About the role

Blockchain intelligence analyst investigating threat actors, sanctions evasion, and illicit networks. Producing intelligence for law enforcement through TRM’s AI-powered investigative platforms.

Responsibilities

Develop novel collection strategies and investigative methodologies to surface threat actor activity
Conduct targeted and proactive threat hunting across on-chain and off-chain data sources
Map financial networks used for sanctions evasion and connect them to on-chain activity
Track, assess, and report on threat actors, campaigns, and illicit networks
Identify and evaluate adversary TTPs, infrastructure, and behavior
Leverage OSINT and other intelligence methods to uncover hidden threats
Produce high-quality intelligence for law enforcement and government partners worldwide
Collaborate with cross-functional teams, analysts, engineers, and customers
Drive complex analytical work and improve investigation processes
Participate in weekly targeting syncs and daily async standups
Document output in Notion and TRM investigative tools

Proven experience in threat intelligence, cyber intelligence, or blockchain intelligence roles
Native-level fluency in Russian, Chinese, Korean, or Spanish strongly preferred
Track record of generating net-new intelligence
Background in sanctions enforcement, financial intelligence, or corporate investigations strongly preferred
Working depth and knowledge of blockchain and cryptocurrency
Ability to analyze corporate ownership structures and cross-border fund flows
Experience tracking threat actors, nation-state activity, or sanctioned entities
Strong research and communication skills
Comfort operating in ambiguous, low-signal environments
AI fluency and demonstrated ability to apply AI to workflows, problem-solving, output quality, speed, and leverage
Surge availability during time-sensitive disruption windows
Primary time zone overlap with US Eastern / Central
Ability to work in a high-intensity, high-ownership environment
Applicants must be legally authorized to work in their current country of employment

Competitive benefits, wellness programs, and time away from work, varying by country and local employment requirements
Distributed-first, remote work environment
Async-first approach via Slack and Notion
High autonomy and low bureaucracy
AI tools to accelerate workflows and improve output quality
Reasonable accommodations for applicants with disabilities