Cyber Threat Intelligence Analyst, Scams

The role

You will lead infrastructure-driven investigative work to track scam operations. You will map scam infrastructure, track evolving campaigns, and fuse technical and on-chain data to deliver actionable intelligence to law enforcement and government partners.

What you will do

• Map wider infrastructure behind Southeast Asia scam operations by pivoting from indicators
• Track evolving campaigns including new domains, hosting, and registrar changes
• Drive attribution of threat actors using open-source and commercial data
• Fuse technical infrastructure with the on-chain picture from infrastructure to cash-out
• Build clustering logic, detection rules, and automation to surface malicious infrastructure
• Produce defensible, calibrated assessments with assigned confidence
• Synthesize on-chain and off-chain intelligence into targeting packages for consumers
• Own the intelligence cycle end to end with minimal supervision

Required qualifications

• 5+ years of proven experience in cyber threat intelligence or threat infrastructure analysis roles
• Hands-on infrastructure attribution including pivoting and campaign tracking
• Track record of staying on an actor or campaign over time
• Hands-on fluency with CTI tooling including passive DNS, WHOIS, certificate or Shodan-style fingerprinting, and phishing monitoring
• Experience building detection and clustering logic, rules, or automation
• Attribution tradecraft using open-source and commercially available data
• Ability to produce actionable intelligence or targeting packages for government or law-enforcement
• Calibrated, defensible analytic judgment
• Must be located in the Washington, D.C./MD/VA area

Before you apply

• Review the job description to highlight experience and impact
• Provide thoughtful and accurate answers to application questions
• Interview process includes a case study, an AI skills assessment, and a Leadership Principles interview
• You will be evaluated on applied AI fluency during the interview process
• Use of AI tools during interviews is not permitted without prior approval

About the company

TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. The company is a Series C company with $220M in total funding.