The R&D team at Chainalysis is inspired by solving the hardest technical challenges and building products that establish trust in cryptocurrencies. We're a global organization that thrives on challenging work and doing it alongside exceptionally talented teammates. Our industry evolves rapidly, and our mission is to build a flexible, AI-driven platform that automates entity resolution, optimizes data labeling pipelines, and creates predictive models that identify illicit patterns before they escalate.

Our data and solutions have been used to solve some of the world's most high-profile criminal cases and grow consumer access to cryptocurrency safely. Now, by pairing the industry's most trusted blockchain data with agents that reason, investigate, and act, we help our customers scale their workflows as the cryptocurrency economy becomes increasingly mainstream.

Chainalysis data has helped solve some of the world’s highest-profile criminal and national-security cases and made it safer for people everywhere to access crypto. The Global Intelligence Team produces the attribution at the heart of that data — connecting on-chain activity to the real-world entities behind it, across the global crypto ecosystem. It’s the intelligence data moat beneath every Chainalysis product, and what investigators, sanctions authorities, and national-security agencies rely on to follow the money and disrupt threats.

Few threats test that mission harder than Iran. Through the IRGC and its Qods Force, a network of proxies and Shia militant groups, state-linked cyber actors, and a sprawling sanctions-evasion apparatus, the Islamic Republic has turned to cryptocurrency to raise, move, and launder value beyond the reach of the traditional financial system — from exchange-based sanctions evasion and crypto mining powered by subsidized energy, to oil- and commodity-for-crypto schemes, dual-use procurement, and the financing of proxies across the region. Making that activity visible on-chain is one of the most consequential problems in crypto intelligence today.

As our Iran-focused intelligence analyst — the team’s subject-matter expert on Iran and the IRGC — you’ll own that problem end to end. This is a depth role: while our analysts cover the breadth of the crypto-services ecosystem, you’ll go deep on a single, high-stakes domain — becoming the person, inside Chainalysis and increasingly across the industry, who understands how Iran and its proxies use crypto and can prove it on-chain. You’ll own the attribution for Iran’s crypto footprint, map how these networks actually operate, turn that into finished intelligence customers act on, and be the expert voice representing Chainalysis on Iran crypto threats.

Who you’ll work with

You’ll join a fast-moving, globally distributed team — analysts, threat-domain SMEs, data scientists, and engineers — collaborating across time zones, async and in real time. We move fast, hold each other to a high bar, and back each other up across regions. As the Iran SME, you’ll be the single point of depth for the domain and a force multiplier for everyone working adjacent to it.

In this role, you’ll:

• Own Iran attribution end to end — the threat-actor entities, their definitions, and the accounts, addresses, and infrastructure they operate: Iranian exchanges and OTC/no-KYC networks, IRGC and IRGC-QF financing, Iranian proxy and Shia militant finance (e.g., Hezbollah, the Houthis, and Iraqi militias), sanctions-evasion infrastructure, Iranian ransomware and state-linked cyber operations, and oil-, commodity-, and procurement-for-crypto flows.

• Lead the attribution response to Iran-related sanctions events — when OFAC or allied authorities designate Iranian entities, actors, or infrastructure, drive the rapid, high-visibility on-chain attribution that turns those designations into coverage in our data, often against the clock.

• Map the networks on-chain — trace how Iranian actors raise, move, launder, and cash out value through Iranian VASPs, regional exchanges, mixers, no-KYC swaps, mining operations, and off-ramps, and keep that picture current as they adapt to pressure.

• Produce finished intelligence — advisory notes, customer and partner briefings, and contributions to flagship publications (the Crypto Crime Report and beyond) that make the Iran crypto threat legible and actionable.

• Be the named external expert — represent Chainalysis on Iran crypto threats at conferences, on panels, with the press, and in briefings to public- and private-sector partners.

• Help set the Iran collection agenda — surface what data we need on Iranian networks and feed those requirements into our collection process and priority intelligence requirements; you direct collection for the domain, but it runs through the team’s apparatus and prioritization, not you alone.

• Translate typologies into detection — turn what you learn about Iranian methods into guidance that our products and our customers can operationalize.

• Build with AI — design and tune the automation that scales your analysis and the team’s, and handle the hard cases automation can’t.

