Blockchain Intelligence Analyst, Transnational Crime Organizations

As a Blockchain Intelligence Analyst specializing in transnational criminal organisations at TRM Labs, you operate as a high-autonomy individual contributor using blockchain analytics, open-source and closed-source intelligence, and cryptocurrency attribution to trace the proceeds of drug trafficking, identify the networks that move them, and produce intelligence that helps TRM and its partners disrupt illicit drug activity. This is not a people-management role; you independently lead complex investigations, develop high-confidence assessments, uncover novel attribution, and raise the team's tradecraft through technical expertise and example.

What you'll do

• Produce finished intelligence on transnational criminal organisations, vendors, facilitators and laundering pathways, including actor profiles, lead packages and attribution assessments suitable for investigative, executive and partner audiences.
• Lead complex end-to-end blockchain investigations from initial seed indicators such as addresses, transactions, exchange exposure and infrastructure leads through to full attribution.
• Trace illicit proceeds across multiple blockchains, bridges, mixers, peel chains and nested services, identifying controllers, counterparties and cash-out points including OTC desks, ATM networks and cash-to-crypto services.
• Correlate on-chain activity with OSINT, closed-source intelligence and off-chain identity or infrastructure signals to build a complete picture of how transnational criminal organisations operate and move value.
• Own investigative work-streams from discovery through validation and written production, drafting intelligence that is source-cited, auditable and operationally useful.
• Build and maintain strong working relationships with law enforcement partners so that your intelligence reflects real investigative tradecraft and gets used.
• Help strengthen TRM's transnational criminal organisations coverage by contributing new attributions, refining investigative methodology and improving repeatable workflows.
• Support briefings, partner engagements and capability-building sessions where tracing and attribution tradecraft must be explained clearly and credibly.

What you bring

• 5+ years of professional experience in blockchain intelligence, crypto investigations, financial-crime investigations, narcotics investigations, threat intelligence, or a comparable senior analytical role.
• Deep hands-on experience tracing funds across multiple blockchains and through laundering or obfuscation techniques such as mixers, chain-hopping, bridges, peel chains and layered cash-out behavior.
• Demonstrated ability to independently run complex investigations and synthesize findings into clear written intelligence products, including assessments, lead packages, fund-flow analysis and attribution reporting.
• Strong communication skills, especially the ability to turn technically complex findings into understandable, actionable intelligence for government and private-sector audiences.
• Sound judgment and curiosity, and the ability to operate in a fast-moving environment where outputs must still stand up to scrutiny.
• Experience using AI tools and large language models to accelerate research and augment analytical workflows, with the ability to critically evaluate AI-generated outputs for accuracy and relevance.

Nice to have

• Experience in government, national security, law enforcement, or a mature private-sector investigations or threat intelligence program.
• Familiarity with darknet markets, drug-trafficking networks, OTC and ATM laundering.
• Familiarity with OSINT and combining blockchain activity with off-chain signals and adversary behavior.
• Comfort with modern investigative tooling, including AI and structured data environments such as TRM, Maltego, Palantir or similar platforms.

About TRM Labs

TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM's platforms enable investigators to trace illicit activity, build cases, and construct operating pictures of threat networks. TRM is a Series C company with $220M in total funding backed by Goldman Sachs, Bessemer, Y Combinator, Thoma Bravo, and others, headquartered in San Francisco with hubs in Los Angeles, New York, Washington D.C., London, and Singapore.