SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
TRM Labs is an AI-powered intelligence platform helping public and private sector agencies investigate and disrupt crime. The Scam Disruption team targets pig butchering syndicates, romance fraud networks, and investment scam operations that steal billions annually.
As a GEOINT Analyst, you will be the team's location specialist, finding where scam compounds are located, identifying operators, and tracking their movements. Your intelligence will directly inform law enforcement action to dismantle these operations.
Key responsibilities:
- Locate and map scam compounds using satellite and aerial imagery, geolocation, and open-source geospatial data; track changes over time including construction, expansion, and relocation after raids
- Place people and devices to specific locations using ad tech, commercial location data, IP geolocation, and other location-bearing telemetry; build pattern-of-life pictures of operators and controllers
- Fuse location intelligence with on-chain attribution, OSINT, and commercial data to identify operators, controllers, and movement patterns
- Pivot from single data points (address, IP, photo, victim lead) to compound identification and operator networks
- Partner with Threat Intelligence Analysts, CTI Analysts, and All-Source Leads to translate disruption strategy into targeting packages that influence law enforcement and government action
- Operate the "intelligence flywheel" daily, fusing geospatial, ad tech, on-chain, and off-chain data
The team operates async-first via Slack and Notion with structured syncs for alignment. High autonomy, high standards, low bureaucracy. Weekly team syncs align targeting priorities; daily async standups track active work and target packages. Primary time zone overlap is US Eastern/Central. Surge availability expected during time-sensitive disruption windows.
TRM is Series C, $220M funded (Goldman Sachs, Bessemer, Y Combinator, Thoma Bravo), headquartered in San Francisco with distributed hubs in LA, SF, NYC, DC, London, and Singapore.
REQUIREMENTS:
- 3–5 years hands-on GEOINT, imagery analysis, or location-based targeting experience: military or Intelligence Community geospatial roles (NGA, Army 35G), law enforcement targeting, or mission-aligned private sector equivalent (GEOINT/OSINT services firm)
- Geolocation and imagery tradecraft: ability to place a photo, video, IP, or coordinates with confidence and explain methodology
- Ad tech and commercial location data (strongly preferred): experience with mobile ad IDs, bidstream, or commercial location data; ideally both GEOINT and ad tech
- Ability to work beyond government toolkit: get answers from open-source and commercial tools when classified systems unavailable
- Creative tactical thinking: demonstrated ability to pivot from single point to network view, identifying operators behind operations
- Link and pattern analysis fluency: correlate disparate data sources to generate defensible target packages
- Clear written and verbal communication: explain methods, confidence levels, and role in plain terms; write actionable memos, attribution write-ups, and leads
- AI fluency (required): use AI tools in workflow for data synthesis, output drafting, and analysis acceleration; provide examples of AI impact on your work
- Crypto experience (plus, not required): TRM teaches on-chain tradecraft
- Familiarity with Southeast Asia scam compounds or Chinese-run criminal networks (plus)
- Must have right to work in location of residence (UK, EMEA, or US)
