About the company
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Threat Intelligence Analyst, Hacks based in United Kingdom.
Responsibilities
- Lead the response to major cryptocurrency hacks, coordinating triage, investigations, internal stakeholders, customer communications, and post-incident reporting.
- Ensure significant hacks are identified, investigated, and made visible to customers within hours of credible public reporting, including through around-the-clock coverage.
- Maintain complete and accurate hack intelligence, including affected entities, theft addresses, dates, stolen amounts, and attack types.
- Design and improve systems with Data Science and Engineering teams to track and attribute stolen funds as they move across blockchains and services.
- Develop AI-assisted tools, agents, and workflows that automate parts of hack analysis and incident response while maintaining rigorous human quality control.
- Conduct root-cause analysis of significant exploits and produce detailed technical research and publications.
- Develop methods to identify vulnerable contracts and potential threats before exploitation and contribute those insights to relevant products.
- Manage contractors and coordinate operating rhythms across teams and time zones, including weekly team syncs, monthly metrics reviews, and incident war rooms.
- Collaborate with teams covering cyber threat intelligence, nation-state activity, investigations, data science, engineering, and communications.
Requirements
- 5+ years of professional experience in blockchain intelligence, cryptocurrency investigations, cyber threat intelligence, incident response, or a closely related discipline.
- Demonstrated experience owning high-stakes incident response, including war rooms, investigation leadership, incident reporting, and communications under pressure.
- Strong blockchain tracing capabilities across major networks such as Bitcoin, EVM-compatible chains, TRON, and Solana, including experience with bridges, cross-chain swaps, and mixers.
- Strong understanding of DeFi, bridge, and cryptocurrency exchange exploits, as well as attacker behavior following the theft of funds.
- Practical experience applying AI to analytical workflows, including building or using AI-assisted and agentic systems, validating outputs, identifying failure modes, and applying appropriate human oversight.
- Experience managing contractors or leading a small team in a fast-moving operational environment.
- Excellent written and verbal communication skills, with the ability to produce both technical investigations and concise executive-level briefings.
- Highly hands-on and accountable, with a willingness to take ownership of complex analytical work rather than focusing solely on coordination.
- Familiarity with smart-contract reverse engineering, particularly Solidity, is a plus.
- Experience working at a security auditor, blockchain analytics organization, or similar intelligence-focused environment is advantageous.
- Experience tracking or investigating activity associated with specific, well-known hacker groups is also a plus.
Conditions
- Opportunity to work on complex problems at the intersection of AI, blockchain intelligence, cybersecurity, and crime prevention.
- High-ownership environment with significant autonomy over investigative approaches, systems, and operational processes.
- Collaboration with multidisciplinary teams across intelligence, investigations, data science, engineering, and communications.
- Distributed-first working environment with collaboration across multiple international time zones.
- Exposure to advanced AI-driven analytical workflows and opportunities to build new investigative tools and automation.
- Opportunity to contribute to technical research and publications with broad industry relevance.
- Fast-paced environment focused on experimentation, rapid iteration, and measurable impact.
- Support for professional growth through challenging, mission-driven work and continuous feedback.
- Additional compensation, healthcare, flexibility, and other benefits may vary based on location and employment terms.