Drimva

TRM Labs

Senior / Staff Threat Intelligence Analyst, Hacks

$140K–$180K

United States +4 · Remote · Staff · Full-time · Posted Sep 30, 2026

Location
United States
Singapore, Singapore
London, United Kingdom
EMEA
Seoul, South Korea
Experience
5+ years in blockchain intelligence, crypto investigations, cyber threat intelligence, incident response, or a closely related field.

About the job

Leads TRM’s hacks intelligence function, coordinating hack response, improving blockchain tracing and attribution, and developing AI-enabled analysis and prevention tools.

What you'll do

  • Lead response to major hacks, including triage, coordination, communications, and incident reports.
  • Ensure hack data is complete and timely, and build systems to trace stolen funds and carry attribution downstream.
  • Publish technical root-cause analysis and develop methods to identify vulnerable contracts before exploitation.

What they ask for

  • Experience owning incident response in a high-stakes environment, including war rooms, reports, and communications under pressure.
  • Strong blockchain tracing across BTC, EVM, TRON, and Solana, including bridges, cross-chain swaps, and mixers.
  • Understanding of DeFi, bridge, and exchange exploits and attacker behavior after theft.
  • Applied AI fluency, experience leading contractors or a small team, and clear writing and briefing skills.

Nice to have

  • Smart-contract reverse-engineering (Solidity).
  • Experience at a security auditor or blockchain analytics firm, or following well-known hacker groups.

Pay

$140K – $180K (base salary)

Tools

BTC, EVM, TRON, Solana, Solidity

AI focus

Build AI-assisted tools and agents to automate hacks analysis and response, with human quality control; candidates are expected to use and validate AI-assisted or agentic workflows.

Model-written summary · the original posting is authoritative

First seen Oct 29, 2026 · Last verified Nov 5, 2026 (UTC)