Senior Threat Intelligence Analyst, Hacks

Role overview A blockchain intelligence platform that supports public- and private-sector investigators is hiring a Senior Threat Intelligence Analyst to lead its hacks coverage end-to-end. The role owns the metrics, systems, and small contractor team that deliver fast, accurate intelligence when protocols, exchanges, or bridges are drained. It is a hands-on, high-accountability position operating around the clock when major incidents break.

Responsibilities - Lead incident response during major hacks: triage, cross-team coordination, internal and customer communications, and post-incident reporting. - Ensure every major hack is visible to customers within hours of the first credible public report. - Maintain complete, accurate hack records covering entities, theft addresses, dates, amounts, and hack types at any size. - Design systems with Data Science and Engineering that carry hack-specific attribution downstream as stolen funds move. - Build AI-assisted tools and agents to automate parts of hacks analysis while keeping human quality control over outputs. - Root-cause major exploits and publish best-in-class technical analysis that becomes the industry's first source cited. - Develop approaches that surface vulnerable contracts before they are exploited and feed those signals into the product.

Requirements - 5+ years in blockchain intelligence, crypto investigations, cyber threat intelligence, or incident response. - Owned incident response in a high-stakes environment such as an exchange, security firm, IR team, or CTI function. - Strong blockchain tracing across BTC, EVM, TRON, and Solana, including bridges, cross-chain swaps, and mixers. - Understanding of how DeFi, bridge, and exchange exploits work and how attackers behave afterward. - Applied AI fluency, with hands-on experience building AI-assisted or agentic workflows and validating their outputs. - Experience managing contractors or leading a small team. - Clear writing and briefing skills across technical deep-dives and executive summaries.

Nice to have - Smart-contract reverse-engineering in Solidity. - Background at a security auditor or blockchain analytics firm. - Experience tracking well-known hacker groups.