Blockchain Intelligence Analyst

TRM Labs

Blockchain intelligence analyst investigating threat actors, sanctions evasion, and illicit networks. Producing intelligence for law enforcement through TRM’s AI-powered investigative platforms.

Posted 8/21/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in threat intelligence and blockchain analysis, with a strong ability to generate actionable insights and collaborate effectively in high-pressure environments. Proficient in leveraging OSINT and AI methodologies to enhance investigative processes and produce high-quality intelligence.

Highest-signal resume keywords

Threat Intelligence ExperienceBlockchain KnowledgeFluency in Russian, Chinese, Korean, or SpanishSanctions Enforcement BackgroundStrong Research and Communication Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat HuntingData AnalysisInvestigative MethodologiesFinancial Network MappingAdversary TTP EvaluationAI Application in WorkflowsCross-Border Fund Flow AnalysisIntelligence ProductionCorporate Ownership Structure AnalysisSanctioned Entity Tracking

Soft Skills

Strong Communication SkillsComfort in Ambiguous EnvironmentsCollaboration with Cross-Functional TeamsHigh-Ownership MindsetAbility to Work Under Pressure

Tools & Technologies

NotionTRM Investigative Tools

Industry Keywords

Cyber IntelligenceFinancial IntelligenceCorporate InvestigationsOn-Chain and Off-Chain DataThreat Actor Activity

About the role

Key responsibilities & impact

Develop novel collection strategies and investigative methodologies to surface threat actor activity
Conduct targeted and proactive threat hunting across on-chain and off-chain data sources
Map financial networks used for sanctions evasion and connect them to on-chain activity
Track, assess, and report on threat actors, campaigns, and illicit networks
Identify and evaluate adversary TTPs, infrastructure, and behavior
Leverage OSINT and other intelligence methods to uncover hidden threats
Produce high-quality intelligence for law enforcement and government partners worldwide
Collaborate with cross-functional teams, analysts, engineers, and customers
Drive complex analytical work and improve investigation processes
Participate in weekly targeting syncs and daily async standups
Document output in Notion and TRM investigative tools

Requirements

What you’ll need

Proven experience in threat intelligence, cyber intelligence, or blockchain intelligence roles
Native-level fluency in Russian, Chinese, Korean, or Spanish strongly preferred
Track record of generating net-new intelligence
Background in sanctions enforcement, financial intelligence, or corporate investigations strongly preferred
Working depth and knowledge of blockchain and cryptocurrency
Ability to analyze corporate ownership structures and cross-border fund flows
Experience tracking threat actors, nation-state activity, or sanctioned entities
Strong research and communication skills
Comfort operating in ambiguous, low-signal environments
AI fluency and demonstrated ability to apply AI to workflows, problem-solving, output quality, speed, and leverage
Surge availability during time-sensitive disruption windows
Primary time zone overlap with US Eastern / Central
Ability to work in a high-intensity, high-ownership environment
Applicants must be legally authorized to work in their current country of employment

Benefits

Comp & perks

Competitive benefits, wellness programs, and time away from work, varying by country and local employment requirements
Distributed-first, remote work environment
Async-first approach via Slack and Notion
High autonomy and low bureaucracy
AI tools to accelerate workflows and improve output quality
Reasonable accommodations for applicants with disabilities