Senior / Staff Threat Intelligence Analyst, Hacks
TRM Labs · Remote · United States · Singapore · United Kingdom · EMEA · South Korea ·
COMPENSATION
$140k – $180k
Listed on the employer's job board (Ashby)
- Senior / Staff level
- Fully remote (distributed)
- Blockchain threat intelligence
- AI-assisted workflows
- On-call responsibilities
Lead TRM’s hacks category by owning the end-to-end response when protocols are drained or exchanges compromised. You will coordinate war rooms, ensure rapid data visibility for customers, and design systems that trace stolen funds across chains.
The role involves building AI agents to automate analysis while maintaining human quality control. You will publish technical root-cause analyses and develop methods to spot vulnerable contracts before exploitation occurs.
What you'll do
- Lead incident response during major hacks, including triage and coordination
- Ensure major hacks are visible to customers within hours of public reports
- Maintain complete and accurate records of hack entities and theft addresses
- Design systems with Data Science to trace stolen funds across bridges and mixers
- Build AI tools and agents to automate key parts of hacks analysis
- Publish technical root-cause analysis for significant industry exploits
- Develop approaches to identify vulnerable contracts before they are exploited
What you'll need
- 5+ years in blockchain intelligence, crypto investigations, or cyber threat intelligence
- Experience owning incident response in high-stakes environments like exchanges
- Strong blockchain tracing skills across BTC, EVM, TRON, and Solana
- Deep understanding of DeFi, bridge, and exchange exploit mechanics
- Proven ability to build and validate AI-assisted analytical workflows
- Experience managing contractors or leading small teams
- Clear writing and briefing skills for technical and executive audiences
Nice to have
- Smart-contract reverse-engineering skills in Solidity
- Previous experience at a security auditor or blockchain analytics firm
- Experience tracking specific well-known hacker groups
Stack
- Bitcoin
- EVM
- TRON
- Solana
- Solidity
- AI agents
How you'll work
- Distributed-first company with global hubs
- On-call responsibilities for major incidents
- Regular syncs across time zones
- Monthly metrics reviews with management
- Weekly operating syncs with the team
Hiring process
- Recruiter intro call for qualifications and motivation
- Hiring manager interview on experience and impact
- 1–2 interviews focused on critical role skills
- Final round panel with hands-on case study
- Reference checks with former colleagues
- Offer presentation and onboarding