain Intelligence Analyst to lead high-visibility investigations into ransomware activity, tracing funds across blockchains, analyzing threat networks, and delivering defensible intelligence for investigations and partners.

You will work with cyber threat intelligence, OSINT, and AI tooling in a fast-paced, on-site US environment, mentoring peers and shaping methodologies while maintaining rigorous standards.