TRM Labs
GEOINT Analyst, Scams
United States · Mid
Stay score
odds of building a lasting career here
Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- The Scam Disruption team is TRM's tip of the spear against pig butchering syndicates, romance fraud networks, and investment scam operations that steal billions from victims each year.
- Locate and map scam compounds, people, and devices
- Fuse intelligence with on-chain attribution and OSINT to identify operators and controllers
Responsibilities
- BUILD A SAFER WORLD.
- TRM's platforms enable investigators to trace illicit activity, build cases, and construct operating pictures of threat networks.
- Partner with the Threat Intelligence Analyst (Scams Expert), the CTI Analyst, and the All-Source Lead to translate disruption strategy into targeting packages that influence law enforcement and government action
- Our process is designed to understand how you think, solve problems, and deliver impact, while allowing you to evaluate TRM.
- We are building a safer world.
- This environment is energizing for people who enjoy building, solving hard problems, and making progress in situations that are not always fully defined.
- We balance speed with high standards, own outcomes end‑to‑end, and invest in getting better everyday.
Requirements
- 3 to 5 years of hands-on GEOINT experience: military, IC, law enforcement, or a GEOINT/OSINT firm
- Works beyond the government toolkit: you can get answers from open-source and commercial tools when classified systems and data aren't available
- 3 to 5 years of hands-on
- Operating with a high degree of ambiguity
Nice to have
- Creative tactical thinking - demonstrated ability to pivot from a single point to a network view, identifying operators behind operations
- Link and pattern analysis fluency. ability to correlate disparate data sources to generate defensible target packages
- AI fluency (required) - you use AI tools in your workflow, synthesizing data, drafting outputs, and accelerating analysis, with examples of how AI has impacted your work
- we cannot teach the targeter's instinct
- Familiarity with Southeast Asia scam compounds or Chinese-run criminal networks is a plus
- Distributed team with an async-first approach via Slack and Notion, plus structured syncs for alignment
Skills
- All output documented in Notion and TRM's investigative tools
- Most interview processes include a case study, an AI skills assessment, and a Leadership Principles interview.
- Hiring Manager: Deep dive into your relevant experience, skills, and impact.
Compensation
- Your recruiter will present the offer and compensation details.
Company info
- The Scam Disruption team operates within TRM's Blockchain Intelligence organization, alongside threat intelligence analysts, on-chain investigators, and federal partners
- All-Source Investigators are the operational core, converting strategy and tooling into prosecutable, actionable intelligence
- High autonomy, high standards, low bureaucracy - work directly with analysts, engineers, and customers who depend on your output
- We are a high-velocity, high-ownership team that expects clarity, follow-through, and impact.
- Impact-Oriented Trailblazer: We put customers first and move with speed, focus, and adaptability.
- At TRM, we care deeply about our craft.
This listing is sourced directly from TRM Labs's careers page and normalized into a canonical job model.