Blockchain Intelligence Analyst

As a Blockchain Intelligence Analyst at TRM Labs, you will drive the collection, assessment, and reporting on the actors and networks behind threats that fund violence, enable exploitation, and undermine global security. You join a team that combines national-security-grade tradecraft with deep analytical workflows across cyber, OSINT, and blockchain-enabled threat activity, helping ensure TRM's analytical capabilities remain operationally relevant and high-quality across multiple use cases and stakeholders.

What you'll do

• Develop novel collection strategies and investigative methodologies to surface threat actor activity
• Conduct targeted and proactive threat hunting across on-chain and off-chain data sources
• Map financial networks used for sanctions evasion and connect them to on-chain activity
• Track, assess, and report on threat actors, campaigns, and illicit networks
• Identify and evaluate adversary tactics, techniques, and procedures, infrastructure, and behavior, working collaboratively with cross-functional teams
• Leverage open-source intelligence and other intelligence methods to uncover hidden threats
• Produce high-quality intelligence that reaches law enforcement and government partners worldwide

What you bring

• Proven experience in threat intelligence, cyber intelligence, or blockchain intelligence roles
• Working depth and knowledge of blockchain and cryptocurrency
• A track record of generating net-new intelligence
• Demonstrated ability to analyze corporate ownership structures and cross-border fund flows
• Experience tracking threat actors, nation-state activity, or sanctioned entities
• Strong research and communication skills
• Comfort operating in ambiguous, low-signal environments with an ownership mindset to take work to completion
• Top 10 percent-level AI fluency: ability to apply AI to accelerate workflows, structure problems, improve output quality, and increase speed and leverage

Nice to have

• Native-level fluency in Russian, Chinese, Korean, or Spanish
• Background in sanctions enforcement, financial intelligence, or corporate investigations

What we offer

• Distributed-first team with async-first workflows via Slack and Notion, plus structured syncs for alignment
• High autonomy and low bureaucracy; work directly with analysts, engineers, and customers who depend on your output
• Weekly team syncs to align targeting priorities and review disruption opportunities
• Primary time zone overlap: US Eastern/Central

About TRM Labs

TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. A Series C company with $220M in total funding backed by Goldman Sachs, Bessemer, Y Combinator, Thoma Bravo, and others, TRM is headquartered in San Francisco and operates as a distributed-first company with hubs in Los Angeles, San Francisco, New York, Washington D.C., London, and Singapore.