All-Source Intelligence Analyst (DC, MD, VA only)

As an All-Source Intelligence Analyst at TRM Labs, you lead targeting-driven investigative work on the Scam Disruption team. You'll take legal process to the ground, follow the data wherever it leads, and deliver actionable intelligence to law enforcement partners. You operate the intelligence flywheel daily, fusing on-chain and off-chain data to build operational pictures that help dismantle scam operations targeting pig butchering syndicates, romance fraud networks, and investment scam operations.

What you'll do

• Run legal process end-to-end against scam infrastructure and convert returns into targeting-ready intelligence for TRM's teams and law enforcement partners
• Trace scam compounds geographically and operationally by combining on-chain attribution with off-chain telemetry, OSINT, and commercially available data to identify operators, controllers, and movement patterns
• Work the intelligence flywheel operationally by processing returns at high volume and feeding victim and operator data into TRM's intelligence and product pipelines
• Find the seams by pivoting from a single victim into uncovering the operation and multiplying leads
• Partner with the Threat Intelligence Analyst and the All-Source Lead to translate disruption strategy into targeting packages that influence federal investigations

What you bring

• 3 to 5 years of all-source investigative or targeting experience, either in federal law enforcement (e.g., FBI, HSI, IRS-CI, Secret Service), Intelligence Community all-source analysis, or mission-aligned private sector equivalent
• Personal experience drafting and working returns from US legal process, with knowledge of how to operationalize the data
• Demonstrated ability to pivot from a single point to a network view and identify operators behind operations
• Ability to correlate disparate data sources to generate defensible target packages
• Strong written communication skills, including ability to write memos, attribution write-ups, and federal-style leads that are actionable
• AI fluency (required), with examples of how AI tools have impacted your analytical work
• US citizenship
• Location in the Washington, D.C., Maryland, or Virginia area (periodic in-person collaboration and travel may be required)

Nice to have

• Cryptocurrency and on-chain analysis experience

What we offer

• Work on a distributed team with an async-first approach via Slack and Notion, plus structured syncs for alignment
• High autonomy and low bureaucracy, working directly with analysts, engineers, and customers who depend on your output
• Weekly team syncs to align targeting priorities and review disruption opportunities
• Daily async standups via Slack on active work, returns, and target packages in flight

About TRM Labs

TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. The company enables investigators to trace illicit activity, build cases, and construct operating pictures of threat networks. TRM is a Series C company with $220M in total funding, backed by Goldman Sachs, Bessemer, Y Combinator, Thoma Bravo, and others, operating as a distributed-first company with hubs in Los Angeles, San Francisco, New York, Washington D.C., London, and Singapore.