TRM Labs

TRM Labs

Senior / Staff Cyber Threat Response Advisor

United States · Staff+

No sponsorshipDetected 23 days ago
A/B TestingCybersecurityIncident ResponseResearchLeadershipCommunicationCollaborationProblem SolvingAdaptabilitySCADA

Stay score

odds of building a lasting career here

30Risky
Cap-exempt (no lottery)0
Sponsors this role52
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70

Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Files H-1B transfers

4 transfer filings in the last year, covering 4 workers. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • TRM's Cybercrime team, part of the Primary Intelligence organization, works to close that gap.
  • This is a senior individual-contributor role for someone who wants to do the work directly.
  • Analyze critical-infrastructure sectors to identify the organizations most important to protect, and surface the vulnerabilities and exposures affecting them - from a first signal through to an actionable notification a defender can use.

Responsibilities

  • BUILD A SAFER WORLD.
  • TRM's platforms enable investigators to trace illicit activity, build cases, and construct operating pictures of threat networks.
  • The organizations most important to protect are often the ones with the least visibility into their own exposure.
  • Drive end-to-end remediation for your sectors.
  • Build with AI, not just use it.
  • Feed what works back into TRM's tooling and methods so defense and remediation against cyber threats scale beyond your own caseload.
  • Produce finished intelligence. Deliver exposure notifications, actor and campaign profiles, IOC packages, and infrastructure attributions that hold up when tested by a critical-infrastructure defender, a government partner, or an ISAC.
  • Act as a senior advisor across multiple active threats at once, helping improve quality, share tradecraft, and informally support other analysts through strong analytical execution.
  • Support partners and internal teams on time-sensitive issues where fast, defensible judgment matters more than perfect information.
  • We are building a safer world.

Requirements

  • 5-8+ years in cyber threat intelligence, incident response, or a closely related analytical field, including experience as the primary point of contact for an outside organization during a live incident or remediation.
  • A track record of driving complex analysis independently - taking a body of fragmented information and driving it to a real, actionable outcome, not just writing a report about it.
  • You are comfortable working to someone else's clock.
  • Applied AI fluency is required.
  • Strong OSINT instincts and the ability to resolve identities, aliases, infrastructure, and behavior across fragmented sources.
  • Comfort operating in a fast-paced environment where priorities can change quickly and ambiguity is normal.
  • Must be based in the United States.
  • U.S. citizenship is required.
  • Operating with a high degree of ambiguity

Nice to have

  • Working proficiency in a language heavily used by cyber actors, particularly if used operationally rather than academically.
  • A public presence: conference talks, published research, or invite-only sharing circles.
  • Distributed team with an async-first approach via Slack and Notion, plus structured syncs for alignment.

Skills

  • Daily async standups via Slack on active work, returns, and target packages in flight.
  • All output documented in Notion and TRM's investigative tools.

Compensation

  • Your recruiter will present the offer and compensation details.

Company info

  • TRM's Cybercrime team sits within the Primary Intelligence organization, alongside the other threat categories, and combines expert tradecraft and boundary-pushing innovation with deep analytical workflows across cyber, OSINT, and blockchain-enabled threat activity.
  • High autonomy, high standards, low bureaucracy - you work directly with analysts, engineers, and the partners and customers who depend on your output.
  • We are a high-velocity, high-ownership team that expects clarity, follow-through, and impact.

Visa & Work Authorization

  • citizenship is required
Apply directly at TRM Labs →Create a free account for alerts like thisView TRM Labs immigration profile

This listing is sourced directly from TRM Labs's careers page and normalized into a canonical job model.