Note: The job is a remote job and is open to candidates in USA. Chainalysis is a blockchain data platform focused on establishing trust in cryptocurrencies. The Senior Intelligence Analyst will be responsible for owning the end-to-end attribution of DPRK and China-related crypto threats, analyzing illicit activities, and producing actionable intelligence for customers.

Responsibilities

• Own DPRK & China attribution end to end — the threat-actor entities, their definitions, and the accounts, addresses, and infrastructure they operate: Lazarus Group and DPRK state-sponsored theft and laundering, DPRK IT-worker networks, Chinese-language OTC and underground-banking networks, guarantee marketplaces (e.g., Huione-style platforms), scam-compound and pig-butchering laundering infrastructure, fentanyl and precursor vendors, and Chinese money-laundering organizations
• Lead the attribution response to DPRK- and China-related sanctions events — when OFAC or allied authorities designate DPRK actors, exchange-hacking units, or Chinese laundering networks, drive the rapid, high-visibility on-chain attribution that turns those designations into coverage in our data, often against the clock
• Map the networks on-chain — trace how stolen and illicit funds move through mixers, cross-chain bridges, no-KYC swaps, OTC brokers, and off-ramps, following DPRK hack proceeds into and through Chinese laundering infrastructure, and keep that picture current as they adapt to pressure
• Produce finished intelligence — advisory notes, customer and partner briefings, and contributions to flagship publications (the Crypto Crime Report and beyond) that make DPRK theft/laundering and Chinese money laundering legible and actionable
• Be the named external expert — represent Chainalysis on DPRK and China crypto threats at conferences, on panels, with the press, and in briefings to public- and private-sector partners
• Help set the DPRK & China collection agenda — surface what data we need on these networks and feed those requirements into our collection process and priority intelligence requirements; you direct collection for the domain, but it runs through the team’s apparatus and prioritization, not you alone
• Translate typologies into detection — turn what you learn about DPRK and Chinese methods into guidance that our products and our customers can operationalize
• Build with AI — design and tune the automation that scales your analysis and the team’s, and handle the hard cases automation can’t
• Level up the team — raise the bar on DPRK, China, and money-laundering tradecraft broadly, and partner closely with analysts, other SMEs, data science, and engineering

Skills

• Deep, demonstrable DPRK and/or China expertise — real command of DPRK state-sponsored crypto operations (Lazarus Group, exchange and bridge hacks, IT-worker schemes) and/or Chinese-language money laundering, OTC and underground banking, guarantee marketplaces, and organized-crime finance
• On-chain tracing ability against DPRK/China targets — direct experience following DPRK hack laundering or Chinese OTC/laundering networks on-chain, or deep DPRK/China threat-finance expertise paired with proven blockchain-tracing skill
• A national-security or threat-finance background — intelligence, sanctions, counter-threat-finance, or investigations, from the IC, Treasury/OFAC, law enforcement, the military, a think tank or research institution, or private-sector CTF/sanctions work
• Regional fluency — a strong grasp of the DPRK and Chinese illicit-finance ecosystems and regional money-laundering flows
• Elite potential and a proven track record — exceptional aptitude, judgment, and work ethic; you've led hard problems end to end and you raise everyone around you
• Excellent writing and communication — this is an outward-facing expert role; your intelligence has to land with analysts, customers, and senior audiences alike
• AI-forward instincts — you build automation to scale your work and others', not just use it
• Comfort working with data; blockchain forensics experience strongly preferred
• 5+ years of relevant analytic, intelligence, or threat-finance experience for a Senior hire; 8+ years and recognized domain authority for a Staff hire
• Mandarin and/or Korean language ability
• Direct experience with OFAC sanctions, designations, or the designation process — especially involving DPRK or Chinese entities
• A record of published research or public speaking on DPRK crypto theft, Lazarus Group, or Chinese money laundering
• Familiarity with cross-chain bridge and mixer laundering, guarantee marketplaces (e.g., Huione-style platforms), or Chinese OTC and underground-banking networks

Benefits

• Offers Equity
• Offers Bonus
• Workplace_type: Remote
• We provide the tools, workflows, and space to experiment

Company Overview

Company H1B Sponsorship