Lead All Source Investigations
Skills
About the Role
TRM Labs' Scam Disruption team fights pig butchering, romance fraud, and investment scams. In this role you will lead all source investigations, taking legal process to the ground, following the data wherever it leads, and delivering actionable intelligence to law enforcement partners. You will operate the intelligence flywheel daily, fusing on chain and off chain data to build operational pictures that help dismantle scam operations. The impact you will have includes running legal processes end to end against scam infrastructure and turning returns into targeting ready intelligence for TRM's teams and law enforcement partners. Trace scam networks geographically and operationally by correlating on chain attribution with off chain telemetry, OSINT, and publicly available data to identify operators, controllers, and movement patterns. You will feed results into TRM's intelligence and product pipelines, pivot from a single victim into uncovering the operation and multiplying leads. Partner with the Threat Intelligence Analyst and the All Source Lead to translate disruption strategy into targeting packages that influence federal investigations.
Requirements
- 5-8+ years of all-source investigative or targeting experience
- Legal process expertise
- Creative tactical thinking
- Link and pattern analysis fluency
- Strong written communication
- AI fluency (required)
- Crypto experience is a plus, not a requirement
- US Citizenship required
- Active TS/SCI clearance required
- Must be located in the Washington District of Columbia area
Responsibilities
- Lead legal process end to end against scam infrastructure and convert returns into targeting ready intelligence for TRM's teams and law enforcement partners
- Trace scam networks geographically and operationally by combining on chain attribution with off chain telemetry OSINT and commercially available data to identify operators controllers and movement patterns
- Operate the intelligence flywheel daily, fusing on chain and off chain data to build operational pictures that help dismantle scam operations
- Find the seams pivot from a single victim into uncovering the operation and multiplying leads
- Translate disruption strategy into targeting packages that influence federal investigations in collaboration with the Threat Intelligence Analyst and the All Source Lead