한국어·English
TRM Labs company · OPEN ROLE
- Company
- Analyzes blockchain and threat data to support financial crime investigations and risk management.
- Role
- Leads difficult threat investigations and turns expert tradecraft into reusable team capabilities.
Log in to mock apply, save this role or see more roles.
What you will do
We rewrote the responsibilities and qualifications in plain language instead of copying the original posting.
Responsibilities
- Starts with one technical or financial clue and follows it until an actor or campaign can be identified.
- Maps command infrastructure, malware families, attacker behavior, and the people behind them.
- Combines technical evidence, open sources, identity research, and financial activity into defensible judgments.
- Raises the team's evidentiary standards and coaches analysts through strong casework.
- Works with engineering and data science to convert investigative methods into shared tools.
- Briefs responders, investigators, executives, and partners on urgent situations with high ambiguity.
What you need
- Brings eight or more years in threat intelligence, investigative analysis, or a closely related field.
- Has resolved threat identities and behavior by combining direct collection with open-source research.
- Has delivered finished products such as actor profiles, campaign reporting, and infrastructure attribution.
- Has made an investigative method repeatable with engineering or data science partners.
- Can teach others how to judge confidence and evidentiary strength.
- Builds AI-assisted investigative workflows and personally validates their output.
Good to have
- Operational ability in Russian, Chinese, or another language commonly used by threat actors
- Public research, conference speaking, or trusted intelligence-sharing work
- Hands-on tracing across wallets, laundering routes, sanctions exposure, and identity signals
Read the employer’s original job description
See how your resume reads for this role
A former Korea GM at a global company reads it and tells you what to improve for this role. It uses 1 credit.
Checked 2026-10-17
TRM LabsStaff Cyber Threat Intelligence AnalystStart a mock application