GEOINT Analyst, Scams

Overview

The GEOINT Analyst, Scams is TRM's location specialist on the Scam Disruption team, locating scam compounds and the people who run them, and turning that picture into intelligence that law enforcement partners can act on.

What you'll do

• Locate and map scam compounds using satellite and aerial imagery, geolocation, and open-source geospatial data, and track how they change over time, including construction, expansion, and relocation after raids
• Place people and devices to a location using ad tech and commercial location data, IP geolocation, and other location-bearing telemetry, and build pattern-of-life pictures of operators and controllers
• Fuse location intelligence with on-chain attribution, OSINT, and commercially available data to identify operators, controllers, and movement patterns
• Pivot from a single address, IP, photo, or victim lead to the compound and the people running it
• Partner with the Threat Intelligence Analyst (Scams Expert), the CTI Analyst, and the All-Source Lead to translate disruption strategy into targeting packages that influence law enforcement and government action
• Operate the "intelligence flywheel" daily, fusing geospatial, ad tech, on-chain, and off-chain data to build operational pictures

What you'll need

• 3 to 5 years of hands-on GEOINT, imagery analysis, or location-based targeting experience: military or Intelligence Community geospatial roles (e.g., NGA, Army 35G), law enforcement targeting, or a mission-aligned private sector equivalent such as a GEOINT or OSINT services firm
• Geolocation and imagery tradecraft: ability to take a photo, video, IP, or set of coordinates, place it with confidence, and explain how you got there
• Works beyond the government toolkit: can get answers from open-source and commercial tools when classified systems and data aren't available
• Creative tactical thinking, with demonstrated ability to pivot from a single point to a network view, identifying operators behind operations
• Link and pattern analysis fluency: ability to correlate disparate data sources to generate defensible target packages
• Clear written and verbal communication: can explain methods, confidence, and own role in plain terms, and write memos, attribution write-ups, and leads that are actionable
• AI fluency (required): uses AI tools in workflow for synthesizing data, drafting outputs, and accelerating analysis, with examples of how AI has impacted your work

Nice to have

• Ad tech and commercial location data experience, including mobile ad IDs, bidstream, or other commercial location data; ideally both GEOINT and ad tech
• Crypto experience
• Familiarity with Southeast Asia scam compounds or Chinese-run criminal networks

Details

• Location: remote in the UK, EMEA, or US (including Washington, DC); candidates must already have the right to work where they are based
• Primary time zone overlap: US Eastern / Central
• Weekly team syncs and daily async standups via Slack
• Surge availability expected during time-sensitive disruption windows