Senior Intelligence Analyst, DPRK & China Focus at Chainalysis Careers · LumiJobs

Responsibilities

Own DPRK & China attribution end to end — the threat-actor entities, their definitions, and the accounts, addresses, and infrastructure they operate: Lazarus Group and DPRK state-sponsored theft and laundering, DPRK IT-worker networks, Chinese-language OTC and underground-banking networks, guarantee marketplaces (e.g., Huione-style platforms), scam-compound and pig-butchering laundering infrastructure, fentanyl and precursor vendors, and Chinese money-laundering organizations.
Lead the attribution response to DPRK- and China-related sanctions events — when OFAC or allied authorities designate DPRK actors, exchange-hacking units, or Chinese laundering networks, drive the rapid, high-visibility on-chain attribution that turns those designations into coverage in our data, often against the clock.
Map the networks on-chain — trace how stolen and illicit funds move through mixers, cross-chain bridges, no-KYC swaps, OTC brokers, and off-ramps, following DPRK hack proceeds into and through Chinese laundering infrastructure, and keep that picture current as they adapt to pressure.
Produce finished intelligence — advisory notes, customer and partner briefings, and contributions to flagship publications (the Crypto Crime Report and beyond) that make DPRK theft/laundering and Chinese money laundering legible and actionable.
Be the named external expert — represent Chainalysis on DPRK and China crypto threats at conferences, on panels, with the press, and in briefings to public- and private-sector partners.
Help set the DPRK & China collection agenda — surface what data we need on these networks and feed those requirements into our collection process and priority intelligence requirements; you direct collection for the domain, but it runs through the team’s apparatus and prioritization, not you alone.
Translate typologies into detection — turn what you learn about DPRK and Chinese methods into guidance that our products and our customers can operationalize.
Build with AI — design and tune the automation that scales your analysis and the team’s, and handle the hard cases automation can’t.
Level up the team — raise the bar on DPRK, China, and money-laundering tradecraft broadly, and partner closely with analysts, other SMEs, data science, and engineering.
We’re looking for candidates who have:
Deep, demonstrable DPRK and/or China expertise — real command of DPRK state-sponsored crypto operations (Lazarus Group, exchange and bridge hacks, IT-worker schemes) and/or Chinese-language money laundering, OTC and underground banking, guarantee marketplaces, and organized-crime finance. This is the core of the role, and we’ll expect you to show it.
On-chain tracing ability against DPRK/China targets — direct experience following DPRK hack laundering or Chinese OTC/laundering networks on-chain, or deep DPRK/China threat-finance expertise paired with proven blockchain-tracing skill you can bring to bear here from day one.

Senior Intelligence Analyst, DPRK & China Focus

Responsibilities

Company

Chainalysis Careers

More roles at Chainalysis Careers