Threat Intelligence Analyst, Financial Networks

About the Role

TRM Labs builds AI-driven intelligence tools that help public- and private-sector teams investigate criminal activity and interrupt illicit networks. Its platforms support investigators in tracing suspicious flows, assembling cases, and understanding how threat ecosystems operate. The company’s work is used by organizations around the world to strengthen security and reduce harm.

In this role, you will focus on collecting, analyzing, and reporting intelligence on the people and networks behind sanctions evasion, financial crime, and other harmful activity.

What You Will Do

• Create new collection approaches and investigation methods to uncover threat actor behavior.
• Perform targeted threat hunting across blockchain-based and traditional data sources.
• Analyze financial networks used to evade sanctions and link them to on-chain activity.
• Monitor, evaluate, and document threat actors, campaigns, and illicit networks.
• Assess adversary tactics, techniques, procedures, infrastructure, and patterns in collaboration with other teams.
• Use OSINT and related intelligence techniques to expose hidden threats.
• Prepare high-quality intelligence outputs for law enforcement and government stakeholders globally.

What We Are Looking For

• Prior experience in threat intelligence, cyber intelligence, or national security intelligence.
• Strong preference for fluency in Russian, Chinese (Mandarin or Cantonese), or Farsi.
• Evidence of producing original, new intelligence rather than reworking existing material.
• Preferred background in sanctions enforcement, financial intelligence, or corporate investigations.
• Practical understanding of blockchain and cryptocurrency.
• Ability to evaluate ownership structures in companies and trace cross-border fund movement.
• Experience following threat actors, nation-state activity, or sanctioned entities.
• Excellent research and written/verbal communication skills.
• Comfort working in uncertain, low-signal situations with a strong sense of ownership through completion.

Work Environment

TRM operates at a fast pace with a strong emphasis on responsibility, adaptability, and collaboration. The team works on complex problems at the intersection of AI, national security, and crime prevention, and priorities can shift quickly as the company tests ideas and iterates. The role suits people who enjoy solving difficult problems in a high-urgency setting and who are comfortable with ambiguity, frequent communication, and changing goals.

Candidates who prefer highly predictable work or a consistently balanced workload are encouraged to assess whether this style of environment is the right fit. TRM is looking for people who are motivated by meaningful work, ambitious goals, and a mission-driven team.

AI Fluency

AI capability is expected as a core part of how people work at TRM. Team members are expected to use AI to improve workflows, structure problems, raise output quality, and increase speed and leverage. AI fluency will be assessed during the interview process.

Leadership Principles

• Impact-Oriented Trailblazer: focus on customers, move quickly, and treat plans like experiments that are tested, shipped, measured, and refined.
• Master Craftsperson: uphold high standards, balance speed with quality, own results end to end, and keep improving every day.
• Inspiring Colleague: bring clarity, energy, humility, candor, and a strong team mindset while giving and receiving feedback constructively.

Additional Information

TRM is a Series C company with $220M in total funding. It is backed by Blockchain Capital, Goldman Sachs, Bessemer, Y Combinator, Thoma Bravo, and other investors. The company is headquartered in San Francisco and operates in a distributed-first model with hubs in Los Angeles, San Francisco, New York, Washington D.C., London, and Singapore.

Privacy and Hiring Terms

By applying, you consent to TRM Labs processing your personal information according to its privacy policy. Information such as your resume, work history, and contact details is used to assess current and future opportunities. For some roles, hiring processes may last 24 to 36 months, and application data may be retained for up to 36 months from the date of application unless a different period is required or allowed by law. Applicants in the EEA, UK, or other jurisdictions with relevant data protection laws may request access, correction, or deletion of their personal data before that retention period ends by contacting the company’s privacy team.

If you believe the posting is non-compliant, you may submit a report through the designated form. Inquiries unrelated to posting compliance will not receive a response.

The use of any AI tools during interviews, including note-taking assistants, interview copilots, and real-time coaching tools such as Otter.ai, Fireflies, Fathom, Cluey, or similar products, is not allowed unless TRM approves it in advance. TRM uses its own internal note-taking tools to keep interviews consistent and confidential.

TRM provides reasonable accommodations for applicants with disabilities, and requests can be submitted through the appropriate form.

Recruitment agencies should not send unsolicited resumes. TRM does not accept unsolicited agency submissions, does not permit forwarding resumes to employees, and will not pay fees for unsolicited referrals or any third-party agency or company without a signed agreement.

Additional links referenced by the employer include company values, interviewing information, and FAQs.