Senior Cyber Threat Response Advisor

Job not on LinkedIn

🔥 5 minutes ago

🇺🇸 United States – Remote

💵 $140k - $168k / year

⏰ Full Time

🟠 Senior

👻 Ghost score 6%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

TRM Labs

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2018

₿ Crypto

📋 Compliance

🤝 B2B

Crypto • Compliance • B2B

TRM Labs is a blockchain intelligence company that provides transaction-monitoring, forensics, and compliance solutions for businesses and public-sector organizations dealing with cryptocurrencies. Their platform and products (examples: Compliance360, Investigation360, Seizure360, Supervision360, BlockInt API, MCP, wallet screening, Know-Your-Asset) help banks, crypto firms, regulators, law enforcement, and tax authorities detect, investigate, and block illicit crypto activity, support seizures, and meet AML/CTF and supervision requirements. TRM also offers training and certification (TRM Academy) and professional services such as incident response and capacity development.

📋 Description

• Analyze critical-infrastructure sectors and identify organizations most important to protect • Surface vulnerabilities and exposures from initial signal through actionable defender notification • Combine OSINT, external attack-surface and exposure discovery, and direct threat-actor collection • Use AI to build tools and workflows that accelerate remediation at scale, with human quality control • Feed effective methods into TRM tooling and workflows • Map C2 infrastructure, malware families, TTPs, and threat actors • Triage large indicator and exposure sets and cluster infrastructure • Produce exposure notifications, actor and campaign profiles, IOC packages, and infrastructure attributions • Advise across multiple active threats and support other analysts through analytical execution • Partner with critical-infrastructure entities, government partners, ISACs, engineers, and internal teams • Participate in weekly team syncs and daily async standups • Document output in Notion and TRM investigative tools • Flex hours during active disruption windows to meet urgent partner needs

🎯 Requirements

• 5+ years in cyber threat intelligence, incident response, or a closely related analytical field • Experience as the primary point of contact for an outside organization during a live incident or remediation • Ability to drive complex analysis independently to actionable outcomes • Experience delivering real answers under RFI-style time pressure • Applied AI fluency, including building AI-assisted or agentic workflows and validating outputs • Hands-on collection capability in OSINT, external attack-surface and exposure discovery, or direct threat-actor collection • Experience producing finished intelligence such as actor profiles, campaign reporting, attribution assessments, exposure notifications, or infrastructure mapping • Strong OSINT skills and ability to resolve identities, aliases, infrastructure, and behavior across fragmented sources • Excellent judgment regarding analytical confidence and evidentiary strength • Excellent written and verbal communication • Comfort working in a fast-paced, ambiguous environment • Willingness to travel up to 50% within the United States • Must be based in the United States • U.S. citizenship required • Familiarity with critical-infrastructure sectors, government partners, ISACs, or sector coordinating bodies is a plus • Working proficiency in a language heavily used by cyber actors is a plus • Public presence through conference talks, published research, or invite-only sharing circles is a plus

🏖️ Benefits

• Equity plan eligibility • Distributed-first remote work • Async-first work via Slack and Notion • High autonomy and low bureaucracy • Global team collaboration • Flexible hours during active disruption windows • Competitive benefits, wellness programs, and time away from work, varying by country and local employment requirements