Senior Intelligence Analyst, DPRK & China Focus

As a Senior Intelligence Analyst focused on DPRK and China at Chainalysis, you own the attribution and investigation of how North Korean and Chinese actors use cryptocurrency to fund weapons programs, launder illicit proceeds, and conduct organized crime. You join the Global Intelligence Team, which produces the attribution data that sits beneath every Chainalysis product and what investigators, sanctions authorities, and national-security agencies rely on to follow the money. This is a depth role: while other analysts cover the breadth of crypto services, you go deep on a single, high-stakes domain, becoming the expert inside Chainalysis and across the industry on how DPRK and Chinese actors move crypto on-chain.

What you'll do

• Own DPRK and China attribution end to end, including threat-actor entities, their definitions, and the accounts, addresses, and infrastructure they operate: Lazarus Group and DPRK state-sponsored theft and laundering, DPRK IT-worker networks, Chinese-language OTC and underground-banking networks, guarantee marketplaces, scam-compound and pig-butchering laundering infrastructure, fentanyl and precursor vendors, and Chinese money-laundering organizations.
• Lead the attribution response to DPRK- and China-related sanctions events, driving rapid, high-visibility on-chain attribution when OFAC or allied authorities designate DPRK actors or Chinese laundering networks.
• Map the networks on-chain by tracing how stolen and illicit funds move through mixers, cross-chain bridges, no-KYC swaps, OTC brokers, and off-ramps, following DPRK hack proceeds into Chinese laundering infrastructure and keeping that picture current as they adapt.
• Produce finished intelligence including advisory notes, customer and partner briefings, and contributions to flagship publications such as the Crypto Crime Report that make DPRK theft and Chinese money laundering actionable.
• Represent Chainalysis as the named external expert on DPRK and China crypto threats at conferences, panels, press engagements, and briefings to public- and private-sector partners.
• Help set the DPRK and China collection agenda by surfacing what data you need on these networks and feeding those requirements into the team's collection process and priorities.
• Translate typologies into detection by turning what you learn about DPRK and Chinese methods into guidance that products and customers can operationalize.
• Design and tune the automation that scales your analysis and the team's, and handle the hard cases automation cannot solve.
• Raise the bar on DPRK, China, and money-laundering tradecraft across the team, partnering closely with analysts, other subject-matter experts, data scientists, and engineers.

What you bring

• Deep, demonstrable DPRK and/or China expertise, with real command of DPRK state-sponsored crypto operations (Lazarus Group, exchange and bridge hacks, IT-worker schemes) and/or Chinese-language money laundering, OTC and underground banking, guarantee marketplaces, and organized-crime finance.
• On-chain tracing ability against DPRK and China targets, with direct experience following DPRK hack laundering or Chinese OTC and laundering networks on-chain, or deep DPRK and China threat-finance expertise paired with proven blockchain-tracing skill.
• A national-security or threat-finance background in intelligence, sanctions, counter-threat-finance, or investigations from the intelligence community, Treasury/OFAC, law enforcement, the military, a think tank or research institution, or private-sector counter-threat-finance and sanctions work.
• Regional fluency with a strong grasp of the DPRK and Chinese illicit-finance ecosystems and regional money-laundering flows.
• Exceptional aptitude, judgment, and work ethic, with a proven track record leading hard problems end to end and raising everyone around you.
• Excellent writing and communication skills, as this is an outward-facing expert role where your intelligence must land with analysts, customers, and senior audiences.
• AI-forward instincts: you build automation to scale your work and others', not just use it.
• Comfort working with data; blockchain forensics experience strongly preferred.
• 5+ years of relevant analytic, intelligence, or threat-finance experience for a Senior hire; 8+ years and recognized domain authority for a Staff hire.

Nice to have

• Mandarin and/or Korean language ability.
• Direct experience with OFAC sanctions, designations, or the designation process, especially involving DPRK or Chinese entities.
• A record of published research or public speaking on DPRK crypto theft, Lazarus Group, or Chinese money laundering.
• Familiarity with cross-chain bridge and mixer laundering, guarantee marketplaces such as Huione-style platforms, or Chinese OTC and underground-banking networks.

About Chainalysis

Chainalysis is the blockchain data platform that connects the movement of digital assets to real-world services. Powered by deep blockchain data and AI, organizations investigate illicit activity, manage risk exposure, and develop innovative market solutions using the industry's most trusted blockchain intelligence.