Senior All-Source Investigator, Severe Harms

BUILD A SAFER WORLD. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM's platforms enable investigators to trace illicit activity, build cases, and construct operating pictures of threat networks. Leading agencies and businesses worldwide rely on TRM to make the world safer and more secure. ABOUT THE ROLE Sextortion — extorting money or further imagery from victims, disproportionately minors, under threat of releasing explicit images — has been named a national emergency by the FBI and NCMEC, and financial sextortion cases have been directly linked to a rise in teen suicides. In parallel, CSAM distribution networks increasingly monetize through cryptocurrency, using crypto's speed and pseudonymity to move money across borders faster than any single agency can follow. TRM's Severe Harms pod exists to close that gap. We fuse on-chain and off-chain intelligence to trace the financial rails behind this abuse, working alongside Law Enforcement and Government Partners, and TRM's financial-institution and exchange partners to identify offenders, disrupt activity, and support victim identification and safeguarding. It is some of the most consequential and difficult work at TRM. As a Severe Harms All-Source Investigator, you will be one of the investigators running that flywheel every day — tracing the financial rails behind sextortion and CSAM monetization, building the target packages and legal-process returns that lead to disruption, and working cases from referral through to an actionable outcome. This is an individual-contributor role for someone who wants to do the work directly, not manage it. You will build genuine casework skill on some of the most consequential and difficult material at TRM, with a manager and a Lead Investigator supporting your growth. THE IMPACT YOU WILL HAVE - Work your caseload. Run point on target packages from referral to disruption: legal process → on-chain/off-chain fusion → targeting, on your own cases under normal review. - Run all-source collection. Combine OSINT, link analysis, and direct engagement with subjects and sources to identify and attribute actors — not just trace the money. - Build defensible, actionable outputs. Every attribution write-up and legal-process return you produce should hold up when tested by Law Enforcement and Government Partners, or a court — with growing independence over time. - Map networks, not just events. Build a picture of how a network actually operates, rather than a catalogue of isolated indicators. - Use AI to accelerate your own casework. Apply it where it genuinely speeds up or sharpens your work, and know where human judgment has to stay in the loop given the sensitivity of the material. - Partner across the ecosystem. Work directly with legal, engineering, and external partners on the specific leads and referrals in front of you. - Practice victim-centered, trauma-informed investigative work, and follow TRM's protocols for evidence handling, escalation, and mandatory reporting. - Take care of yourself and your teammates. Actively manage your own content exposure and psychological well-being, and know when and how to ask for support. WHAT WE'RE LOOKING FOR - You are an operator. 3–5 years of relevant investigative or casework experience — illicit-finance, financial-crime, cybercrime, trust & safety, all-source intelligence, OSINT, or direct human-source engagement, or a comparable law-enforcement/intelligence-adjacent background. You have taken a body of information and driven it to a real outcome, not just written a report about it. - Real collection capability, whether that's hands-on experience building or adapting tools to pull signal from open