TRM Labs

Critical Infrastructure Sector Engagement Lead

United States

Sponsorship not specified$25k-$40kDetected 25 days ago

A/B TestingCybersecurityIncident ResponseLeadershipCommunicationCollaborationProblem SolvingMentoringPlain LanguageAdaptability

About the role

This team is dedicated to cybercrime and SLTT-resilience.
Our goal is to provide real defensive capability to the country's most under-resourced organizations: rural hospitals, water utilities, and school districts.
We achieve this by putting the Orion platform and agentic threat-intelligence workflows directly into their hands.

BUILD A SAFER WORLD.
TRM's platforms enable investigators to trace illicit activity, build cases, and construct operating pictures of threat networks.
On-call & first response. You'll help build and share an on-call rotation with teammates, taking turns as first responder for your cohort when an entity is in an active incident.
Working hours. Maintain meaningful overlap with U.S. business hours for stakeholder collaboration, and be reachable during active incidents per the on-call schedule.
We balance speed with high standards, own outcomes end‑to‑end, and invest in getting better everyday.
We are building a safer world.
This environment is energizing for people who enjoy building, solving hard problems, and making progress in situations that are not always fully defined.

8+ years of relevant experience.
Proven track record in public sector security, critical-infrastructure defense, or customer-facing technical roles, specifically earning trust with resource-constrained stakeholders.
You have deep credibility in your focus area.
Ability to analyze threat intelligence, determine what is critical, and translate it into a tactical plan for an operational team.
You are motivated by protecting essential services and exercising sound judgment in sensitive government contexts.
Work that often requires operating with a high degree of ambiguity

Former practitioner in your sector (e.g., hospital, utility, county/city, or district security or operations leadership).
Active relationships with the relevant sector ISAC, fusion centers, CISA regional advisors, or relevant law enforcement.
Experience standing up or running a collective-defense, SLTT, or public-private security program.
Familiarity with ransomware tradecraft, incident response, and the value of cryptocurrency/payment tracing.
OT/ICS experience (especially for the Water & Critical Infrastructure focus).
Experience operating in fast-moving, ambiguous, standing-start environments.
What success looks like
Your cohort is fully operational and actively using TRM capabilities to defend their environments.

We measure success by problems resolved, not alerts sent.
For us, an alert is not an outcome.
That promise shows up in how we work every day.
TRM moves quickly.
We are a high velocity, high ownership team that expects clarity, follow-through, and impact.
People who thrive here are energized by hard problems, experimentation, and continuous feedback.
If something takes months elsewhere, it will ship here in days.
Our work sits at the intersection of AI, national security, and fighting crime.
The problems are complex, the stakes are real, and the environment evolves quickly.
The pace and intensity of the work reflect the importance of the mission.

This listing is sourced directly from TRM Labs's careers page and normalized into a canonical job model.