SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 155,000 - 175,000 / annual
TRM Labs is seeking a Lead Instructor for Cyber & OSINT to design and deliver training on cyber investigations, open-source intelligence (OSINT), and cyber threat intelligence (CTI) for public-sector and government audiences. You will own curriculum design and live/virtual instruction, teaching analysts and investigators how to combine cyber and OSINT tradecraft with blockchain intelligence to build complete threat pictures.
Key responsibilities include:
- Program manage and conduct live and virtual training on cyber, OSINT, and CTI tradecraft for global public-sector and government learners
- Design and build curriculum, learning modules, labs, and practical exercises in writing, mixed media, and in-person briefings
- Teach across TRM's AI intelligence and blockchain intelligence platforms
- Develop train-the-trainer materials, instructor guides, and reusable content to scale offerings
- Identify, build, and manage relationships with government and industry partners
- Keep course materials current with evolving threat landscape (ransomware, nation-state activity, phishing, ATOs, sim swaps, hacks, exploits, cyber-enabled crime)
- Maintain working proficiency in cyber investigative techniques, OSINT methodology, threat actor tracking, and intelligence analysis
This role requires 50-75% travel for in-person delivery at federal, state/local, and partner sites across the United States. You'll join TRM Academy's Training and Certification team, a group of master instructors in a mission-first, execution-oriented culture. The team is distributed across US time zones with regular syncs and collaboration. No on-call responsibilities.
TRM Labs provides AI-powered intelligence solutions helping public and private sector agencies investigate and disrupt crime. The company fuses on-chain data with cyber and OSINT to help investigators trace illicit activity and build cases against threat networks. TRM Academy delivers a personalized learning platform where learners globally can develop skills in detecting and preventing crypto-enabled financial crime.
REQUIREMENTS:
- 3–5+ years of experience instructing courses, leading trainings, or delivering technical instruction
- Hands-on experience in cyber investigations, OSINT, and/or cyber threat intelligence (CTI) (core requirement)
- Experience working in or with the public sector/government (e.g., cyber division, intelligence unit, agency cyber program) or proven track record training these audiences
- Proven experience building course content (curriculum, labs, practical exercises, testing) that enables others to learn and teach
- Comfortable training private-sector audiences (security teams, crypto businesses/VASPs, financial institutions)
- Excellent oral and written communication skills
- Ability to command the room
- AI fluency: production-level usage of AI tools in day-to-day work (not just awareness); evaluated in interview and performance reviews
NICE TO HAVE:
- Law enforcement experience (federal and/or state, local, education)
- Blockchain, cryptocurrency, or digital assets knowledge, including on-chain investigations or money laundering typologies
- Relevant certifications (GIAC such as GCTI or GOSI, or similar cyber/OSINT credentials)
