[Remote] Senior Intelligence Analyst, DPRK & China Focus

Note: The job is a remote job and is open to candidates in USA. Chainalysis is a blockchain data platform focused on establishing trust in cryptocurrencies. The Senior Intelligence Analyst will be responsible for owning the end-to-end attribution of DPRK and China-related crypto threats, analyzing illicit activities, and producing actionable intelligence for customers. Responsibilities • Own DPRK & China attribution end to end — the threat-actor entities, their definitions, and the accounts, addresses, and infrastructure they operate: Lazarus Group and DPRK state-sponsored theft and laundering, DPRK IT-worker networks, Chinese-language OTC and underground-banking networks, guarantee marketplaces (e.g., Huione-style platforms), scam-compound and pig-butchering laundering infrastructure, fentanyl and precursor vendors, and Chinese money-laundering organizations • Lead the attribution response to DPRK- and China-related sanctions events — when OFAC or allied authorities designate DPRK actors, exchange-hacking units, or Chinese laundering networks, drive the rapid, high-visibility on-chain attribution that turns those designations into coverage in our data, often against the clock • Map the networks on-chain — trace how stolen and illicit funds move through mixers, cross-chain bridges, no-KYC swaps, OTC brokers, and off-ramps, following DPRK hack proceeds into and through Chinese laundering infrastructure, and keep that picture current as they adapt to pressure • Produce finished intelligence — advisory notes, customer and partner briefings, and contributions to flagship publications (the Crypto Crime Report and beyond) that make DPRK theft/laundering and Chinese money laundering legible and actionable • Be the named external expert — represent Chainalysis on DPRK and China crypto threats at conferences, on panels, with the press, and in briefings to public- and private-sector partners • Help set the DPRK & China collection agenda — surface what data we need on these networks and feed those requirements into our collection process and priority intelligence requirements; you direct collection for the domain, but it runs through the team’s apparatus and prioritization, not you alone • Translate typologies into detection — turn what you learn about DPRK and Chinese methods into guidance that our products and our customers can operationalize • Build with AI — design and tune the automation that scales your analysis and the team’s, and handle the hard cases automation can’t • Level up the team — raise the bar on DPRK, China, and money-laundering tradecraft broadly, and partner closely with analysts, other SMEs, data science, and engineering Skills • Deep, demonstrable DPRK and/or China expertise — real command of DPRK state-sponsored crypto operations (Lazarus Group, exchange and bridge hacks, IT-worker schemes) and/or Chinese-language money laundering, OTC and underground banking, guarantee marketplaces, and organized-crime finance • On-chain tracing ability against DPRK/China targets — direct experience following DPRK hack laundering or Chinese OTC/laundering networks on-chain, or deep DPRK/China threat-finance expertise paired with proven blockchain-tracing skill • A national-security or threat-finance background — intelligence, sanctions, counter-threat-finance, or investigations, from the IC, Treasury/OFAC, law enforcement, the military, a think tank or research institution, or private-sector CTF/sanctions work • Regional fluency — a strong grasp of the DPRK and Chinese illicit-finance ecosystems and regional money-laundering flows • Elite potential and a proven track record — exceptional aptitude, judgment, and work ethic; you've led hard problems end to end and you raise everyone around you • Excellent writing and communication — this is an outward-facing expert role; your intelligence has to land with analysts, customers, and senior audiences alike • AI-forward instincts — you build automation to scale your work and others', not just use it • Comfort working with data; blockchain forensics experience strongly preferred • 5+ years of relevant analytic, intelligence, or threat-finance experience for a Senior hire; 8+ years and recognized domain authority for a Staff hire • Mandarin and/or Korean language ability • Direct experience with OFAC sanctions, designations, or the designation process — especially involving DPRK or Chinese entities • A record of published research or public speaking on DPRK crypto theft, Lazarus Group, or Chinese money laundering • Familiarity with cross-chain bridge and mixer laundering, guarantee marketplaces (e.g., Huione-style platforms), or Chinese OTC and underground-banking networks Benefits • Offers Equity • Offers Bonus • Workplace_type: Remote • We provide the tools, workflows, and space to experiment Company Overview • Chainalysis provides blockchain data and analysis to governments, banks, and businesses worldwide. It was founded in 2014, and is headquartered in New York, New York, USA, with a workforce of 501-1000 employees. Its website is https://chainalysis.com. Company H1B Sponsorship • Chainalysis has a track record of offering H1B sponsorships, with 10 in 2025, 8 in 2024, 20 in 2023, 23 in 2022, 7 in 2021, 1 in 2020. Please note that this does not guarantee sponsorship for this specific role.