TRM Labs

TRM Labs

Senior All-Source Investigator, Severe Harms

United States · Senior

Sponsorship not specifiedDetected 51 days ago
RailsA/B TestingCybersecurityCadenceResearchLeadershipCommunicationCollaborationProblem SolvingAdaptability

Stay score

odds of building a lasting career here

30Risky
Cap-exempt (no lottery)0
Sponsors this role52
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70

Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Files H-1B transfers

4 transfer filings in the last year, covering 4 workers. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • In parallel, CSAM distribution networks increasingly monetize through cryptocurrency, using crypto's speed and pseudonymity to move money across borders faster than any single agency can follow.
  • TRM's Severe Harms pod exists to close that gap.
  • It is some of the most consequential and difficult work at TRM.

Responsibilities

  • BUILD A SAFER WORLD.
  • TRM's platforms enable investigators to trace illicit activity, build cases, and construct operating pictures of threat networks.
  • This is an individual-contributor role for someone who wants to do the work directly, not manage it.
  • Build defensible, actionable outputs. Every attribution write-up and legal-process return you produce should hold up when tested by Law Enforcement and Government Partners, or a court - with growing independence over time.
  • Map networks, not just events. Build a picture of how a network actually operates, rather than a catalogue of isolated indicators.
  • Use AI to accelerate your own casework. Apply it where it genuinely speeds up or sharpens your work, and know where human judgment has to stay in the loop given the sensitivity of the material.
  • Work your caseload. Run point on target packages from referral to disruption: legal process → on-chain/off-chain fusion → targeting, on your own cases under normal review.
  • We are building a safer world.

Requirements

  • You are an operator.
  • You have taken a body of information and driven it to a real outcome, not just written a report about it.
  • You know how to work a case with other people, not just alone.
  • You can point to investigations you've co-run with another investigator, or handed off cleanly without losing momentum.
  • AI fluency (required).
  • Working knowledge of legal process - subpoenas, warrants, preservation requests - or a fast willingness to learn it.
  • You can produce a clear, defensible written package under review.
  • Operating with a high degree of ambiguity

Nice to have

  • Crypto or on-chain experience.
  • A genuine advantage, but we teach on-chain tradecraft - we cannot teach the instinct built from years investigating crimes against children.
  • Sextortion/CSAM-ecosystem familiarity.
  • Given the sensitivity of the material and data handled, successful completion of an enhanced background check is required as a condition of employment.
  • Distributed team with an async-first approach via Slack and Notion, plus structured syncs for alignment.
  • Genuine interest in, and some exposure to, child exploitation, sextortion, or closely adjacent investigative work, including CT or Serious Organised Crime.
  • We will teach you the ecosystem specifics

Compensation

  • Your recruiter will present the offer and compensation details.

Company info

  • The Severe Harms pod operates within TRM's Primary Intelligence organization, alongside the other threat categories comprised of threat intelligence analysts, on-chain investigators and data scientists.
  • High autonomy, high standards, low bureaucracy - you work directly with engineers, analysts, legal counterparts, and the partners and customers who depend on the team's output.
  • We are a high-velocity, high-ownership team that expects clarity, follow-through, and impact.
Apply directly at TRM Labs →Create a free account for alerts like thisView TRM Labs immigration profile

This listing is sourced directly from TRM Labs's careers page and normalized into a canonical job model.