About The Position

TRM Labs is seeking a high-judgment, high-autonomy individual contributor specializing in transnational criminal organizations. The analyst will use blockchain analytics, open- and closed-source intelligence, and cryptocurrency attribution to trace drug-trafficking proceeds, identify the networks that move them, and produce intelligence that helps TRM and its partners disrupt illicit drug activity. This is not a people-management role. The analyst will independently lead complex investigations, develop high-confidence assessments, uncover novel attribution, and strengthen team tradecraft through technical expertise and example. The role includes proactive work with law enforcement partners, including taking on stalled investigations, finding overlooked leads, and connecting cases. The analyst will trace funds across blockchains, identify laundering and cash-out infrastructure, correlate on-chain and off-chain signals, and turn fragmented data into clear, defensible intelligence for operational decisions. Success means producing trusted, actionable intelligence and meaningful attribution where financial trails are deliberately obscured, helping partners act faster without sacrificing rigor or auditability, and improving team capability through mentoring, tradecraft, and repeatable workflows. The role sits within TRM’s Blockchain Intelligence organization alongside threat intelligence analysts, on-chain investigators, and law enforcement partners. The team is distributed and async-first, using Slack, Notion, and TRM investigative tools, with regular syncs and high autonomy. Working hours should overlap with UK and US business hours, and surge availability is expected when partners need a fast turnaround.

Requirements

  • At least 5 years of professional experience in blockchain intelligence, crypto investigations, financial-crime or narcotics investigations, threat intelligence, or a comparable senior analytical role.
  • Deep hands-on experience tracing funds across multiple blockchains and through laundering or obfuscation techniques, including mixers, chain-hopping, bridges, peel chains, and layered cash-out behavior.
  • Demonstrated ability to independently run complex investigations and synthesize findings into clear written intelligence products, including assessments, lead packages, fund-flow analysis, and attribution reporting.
  • Strong communication skills, including the ability to turn technically complex findings into understandable, actionable intelligence for government and private-sector audiences.
  • Sound judgment, curiosity, and ability to operate in a fast-moving environment while producing outputs that withstand scrutiny.
  • Experience using AI tools and large language models to accelerate research and augment analytical workflows, and ability to critically evaluate AI-generated outputs for accuracy and relevance.
  • Ability to work with hours that overlap with both UK and US business hours.
  • Surge availability when partners need a fast turnaround.

Nice To Haves

  • Experience in government, national security, law enforcement, or a mature private-sector investigations or threat intelligence program.
  • Familiarity with darknet markets, drug-trafficking networks, and OTC and ATM laundering.
  • Familiarity with OSINT and combining blockchain activity with off-chain signals and adversary behavior.
  • Comfort with modern investigative tooling, including AI and structured data environments such as TRM, Maltego, Palantir, or similar platforms.

Responsibilities

  • Produce finished intelligence on transnational criminal organizations, vendors, facilitators, and laundering pathways, including actor profiles, lead packages, and attribution assessments for investigative, executive, and partner audiences.
  • Lead complex end-to-end blockchain investigations from initial indicators through full attribution.
  • Trace illicit proceeds across multiple blockchains, bridges, mixers, peel chains, and nested services, identifying controllers, counterparties, and cash-out points such as OTC desks, ATM networks, and cash-to-crypto services.
  • Correlate on-chain activity with OSINT, closed-source intelligence, and off-chain identity or infrastructure signals to understand how transnational criminal organizations operate and move value.
  • Own investigative workstreams from discovery through validation and written production, creating source-cited, auditable, operationally useful intelligence.
  • Build and maintain working relationships with law enforcement partners and ensure intelligence reflects investigative tradecraft and is put to use.
  • Contribute new attributions, refine investigative methodology, and improve repeatable workflows for transnational criminal organization coverage.
  • Support briefings, partner engagements, and capability-building sessions by explaining tracing and attribution tradecraft clearly and credibly.
  • Mentor peers and strengthen team capability and tradecraft.
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service