Lead Instructor

TRM Labs

4d•$155,000 - $175,000•Remote

About The Position

TRM Labs provides AI-powered intelligence solutions to help public and private sector agencies investigate and disrupt crime. TRM's platforms enable investigators to trace illicit activity, build cases, and construct operating pictures of threat networks. TRM Academy delivers a personalized learning platform where anyone can learn at their own pace how to detect and prevent fraud and financial crime involving cryptocurrencies. As the Lead Instructor, Cyber & OSINT, you will own the design and delivery of TRM Academy training on cyber investigations, open-source intelligence (OSINT), and cyber threat intelligence (CTI) for public-sector and government audiences. You'll teach across TRM's AI intelligence and blockchain intelligence platforms, showing analysts and investigators how to pivot from cyber and open-source signals to on-chain activity and build a complete picture of the actors behind a threat. You will be responsible for building the content and programs that enable others — learners, customers, and fellow instructors — to rapidly upskill. The team is made up of master instructors who can command a room, build engaging content, and speak to every level of expertise. The role requires staying sharp on the threat landscape by conducting ad hoc investigations, supporting time-sensitive analysis for partners, and developing solutions that allow TRM to scale rapidly and effectively. You will collaborate with an experienced team of intelligence experts, engineers, and data scientists to deliver cutting-edge support to TRM's clients.

Requirements

3–5+ years of experience instructing courses, leading trainings, or delivering technical instruction.
Hands-on experience in cyber investigations, OSINT, and/or cyber threat intelligence (CTI) (core requirement).
Experience working in or with the public sector / government — for example, in a cyber division, intelligence unit, or agency cyber program — or a proven track record training these audiences.
Proven experience building course content — curriculum, labs, practical exercises, and appropriate testing — that enables others to learn and teach.
Comfortable training private-sector audiences as well, such as security teams, crypto businesses/VASPs, and financial institutions.
Excellent oral and written communication skills.
Ability to command the room.
AI fluency (this is part of our new performance review process and is also part of the interview process!)

Nice To Haves

Law enforcement experience — federal and/or state, local, and education (SLED).
Blockchain, cryptocurrency, or digital assets knowledge, including on-chain investigations or money laundering typologies.
Relevant certifications (e.g., GIAC such as GCTI or GOSI, or similar cyber/OSINT credentials).

Responsibilities

Program manage and conduct live and virtual training on cyber, OSINT, and CTI tradecraft for a global community of public-sector and government learners.
Design and build curriculum, learning modules, labs, and practical exercises — in writing, mixed media, and in-person briefings — that enable learners and other instructors to deliver and apply the material.
Teach across TRM's AI intelligence and blockchain intelligence platforms, helping analysts combine cyber and OSINT tradecraft with on-chain tracing to build complete, defensible cases.
Develop train-the-trainer materials, instructor guides, and reusable content so TRM Academy can scale its cyber and OSINT offerings.
Proactively identify, build, and manage relationships with government and industry partners to add new Learners to the TRM Academy cadre.
Keep course materials current with the evolving threat landscape — including ransomware, nation-state activity, phishing, account takeovers (ATOs), sim swaps, hacks and exploits, and other cyber-enabled crime.
Maintain a working proficiency in cyber investigative techniques, OSINT methodology, threat actor tracking, and intelligence analysis and reporting.