Blockchain Intelligence Analyst Ransomware
Blockchain intelligence company providing tools to detect, investigate, and manage crypto-related fraud, financial crime, and compliance for institutions and government agencies.
Maintainer signals as of 8/23/2026
Funding history
Investors
About TRM Labs
TRM Labs provides blockchain intelligence for investigations and compliance, offering products such as forensics, wallet screening, entity screening, transaction monitoring, and APIs. It serves financial institutions, crypto businesses, and public sector agencies to trace funds, assess risk, and build cases across digital assets.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will independently investigate ransomware activity by tracing funds across blockchains and obfuscation services. You will correlate on-chain activity with threat intelligence OSINT and off-chain signals to identify actors infrastructure and recovery opportunities. You will produce auditable intelligence assessments mentor peers support partner briefings and improve investigative methods and workflows.
Requirements
- 3-5+ years of professional experience in blockchain intelligence crypto investigations cybercrime analysis threat intelligence financial crime investigations or a comparable senior analytical role
- Deep hands-on experience tracing funds across multiple blockchains and laundering or obfuscation techniques
- Ability to independently run complex investigations and produce clear written intelligence products
- Deep understanding of ransomware operators affiliates initial access brokers malware developers laundering networks and cash-out services
- Excellent written and verbal communication skills
- Strong judgment curiosity and execution in fast-moving high-stakes environments
- Experience using AI tools and large language models to accelerate research and analytical workflows
- Familiarity with OSINT cybercrime infrastructure research and cross-domain analysis
- Experience with investigative tools such as TRM Maltego Palantir or similar platforms
- Experience conducting HUMINT collection and engaging threat actors through dark web forums and encrypted messaging platforms
- Experience mentoring peers or improving analytical standards and workflows
- Advanced knowledge of manual demixing smart contracts bridges Ethereum TRON investigations and OSINT-based data extraction
Responsibilities
- Produce finished intelligence on ransomware actors affiliates facilitators and laundering pathways
- Lead end-to-end blockchain investigations from seed indicators through attribution and recovery or disruption opportunities
- Trace funds across blockchains bridges mixers peel chains and nested services
- Identify controllers counterparties cash-out services and recovery touchpoints
- Correlate blockchain activity with OSINT threat intelligence partner data and off-chain signals
- Own investigative workstreams from discovery through validation escalation and written production
- Surface leads and seizure or freeze opportunities for asset recovery
- Prioritize analytical work and mentor analysts without formal people management
- Partner with investigators threat intelligence specialists product teams and public- and private-sector stakeholders
- Contribute new attribution and improve investigative methodologies and repeatable workflows
- Explain ransomware tracing attribution and recovery tradecraft in external briefings and capability-building sessions
Benefits
- Equity plan
- Remote work
