TRM Labs
Staff Cyber Threat Intelligence Analyst
$160,000 – $190,0008+ yearsRemote
- United States
- Full time
- 2d ago
Newly posted
About the role
As a Staff Cyber Threat Intelligence Analyst, you will conduct high-complexity investigations and support time-sensitive blockchain analysis for partners. You will shape investigative methods, workflows, and analytical capabilities to help the organization scale effectively. This role involves collaborating with experts to raise the quality and operational relevance of cyber threat intelligence capabilities.
Responsibilities
- Produce finished cyber threat intelligence, including actor profiles, campaign reports, IOC packages, infrastructure attributions, and evidence-ready analytical outputs.
- Act as a staff-level analytical leader across multiple active actors and campaigns, raising quality and coaching other analysts.
- Drive complex investigations from seed indicators to attributed actors and codify methods for team reuse.
- Correlate technical indicators with OSINT, identity signals, infrastructure patterns, and financial-rail activity.
- Triage large indicator sets, cluster infrastructure, and turn signals into clear, defensible findings.
- Support incident responders, threat hunters, and leadership with high-confidence intelligence products and briefings.
- Evaluate and operationalize new analytical tooling to improve quality and reduce analyst effort.
Required skills
- Cyber threat intelligence
- Intelligence analysis
- Incident-driven investigations
- OSINT
- Infrastructure attribution
- Campaign analysis
- Actor profiling
- Blockchain analysis
- AI fluency
Qualifications
- 8+ years of experience in cyber threat intelligence, intelligence analysis, incident-driven investigations, or a closely related analytical field
About the Company
TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. The company's platforms enable investigators to trace illicit activity, build cases, and construct operating pictures of threat networks.