The role
TRM Labs needs a lead for its hacks category, covering incident response, hack data, fund tracing and published root-cause analysis. You'll run a small contractor team and build AI-assisted tooling with Data Science and engineering.
What you'll do
- Run the response when a major hack breaks, from triage to the incident report
- Get every major hack visible to customers within hours, around the clock
- Keep hack data complete: entity, theft addresses, date, amount, hack type
- Design hack-specific attribution that follows stolen funds with Data Science and engineering
- Publish root-cause technical analysis and build AI tools to automate hack response
What they're looking for
Must-haves
- 5+ years in blockchain intelligence, crypto investigations, CTI or incident response
- Owned incident response in a high-stakes setting, including war rooms and reports
- Blockchain tracing across BTC, EVM, TRON and Solana, including bridges and mixers
- Knowledge of DeFi, bridge and exchange exploits and attacker behavior
- Hands-on AI-assisted workflows, with ways to validate outputs; contractor or team lead experience
Nice to have
- Smart-contract reverse-engineering (Solidity)
- Experience at a security auditor or blockchain analytics firm
- Experience following well-known hacker groups
The company
TRM Labs
Series C blockchain intelligence company
TRM Labs provides AI-powered intelligence tools that help public and private agencies investigate and disrupt crime. A distributed-first Series C company headquartered in San Francisco, with $220M in funding.
Summarised by Jobs That Travel from TRM Labs's listing.
