Senior All-Source Investigator, Severe Harms

About the role

TRM Labs builds AI-powered intelligence solutions that help agencies investigate and disrupt crime. Its Severe Harms pod works with law enforcement and government partners to trace the financial rails behind sextortion and CSAM monetization, which increasingly uses cryptocurrency. As a Severe Harms All-Source Investigator you run cases from referral to disruption, building target packages and legal-process returns. This is an individual-contributor role, fully remote and based in the US or UK, with occasional travel and periodic DC-based sessions.

Key responsibilities

• Run target packages from referral to disruption: legal process, on-chain/off-chain fusion, and targeting on your own cases under normal review.
• Combine OSINT, link analysis and direct engagement with subjects and sources to identify and attribute actors.
• Produce defensible, actionable outputs such as attribution write-ups and legal-process returns.
• Map networks and use AI to speed up casework, keeping human judgment in the loop.
• Work with legal, engineering and external partners, following evidence-handling, escalation and mandatory-reporting protocols.
• Manage your own content exposure and well-being, and take care of your teammates.

Required profile

• 3-5 years of relevant investigative or casework experience (illicit finance, financial crime, cybercrime, trust and safety, all-source intelligence, OSINT, or similar law-enforcement background).
• Ability to drive information to a real outcome, and to work with others on investigations.
• Genuine interest in child exploitation, sextortion or CSAM-adjacent work; the team teaches the ecosystem specifics.
• AI fluency: you use AI in your own work and know where it helps and where it does not.
• Working knowledge of legal process (subpoenas, warrants, preservation requests) or a fast willingness to learn it.
• Solid written communication and sound judgment with difficult material.

Nice to have

• Crypto or on-chain experience.
• Direct experience with financial sextortion, CSAM distribution networks or grooming patterns.

An enhanced background check is required as a condition of employment. Applications are made directly through the company's application form, with answers to application questions used to assess candidates.