TRM Labs
Cyber Threat Intelligence Analyst
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber Threat Intelligence Analyst
TRM Labs
Build a Safer World.
TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM’s platforms enable investigators to trace illicit activity, build cases, and construct operating pictures of threat networks. Leading agencies and businesses worldwide rely on TRM to make the world safer and more secure.
About the Role
As a Cyber Threat Intelligence Analyst, you will:
- Conduct ad hoc investigations and time-sensitive blockchain analysis for our partners.
- Contribute to investigative methods and workflows that help TRM scale rapidly and effectively.
You will collaborate closely with blockchain intelligence experts, engineers, and data scientists to deliver high-confidence analytical support to TRM’s partners and internal teams.
The Impact You Will Have
- Produce finished cyber threat intelligence, including:
- Actor profiles
- Campaign reports
- IOC packages
- Infrastructure attributions
- Evidence-ready analytical outputs
- Support multi-actor/multi-campaign investigations, improving analysis quality and trading shared methods through strong execution.
- Handle investigations from seed indicators (domains, IPs, hashes, aliases, wallets) to attributed actors, clusters, or campaign frameworks.
- Correlate technical indicators with OSINT, identity signals, infrastructure patterns, and financial-rail activity to assess adversary behavior comprehensively.
- Triage large indicator sets, cluster infrastructure, and produce clear, defensible findings for immediate stakeholder action.
- Assist incident responders, threat hunters, investigators, and partner-facing teams with timely, high-confidence intelligence products and briefings.
- Guide evaluation of new analytical tooling, ensuring it reduces analyst effort or enhances output quality while maintaining rigor.
- Refine investigation workflows and analytical standards to maximize analyst efficiency without compromising quality.
What We’re Looking For
Experience & Skills
- 3+ years in cyber threat intelligence, intelligence analysis, incident-driven investigations, or a closely related analytical field.
- Proven ability to produce finished intelligence products, such as:
- Actor profiles
- Campaign reports
- Attribution assessments
- Infrastructure mapping
- Deep familiarity with:
- Cyber investigations
- Infrastructure attribution
- Campaign analysis
- Actor profiling
- Strong OSINT instincts and ability to:
- Resolve identities, aliases, and behavior across fragmented sources.
- Connect technical findings to financial infrastructure (wallets, laundering paths, sanctions exposure, etc.).
- Exceptional analytical judgment regarding: -Confidence levels -Evidential strength -Operational defensibility (reports/referrals)
- Demonstrated experience in: -Driving complex investigations independently -Improving workflows and analytical standards -Elevating team performance through strong execution.
- Exemplary written and verbal communication, with capability to package findings for both technical and non-technical audiences.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Work Style & Adaptability
- Ability to thrive in a high-speed, ambiguous environment where priorities shift rapidly.
- AI fluency expected—AI should accelerate workflows while maintaining human oversight for accuracy and value.
About the Team
TRM’s intelligence and investigations team combines national-security-grade tradecraft with advanced analytical workflows across cyber, OSINT, and blockchain-backed crime.
This role requires expertise at the intersection of intelligence production, investigations, and informed product development, ensuring TRM’s tooling remains scalable, high-quality, and operationally relevant. Ideal candidates will:
- Drive complex investigations independently.
- Positively collaborate across functions.
- Approach investigations with teammatics and patience for long-term, purpose-driven growth.
Team Operating Rhythms
- Weekly syncs to align on targets and disruption opportunities.
- Daily async check-ins (Slack) for progress updates.
- Primary coverage: US Eastern/Central time zones.
- Note-taking and output documented in Notion and TRM’s internal investigation platforms.
- Surge availability expected during time-sensitive work windows.
Life at TRM
TRM’s work fuels a global mission: identifying and countering cybercrime to protect public and private sectors. That mission translates into a fast-moving, high-pressure environment.
What to Expect
- Dynamic priorities and evolving workstreams as operations iterate.
- High owner-ship and accountability— individu al results directly impact team progress.
- Close cross-team collaboration.
- High-touch communication and rapid decision-making.
- A demand for created problem-solving: solutions for undefined challenges.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Who Thrives Here?
This structure suits candidates comfortable with:
- Ambiguity and uncertainty.
- Frequent course corrections based on intel updates.
- Flexibility and resilience under pressure.
- Building and nurturing experiments to improve methods.
But if yours is primarily a desire for predictability or balanced workloads, ask yourself: Is this truly the right fit?
Who Finds It Rewarding?
If you embrace meaningful problems and are motivated by mission-driven peers, TRM may be an extraordinary place to grow.
[Ask:](Interview & Success Docs)[How We Hire & What Success Looks Like]
AI Fluency at TRM
AI fluency is a baseline expectation. Top performers use AI to redefine workflows, not just automate tasks. TRM anticipates:
- AI accelerates repetitive tasks.
- AI structures problem-solving approaches.
- Enhances quality, speed, and leverage.
This ability will be assessed during the interview process.
Leadership Principles
TRM’s culture is built on three fundamental principles:
-
Impact-Oriented Trailblazer
- Customer-first mentality.
- Balances speed and focus with adaptability.
- Treat plans as experiments (test → iterate → optimize).
-
Master Craftsperson
- Passion for excellence in execution.
- Owns outcomes end-to-end.
- Supports continuous improvement.
-
Inspiring Colleague
- Provides clarity, not noise.
- Maintains humility and candor with feedback.
- Embraces one-team mindset.
Join Our Mission
TRM’s mission aligns best with individuals who:
- Want their work to matter and make an impact.
- Thrive on experimentation—promoting speed and rigor.
- Take pride in building a safer world for billions.
If the role feels like a great fit—or you still have a few drawers unchecked—apply! TRM evaluates potential, judgment, and eagerness to grow quickly.
Key Details
TRM Labs:
- Status: Series-C backed by Blockchain Capital, Goldman Sachs, Bessemer, YC, Thoma Bravo, and others.
- Funding: $220M raised.
Locally across: 📍 San Francisco (headquarters) 📍 Los Angeles, NY, DC, London, Singapore
Note: Certain AI tools in interviews (e.g., notetakers, interview assistance) are restricted without prior TRM approval. Use the company’s own internal tools only.
Privacy & Retention: Review the Privacy Policy for details on CRM, retention policies, and international candidate affects. –TRM’s FAQ and Privacy Policy link available.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location