Senior Threat Intelligence Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the hacks category at TRM, which includes metrics, systems, and a contractor team operating continuously.

• Manage incident response for significant hacks, encompassing triage, coordination among teams, internal and customer communications, and incident documentation.

• Ensure that major hacks are communicated to customers within hours of the initial credible public report.

• Maintain thorough and precise records of hack data, including entities involved, theft addresses, dates, amounts, and types of hacks.

• Collaborate with Data Science and Engineering to create systems that trace the movement of stolen funds downstream.

• Develop AI-driven tools and agents to automate the analysis and response to hacks while ensuring human quality control.

• Analyze the root causes of significant hacks and publish technical assessments.

• Create strategies to identify vulnerable contracts prior to exploitation and incorporate them into the product.

• Work closely with Nation States, Cyber Threat Intelligence, Global Investigations, Data Science, Engineering, and Marketing teams.

• Engage in monthly metrics reviews, weekly operational syncs, cross-time-zone team meetings, war rooms, and on-call rotations.

⛳️ Requirements

• A minimum of 5 years of professional experience in blockchain intelligence, cryptocurrency investigations, cyber threat intelligence, incident response, or a related field.

• Proven experience managing incident response in high-pressure environments, including war rooms, incident documentation, and communications under stress.

• Proficient in blockchain tracing across BTC, EVM, TRON, and Solana, including bridges, cross-chain swaps, and mixers.

• Knowledge of DeFi, bridge, and exchange exploits as well as the behavior of attackers post-theft.

• Practical fluency in AI, including the development of AI-assisted or agentic workflows and validation of outputs.

• Experience in managing contractors or leading a small team.

• Excellent technical and executive writing and briefing capabilities.

• A hands-on and highly accountable work style.

• Experience with smart-contract reverse engineering using Solidity is a plus.

• Previous work at a security auditing or blockchain analytics firm is advantageous.

• Familiarity with specific well-known hacker groups is a plus.

• Availability for on-call duties.

• Ability to thrive in a high-intensity, high-ownership work environment.

🏝️ Benefits

• Eligibility for equity plan.

• Competitive benefits that vary by country and local employment regulations.

• Wellness programs.

• Paid time away from work.

• A distributed-first remote work culture.

• Opportunities for professional growth.

• Collaboration with a global team across multiple time zones.