SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Chainalysis is seeking a Senior Intelligence Analyst to serve as the company's subject-matter expert on North Korea (DPRK) and China crypto threats. This is a depth role focused on becoming the leading expert on how DPRK and Chinese actors use cryptocurrency for theft, sanctions evasion, and money laundering.
You will own end-to-end attribution for DPRK and Chinese crypto activity, including Lazarus Group operations, exchange and DeFi hacks, IT-worker schemes, Chinese OTC networks, guarantee marketplaces, scam-compound laundering, and organized-crime finance. You'll map how these networks operate on-chain, trace stolen and illicit funds through mixers and cross-chain bridges, and produce finished intelligence that customers and government partners act on.
Key responsibilities include:
- Own DPRK & China attribution end to end: threat-actor entities, accounts, addresses, and infrastructure
- Lead rapid attribution responses to DPRK- and China-related sanctions events from OFAC and allied authorities
- Map networks on-chain, tracing fund flows through laundering infrastructure and keeping coverage current as actors adapt
- Produce finished intelligence: advisory notes, customer briefings, and contributions to flagship publications (Crypto Crime Report)
- Represent Chainalysis as the named external expert at conferences, panels, media, and government briefings
- Set the DPRK & China collection agenda, surfacing data needs and feeding requirements into the team's collection process
- Translate threat typologies into detection guidance for products and customers
- Design and tune AI automation to scale your analysis and the team's work
- Mentor and level up the team on DPRK, China, and money-laundering tradecraft
You'll work with a fast-moving, globally distributed team of analysts, threat-domain SMEs, data scientists, and engineers across time zones. The role emphasizes AI-forward instincts—building automation to scale work, not just using it. Chainalysis views AI as a new way of working that turns instructions into work done, and expects all employees to take ownership of AI output and ensure quality.
REQUIREMENTS:
- Deep, demonstrable DPRK and/or China expertise: real command of DPRK state-sponsored crypto operations (Lazarus Group, exchange/bridge hacks, IT-worker schemes) and/or Chinese-language money laundering, OTC/underground banking, guarantee marketplaces, organized-crime finance
- On-chain tracing ability against DPRK/China targets: direct experience following DPRK hack laundering or Chinese OTC/laundering networks on-chain, or deep DPRK/China threat-finance expertise paired with proven blockchain-tracing skill
- National-security or threat-finance background: intelligence, sanctions, counter-threat-finance, or investigations from IC, Treasury/OFAC, law enforcement, military, think tank, research institution, or private-sector CTF/sanctions work
- Regional fluency: strong grasp of DPRK and Chinese illicit-finance ecosystems and regional money-laundering flows; Mandarin and/or Korean language ability is a significant plus
- Elite potential and proven track record: exceptional aptitude, judgment, work ethic; demonstrated leadership of hard problems end to end; raises everyone around you
- Excellent writing and communication: outward-facing expert role; intelligence must land with analysts, customers, and senior audiences
- AI-forward instincts: build automation to scale your work and others', not just use it
- Comfort working with data; blockchain forensics experience strongly preferred
- 5+ years of relevant analytic, intelligence, or threat-finance experience for Senior hire; 8+ years and recognized domain authority for Staff hire
PLUS (nice-to-have):
- Mandarin and/or Korean language ability
- Direct OFAC sanctions/designation experience, especially involving DPRK or Chinese entities
- Published research or public speaking on DPRK crypto theft, Lazarus Group, or Chinese money laundering
- Familiarity with cross-chain bridge/mixer laundering, guarantee marketplaces, or Chinese OTC/underground-banking networks
