[Hiring] Senior All-Source Investigator @TRM Labs

Role Description

As a Severe Harms All-Source Investigator , you will be one of the investigators running that flywheel every day — tracing the financial rails behind sextortion and CSAM monetization, building the target packages and legal-process returns that lead to disruption, and working cases from referral through to an actionable outcome.

• Work your caseload. Run point on target packages from referral to disruption: legal process → on-chain/off-chain fusion → targeting, on your own cases under normal review.
• Run all-source collection. Combine OSINT, link analysis, and direct engagement with subjects and sources to identify and attribute actors — not just trace the money.
• Build defensible, actionable outputs. Every attribution write-up and legal-process return you produce should hold up when tested by Law Enforcement and Government Partners, or a court — with growing independence over time.
• Map networks, not just events. Build a picture of how a network actually operates, rather than a catalogue of isolated indicators.
• Use AI to accelerate your own casework. Apply it where it genuinely speeds up or sharpens your work, and know where human judgment has to stay in the loop given the sensitivity of the material.
• Partner across the ecosystem. Work directly with legal, engineering, and external partners on the specific leads and referrals in front of you.
• Practice victim-centered, trauma-informed investigative work, and follow TRM's protocols for evidence handling, escalation, and mandatory reporting.
• Take care of yourself and your teammates. Actively manage your own content exposure and psychological well-being, and know when and how to ask for support.

Qualifications

• 3–5 years of relevant investigative or casework experience — illicit-finance, financial-crime, cybercrime, trust & safety, all-source intelligence, OSINT, or direct human-source engagement, or a comparable law-enforcement/intelligence-adjacent background.
• Real collection capability, whether that's hands-on experience building or adapting tools to pull signal from open web, social, and forum sources, or direct experience engaging subjects and sources yourself.
• Ability to work collaboratively on cases with other people.
• Comfortable working under pressure with tight deadlines.
• Genuine interest in, and some exposure to, child exploitation, sextortion, or closely adjacent investigative work.
• AI fluency (required).
• Working knowledge of legal process — subpoenas, warrants, preservation requests — or a fast willingness to learn it.
• Solid written communication skills.
• Sound judgment with difficult material.
• Fully remote, US- or UK-based. Expect occasional travel, unevenly distributed, with periodic DC-based working sessions.

Requirements

• Crypto or on-chain experience is a genuine advantage.
• Sextortion/CSAM-ecosystem familiarity will shorten your ramp considerably.
• Successful completion of an enhanced background check is required as a condition of employment.

Benefits

• Weekly 1:1 with your manager.
• Weekly team sync covering active work, throughput, and escalations.
• 6-week performance pulse check-in.
• Quarterly career-pathing conversation.
• Mandatory wellness check-ins and access to specialized counseling/EAP resources.
• Primary time-zone overlap: US Eastern / Central.
• Surge availability expected during time-sensitive referral and disruption windows.