Senior / Staff Threat Intelligence Analyst, Hacks
- Location
- United States
- Salary range
- USD $140,000 – $180,000 base
- Workplace
- Remote
- Level
- Senior / Staff IC
- Job family
- Investigations
- Posted
- 2 weeks ago
The T&S Network estimates this role to be P4, Staff. The typical base salary for that level in Investigations & Threat Intel is $150k to $200k for a remote role. Key skills at this level: runs an investigation end to end, from signal to enforcement to writeup, builds and maintains the tradecraft others on the team follow, and works law enforcement and external referral pathways correctly.
Why this level
Estimated from the posting rather than stated by the employer: the title reads as P4 · asks for 5+ years · posts $140k to $180k base for a remote role.
The role, in T&S terms
Written by the T&S Network from TRM Labs's posting.
Leads the hacks category of blockchain threat intelligence at TRM Labs, covering how fast major crypto hacks, exchange compromises and protocol drains are tracked, recorded and made visible to customers. The work sits in the Primary Intelligence organization alongside the Facilitation & Money Laundering pod, with a small contractor team running it around the clock.
What you'd do
- Run the war room and response when a major hack breaks, including triage and coordination across teams.
- Write internal and customer communications during incidents and produce the incident report afterward.
- Maintain hack records with entity, theft addresses, date, amount and hack type, at any size.
- Work with Data Science and engineering to carry hack attribution downstream as stolen funds move.
- Use AI to build tools and agents for hack analysis and response, with human quality control on every output.
- Root-cause the most important hacks and publish technical analysis with Marketing.
What it asks for
- Five or more years in crypto investigations, blockchain intelligence, threat intel or incident response, or something close.
- Experience owning incident response at an exchange, security firm, incident response or CTI team.
- Strong blockchain tracing across BTC, EVM, TRON and Solana, including bridges, cross-chain swaps and mixers.
- Understanding of DeFi, bridge and exchange exploits and attacker behavior after theft.
- Applied AI fluency with AI-assisted or agentic workflows and validation of outputs.
- Background managing outside contractors or running a small team.
- Smart-contract reverse-engineering in Solidity (preferred).
Worth knowing
- On-call responsibilities and around-the-clock hack coverage.
- Frequent war room work whenever a major hack breaks.
- Operates at a fast pace with shifting priorities and ambiguity.
Our best summary of the posting, and it can be wrong. The employer's posting is what counts: read it in full on TRM Labs before you apply. If we got something wrong, report this listing.
Tired of job hunting?
Let the roles come to you. Switch on Available, and when a hiring manager or recruiter brings us a role that fits, we'll put you forward. Never to the company you work for.
Still listed 14 hours ago
About TRM Labs
Blockchain intelligence for investigating crypto crime and screening transactions.
Other jobs at TRM Labs
9 other jobs open
TRM Labs · P2 · Washington DC · Remote
$115k – $160k
TRM Labs · P4 · Remote, US
$180k – $215k
TRM Labs · P3 · Remote, US
$100k – $168k
More jobs like this
All jobsTRM Labs · P4 · Remote, US
$180k – $215k
Roblox · P3 · San Mateo
$155k – $185k
TRM Labs · P2 · Washington DC · Remote
$115k – $160k
Recorded Future · P2 · London
SpaceXAI · P3 · Austin +2
