Blockchain Intelligence Analyst, Ransomware

TRM Labs
United States, United Kingdom
Workplace: RemoteFull timeUSD 115,000 - 150,000 annuallyFunction: Data Science & Machine LearningSkills: ["Judgment","Curiosity","Communication","Mentorship","Analytical leadership"]

Operate as an individual contributor specializing in ransomware blockchain intelligence. Trace ransomware proceeds across multiple blockchains and obfuscation methods, correlate on-chain activity with OSINT and threat-intelligence signals, and produce source-cited, auditable finished intelligence. Lead end-to-end investigations from seed indicators to attribution and actionable recovery or disruption opportunities, and support briefings and partner engagements using rigorous investigative tradecraft and AI-augmented workflows.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
TRM Labs
TRM Labs
1 day ago

Blockchain Intelligence Analyst, Ransomware

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 11 hours agoStatus: Live

Job Summary

Operate as an individual contributor specializing in ransomware blockchain intelligence. Trace ransomware proceeds across multiple blockchains and obfuscation methods, correlate on-chain activity with OSINT and threat-intelligence signals, and produce source-cited, auditable finished intelligence. Lead end-to-end investigations from seed indicators to attribution and actionable recovery or disruption opportunities, and support briefings and partner engagements using rigorous investigative tradecraft and AI-augmented workflows.
Location: United States, United Kingdom
Workplace: Remote
Employment Type: Full time
Job Function: Data Science & Machine Learning
Seniority: Mid level

Key Responsibilities

  • •Produce finished intelligence on ransomware actors, affiliates, facilitators, and laundering pathways, including actor profiles, lead packages, attribution assessments, and operational reporting.
  • •Lead end-to-end blockchain investigations from seed indicators through validation, full attribution, and actionable recovery or disruption opportunities.
  • •Trace ransomware-related funds across blockchains and services (e.g., bridges, mixers, peel chains) to identify controllers, counterparties, and cash-out touchpoints.
  • •Correlate on-chain activity with OSINT, threat-intelligence, attribution partner data, and off-chain signals to synthesize a complete adversary behavior picture.
  • •Own investigative workstreams from discovery through written production, including drafting source-cited, auditable intelligence and supporting external briefings and partner engagements.

Pay and Benefits

Salary: USD 115,000 - 150,000 annually
Perks:Equity

Key Requirements

  • •3-5+ years of professional experience in blockchain intelligence, crypto investigations, cybercrime analysis, threat intelligence, financial crime investigations, or a comparable senior analytical role.
  • •Deep hands-on blockchain tracing expertise across multiple blockchains and laundering/obfuscation techniques (e.g., mixers, chain-hopping, bridges, peel chains, layered cash-out).
  • •Ability to independently run complex investigations and write clear intelligence products (investigative assessments, lead packages, fund-flow analysis, and attribution reporting).
  • •Deep ransomware domain expertise across the cybercrime ecosystem and relationships among operators, affiliates, infrastructure, laundering networks, and cash-out services.
  • •Excellent written and verbal communication to translate technical tracing findings into actionable intelligence for government and private-sector audiences.
Experience:CybercrimeThreat intelligenceFinancial crime investigationsBlockchain intelligenceRansomware
Skills:JudgmentCuriosityCommunicationMentorshipAnalytical leadership
Tech Stack:Blockchain analyticsCryptocurrency attributionOSINTMaltegoPalantirSlackNotionAI toolsLarge language models (LLMs)MixersBridgesPeel chainsSmart contractsEthereumTRONDark webEncrypted messaging

Company Brief

TRM Labs
Provides blockchain intelligence and crypto risk management solutions to help financial institutions, governments, and crypto firms detect fraud, trace illicit activity, and comply with regulatory requirements across digital asset ecosystems.
Industry: RegTech
Company Size: Large (251 to 1,000 employees)
Growth: Growth Stage Startup
Headquarters: San Francisco, United States
Founded: 2018
WebsiteLinkedIn