Senior Intelligence Analyst, DPRK & China Focus

As a Senior Intelligence Analyst focused on DPRK and China at Chainalysis, you own the attribution and threat intelligence for how North Korean and Chinese actors use cryptocurrency. You join the Global Intelligence Team, which produces the blockchain attribution that underpins every Chainalysis product and that investigators, sanctions authorities, and national-security agencies rely on to follow the money. This is a depth role: while other analysts cover the breadth of crypto services, you go deep on a single, high-stakes domain, becoming the person inside Chainalysis and across the industry who understands how DPRK and Chinese actors move crypto and can prove it on-chain.

What you'll do

• Own DPRK and China attribution end to end, including threat-actor entities and their definitions, the accounts, addresses, and infrastructure they operate such as Lazarus Group and DPRK state-sponsored theft and laundering, DPRK IT-worker networks, Chinese-language OTC and underground-banking networks, guarantee marketplaces, scam-compound and pig-butchering laundering infrastructure, fentanyl and precursor vendors, and Chinese money-laundering organizations
• Lead the attribution response to DPRK- and China-related sanctions events when OFAC or allied authorities designate DPRK actors, exchange-hacking units, or Chinese laundering networks, driving rapid, high-visibility on-chain attribution
• Map networks on-chain by tracing how stolen and illicit funds move through mixers, cross-chain bridges, no-KYC swaps, OTC brokers, and off-ramps, following DPRK hack proceeds into and through Chinese laundering infrastructure
• Produce finished intelligence including advisory notes, customer and partner briefings, and contributions to flagship publications such as the Crypto Crime Report
• Represent Chainalysis on DPRK and China crypto threats at conferences, panels, in media interviews, and in briefings to public- and private-sector partners
• Help set the DPRK and China collection agenda by surfacing what data you need on these networks and feeding those requirements into the team's collection process and priority intelligence requirements
• Translate DPRK and Chinese methods and typologies into detection guidance that Chainalysis products and customers can operationalize
• Design and tune automation that scales your analysis and the team's, while handling the hard cases automation cannot address
• Raise the bar on DPRK, China, and money-laundering tradecraft, partnering closely with analysts, other subject-matter experts, data scientists, and engineers

What you bring

• Deep, demonstrable DPRK and/or China expertise, including command of DPRK state-sponsored crypto operations such as Lazarus Group, exchange and bridge hacks, and IT-worker schemes, and/or Chinese-language money laundering, OTC and underground banking, guarantee marketplaces, and organized-crime finance
• On-chain tracing ability against DPRK/China targets, with direct experience following DPRK hack laundering or Chinese OTC/laundering networks on-chain, or deep DPRK/China threat-finance expertise paired with proven blockchain-tracing skill
• A national-security or threat-finance background such as intelligence, sanctions, counter-threat-finance, or investigations from the IC, Treasury/OFAC, law enforcement, the military, a think tank or research institution, or private-sector counter-threat-finance or sanctions work
• Regional fluency with a strong grasp of the DPRK and Chinese illicit-finance ecosystems and regional money-laundering flows
• Elite potential and a proven track record, with exceptional aptitude, judgment, and work ethic, having led hard problems end to end and raised everyone around you
• Excellent writing and communication skills suited to an outward-facing expert role where your intelligence must land with analysts, customers, and senior audiences
• AI-forward instincts where you build automation to scale your work and others', not just use it
• Comfort working with data; blockchain forensics experience strongly preferred
• 5+ years of relevant analytic, intelligence, or threat-finance experience for a Senior hire, or 8+ years and recognized domain authority for a Staff hire

Nice to have

• Mandarin and/or Korean language ability
• Direct experience with OFAC sanctions, designations, or the designation process, especially involving DPRK or Chinese entities
• Published research or public speaking record on DPRK crypto theft, Lazarus Group, or Chinese money laundering
• Familiarity with cross-chain bridge and mixer laundering, guarantee marketplaces such as Huione-style platforms, or Chinese OTC and underground-banking networks

About Chainalysis

Chainalysis is the blockchain data platform that makes it easy to connect the movement of digital assets to real-world services. Powered by deep blockchain data and AI, the company helps organizations investigate illicit activity, manage risk exposure, and develop innovative market solutions built on the industry's most trusted blockchain intelligence.