• Control Risks is looking to hire a Security Intelligence Analyst to support a premier client of ours. • The Security Intelligence Analyst will be a key member of the Global Security Intelligence team as they collect, curate, and disseminate current and forecasted risk intelligence in a timely manner to partners and stakeholders. • This position will also work to edit and compile written analysis by the Junior Analysts. • Monitor and analyze geopolitical and global events identify and assess threats to the client’s specific global operations, assets, and personnel. • Provide major event safety and security assessments, forecasts, and vulnerability reports. • Oversee production of analysis by the Junior Analysts on the team. • Conduct site and travel vulnerability assessments to ensure the safety of the client’s employees and locations. • Support location-specific intelligence, including active and archived alerts; city and country intelligence; and interactive maps. • Drafting comprehensive, well-researched, and articulate analysis products providing tailored research for client-specific needs. • Define priorities for in-depth analysis of selected locations relevant to the client’s global interests. • Lead production of specific briefings or presentations. • Other responsibilities may develop with program growth

• Identify threats, trends, and new developments in vulnerabilities and exploit behavior by adversaries while synthesizing raw intelligence and data from numerous data sources • Identify and monitor the Tactics, Techniques, and Procedures (TTPs) employed by cyber threat actors that use exploits • Digest, analyze, model and structure data relationships to support the identification and description of malicious activities. • Apply understood analytic tradecraft to gathered intelligence in a consistent manner • Produce finished intelligence analysis to internal and external customers through written reporting of varied depth on short deadlines, with minimal supervision • Collaborate across teams to inform various functions within CrowdStrike about activity of interest and to coordinate adversary/campaign tracking • Develop tools, processes, and technology to support predictive analysis of adversaries and tactics based on vulnerabilities/exploits. • Identify intelligence gaps and submit requests for information to fill gaps • Conduct briefings as needed for a variety of levels of customers as requested (via either phone, video conference, webcast, in-person briefing, or industry conference)

Role Description The Scam Disruption team is TRM's tip of the spear against pig butchering syndicates, romance fraud networks, and investment scam operations that steal billions from victims each year. As an All-Source Investigator, you’ll lead targeting-driven investigative work: taking legal process to the ground, following the data wherever it leads, and delivering actionable intelligence to law enforcement partners. You will operate the "intelligence flywheel" daily — fusing on-chain and off-chain data to build operational pictures that help dismantle scam operations. The Impact You Will Have - Run legal process end-to-end against scam infrastructure and convert returns into targeting-ready intelligence for TRM’s teams and law enforcement partners. - Trace scam compounds geographically and operationally — combining on-chain attribution with off-chain telemetry, OSINT, and commercially available data to identify operators, controllers, and movement patterns. - Work the intelligence flywheel operationally — processing returns at high volume and feeding victim and operator data into TRM's intelligence and product pipelines. - Find the seams — pivot from a single victim into uncovering the operation and multiplying leads. - Partner with the Threat Intelligence Analyst (Scams Expert) and the All-Source Lead to translate disruption strategy into targeting packages that influence federal investigations. Qualifications - 5-8+ years of all-source investigative or targeting experience — federal law enforcement (former 1811s — e.g., FBI, HSI, IRS-CI, Secret Service), Intelligence Community all-source analysis, or mission-aligned private sector equivalent. - Legal process expertise — you have personally drafted and worked returns from US legal process and know how to operationalize the data. - Creative tactical thinking — demonstrated ability to pivot from a single point to a network view, identifying operators behind operations. - Link and pattern analysis fluency — ability to correlate disparate data sources to generate defensible target packages. - Strong written communication — skilled at writing memos, attribution write-ups, and federal-style leads that are actionable. - AI fluency (required) — you use AI tools in your workflow, synthesizing returns, drafting outputs, and accelerating analysis, with examples of how AI has impacted your work. - Crypto experience is a plus, not a requirement — we teach on-chain tradecraft; we cannot teach the targeter's instinct. - US Citizenship required. - Must be located in the US. Benefits - High autonomy, high standards, low bureaucracy — work directly with analysts, engineers, and customers who depend on your output. - Weekly team syncs to align targeting priorities and review disruption opportunities. - Daily async standups via Slack on active work, returns, and target packages in flight. - Surge availability expected during time-sensitive disruption windows. Company Description TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM's platforms enable investigators to trace illicit activity, build cases, and construct operating pictures of threat networks. Leading agencies and businesses worldwide rely on TRM to make the world safer and more secure.

Role Description The Scam Disruption team is TRM's tip of the spear against pig butchering syndicates, romance fraud networks, and investment scam operations that steal billions from victims every year. The Lead All Source Investigator owns the all-source targeting function inside the team — setting the tradecraft bar, building the operating model, mentoring a team of investigators, and personally working the highest-value targets. You are the senior operator who has run this work before, knows what "good" looks like, and is ready to build the foundation that makes the next several investigators effective from day one. The Impact You Will Have - Own the all-source targeting function for the Scam Disruption team — define the tradecraft, set the standards, and ensure every target package leaving the team is defensible, prioritized, and actionable. - Build and scale the team's operating model — design how legal process, data exploitation, and targeting flow end-to-end, and close the loop with engineering on tooling integration. - Mentor and direct a team of All-Source Investigators — set collection priorities, review work product, raise the bar on output quality, and create the player-coach culture that lets the team scale without losing rigor. - Personally work the most complex investigations — multi-jurisdiction compound targeting, controller-level attribution, and the cases no one else on the team can close. - Serve as the senior law-enforcement-facing interface — coordinate with federal partners on perishable leads, prosecutorial referrals, and joint disruption operations. - Partner with the Threat Intelligence Analyst (Scams Expert) as the operational counterpart — turn their strategic disruption frameworks into executed targeting campaigns the team runs at scale. Qualifications - 8+ years of all-source investigative or targeting experience — including time as a senior 1811 (e.g., FBI, HSI, IRS-CI, Secret Service), an Intelligence Community targeting officer, or a private-sector senior investigative lead working complex transnational targeting. - Demonstrated player-coach experience — you have led a team of investigators or targeters before, built workflows others followed, and can point to people you have grown. - Deep legal process expertise — you have built or run a legal-process program at scale and have the operational tradecraft to convert returns into targets. - Federal law-enforcement network — you have working relationships with cyber/crypto units across federal agencies and know how to package intelligence so it actually gets used. - Senior tactical thinking — you have designed the methodology, not just executed it; you can describe an operation where you reframed the problem (e.g., "stop targeting victims, target controllers") and changed team-level outcomes. - Strong written communication and executive presence — comfortable briefing federal partners, TRM leadership, and customer executives on disruption strategy and case outcomes. - AI fluency (required) — you have used AI to scale your team's work, not just your own; you can speak to specific workflows where AI has unlocked headcount-level productivity. - Crypto experience is preferred but not required — fluency in on-chain tradecraft is welcome; you must be willing and able to ramp on the crypto side quickly, working alongside our Threat Intel Scams Expert. Requirements - U.S. Citizenship. - Must be located in the United States. Benefits - High velocity, high ownership team that expects clarity, follow-through, and impact. - Work that often requires operating with a high degree of ambiguity. - A high level of personal ownership and accountability. - Close collaboration across teams and functions. - Frequent, high-touch communication. - Creative problem solving and out-of-the-box thinking. - A pace that rewards urgency, adaptability, and outcomes.