Senior Threat Intelligence Lead - Blockchain & Hack Response

Technology Resource Management; United States; Hybrid; USD 150,000 - 230,000; Full time

Job summary

TRM Labs is seeking a Senior / Staff Threat Intelligence Analyst to lead the hacks function within the Primary Intelligence organization. You will own the end-to-end response to major hacks, from triage to customer communications, while guiding a small contractor team and coordinating with Data Science and Engineering on automation.

The role requires 5+ years in blockchain intelligence or related fields, hands-on incident response in high-stakes environments, and strong AI fluency to validate

Qualifications

• 5+ years of professional experience in blockchain intelligence, crypto investigations, cyber threat intelligence, incident response, or a closely related field.

Responsibilities

• Take command when a big hack breaks and act as a leader. Run the response: triage, coordination across teams, internal and customer communications, and the incident report afterwards.
• Get every major hack into TRM fast. Make sure every major hack is visible to customers within hours of the first credible public report, around the clock.
• Keep TRM's hack data complete and accurate. Every hack, at any size, is recorded with its entity, theft addresses, date, amount, and hack type.
• Follow the money at scale. Design the system, with our Data Science and engineering teams, that carries hack-specific attribution downstream as stolen funds move.
• Build the machine with AI. Leverage AI to build the tools and agents to automate key parts of hacks analysis and response, while ensuring human quality control over every output.
• Explain how it happened. Root-cause the most important hacks and publish best-in-industry technical analysis that makes TRM the first source cited.
• See the next one coming. Build approaches that spot vulnerable contracts before they are exploited, and get them into our product.

Skills

Blockchain tracing

Incident response

AI fluency

Team leadership

Technical writing

Clear briefs

Job description

TRM Labs is seeking a Senior / Staff Threat Intelligence Analyst to lead the hacks function within the Primary Intelligence organization. You will own the end-to-end response to major hacks, from triage to customer communications, while guiding a small contractor team and coordinating with Data Science and Engineering on automation.

The role requires 5+ years in blockchain intelligence or related fields, hands-on incident response in high-stakes environments, and strong AI fluency to validate