Senior / Staff Threat Intelligence Analyst, Hacks

The role

You will lead the hacks category by managing metrics, systems, and a contractor team. You will run incident responses, build AI-automated tools for attribution, and publish technical analysis on major hacks.

What you will do

• Lead TRM's response to major hacks including triage, coordination, and communications
• Build AI tools and agents to automate intake and first attribution
• Ensure major hacks are visible to customers within hours of public reports
• Maintain complete and accurate hack data including entities and theft addresses
• Design systems with Data Science and engineering to follow stolen funds
• Perform root-cause analysis and publish technical analysis
• Build approaches to spot vulnerable contracts before exploitation
• Manage a contractor team and size the coverage required
• Run war rooms when major hacks break

Required qualifications

• 5+ years of professional experience in blockchain intelligence, crypto investigations, cyber threat intelligence, incident response, or a closely related field
• Owned incident response in a high-stakes environment
• Strong on-chain tracing
• Deep on EVM
• At least one of: BTC, TRON, or Solana, including bridges, cross-chain swaps, and mixers
• Understands how DeFi, bridge, and exchange exploits work
• Understands how attackers behave after theft
• Applied AI fluency including building AI-assisted or agentic workflows
• Experience managing contractors or leading a small team
• Writes and briefs clearly from technical deep-dives to executive summaries
• Hands-on and highly accountable

Nice to have

• Smart-contract reverse-engineering (Solidity)
• Experience at a security auditor or blockchain analytics firm
• Experience following specific well-known hacker groups

Before you apply

• Review the job description carefully to highlight relevant experience
• Provide thoughtful and accurate answers to application questions
• Use of AI tools during interviews is not permitted without prior approval

About the company

TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. The company is a Series C company headquartered in San Francisco.