• Level up the team — raise the bar on Iran and threat-finance tradecraft broadly, and partner closely with analysts, other SMEs, data science, and engineering.

We’re looking for candidates who have:

• Deep, demonstrable Iran expertise — real command of the IRGC and IRGC-Qods Force, Iran’s proxy and Shia militant landscape, Iranian sanctions evasion, and/or Iran’s illicit-finance and procurement systems. This is the core of the role, and we’ll expect you to show it.

• On-chain tracing ability against Iranian targets — direct experience following Iranian crypto activity on-chain (Iranian exchanges, sanctions evasion, proxy or terror finance), or deep Iran threat-finance expertise paired with proven blockchain-tracing skill you can bring to bear here from day one.

• A national-security or threat-finance background — intelligence, sanctions, counter-threat-finance, or investigations, from the IC, Treasury/OFAC, law enforcement, the military, a think tank or research institution, or private-sector CTF/sanctions work.

• Regional fluency — a strong grasp of Iranian geopolitics, the proxy network, and regional financial flows. Farsi (or Arabic) language ability is a significant plus.

• Elite potential and a proven track record — exceptional aptitude, judgment, and work ethic; you’ve led hard problems end to end and you raise everyone around you.

• Excellent writing and communication — this is an outward-facing expert role; your intelligence has to land with analysts, customers, and senior audiences alike.

• AI-forward instincts — you build automation to scale your work and others’, not just use it.

• Comfort working with data; blockchain forensics experience strongly preferred.

• 5+ years of relevant analytic, intelligence, or threat-finance experience for a Senior hire; 8+ years and recognized domain authority for a Staff hire.

You might also have:

• Farsi language ability.

• Direct experience with OFAC sanctions, terror-finance designations, or the designation process.

• A record of published research or public speaking on Iran, sanctions evasion, or crypto threat finance.

• Familiarity with Iranian exchange infrastructure, crypto mining as a sanctions-evasion vector, or dual-use procurement networks.

AI at Chainalysis
AI is not a feature at Chainalysis - it is a new way of working. One that turns instructions into work done, and helps us move faster than the threats we're built to counter, and we expect our employees to take ownership of the output and ensure quality. As the world's most trusted blockchain analytics platform, Chainalysis sits at a rare intersection of proprietary data, regulatory relationships and crypto expertise that makes it uniquely placed to shape and lead the next era of AI-driven intelligence - and we expect everyone here, regardless of role, to be an active part of it.

AI fluency is tied directly to how we measure performance and how we plan to win. There is no substitute for your own curiosity. We provide the tools, workflows, and space to experiment - but the expectation is that you develop these capabilities yourself, bring ideas, and collaborate across teams to reinvent the way work gets done. We are not using AI to do less. We are using it to do what was never possible before.

About Chainalysis

Chainalysis is the blockchain data platform, making it easy to connect the movement of digital assets to real-world services. Powered by deep blockchain data and AI, organizations can investigate illicit activity, manage risk exposure, and develop innovative market solutions built on the industry's most trusted blockchain intelligence. Our mission is to build trust in blockchains, blending safety and security with an unwavering commitment to growth and innovation.

You belong here.

At Chainalysis, we believe that diversity of experience and thought makes us stronger. With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us. We’re ensuring we keep learning by committing to continually revisit and reevaluate our diversity culture.

We encourage applicants across any race, ethnicity, gender/gender expression, age, spirituality, ability, experience and more. If you need any accommodations to make our interview process more accessible to you due to a disability, don't hesitate to let us know. You can learn more here. We can’t wait to meet you.

The R&D team at Chainalysis is inspired by solving the hardest technical challenges and building products that establish trust in cryptocurrencies. We're a global organization that thrives on challenging work and doing it alongside exceptionally talented teammates. Our industry evolves rapidly, and our mission is to build a flexible, AI-driven platform that automates entity resolution, optimizes data labeling pipelines, and creates predictive models that identify illicit patterns before they escalate.

Our data and solutions have been used to solve some of the world's most high-profile criminal cases and grow consumer access to cryptocurrency safely. Now, by pairing the industry's most trusted blockchain data with agents that reason, investigate, and act, we help our customers scale their workflows as the cryptocurrency economy becomes increasingly mainstream.

Chainalysis data has helped solve some of the world’s highest-profile criminal and national-security cases and made it safer for people everywhere to access crypto. The Global Intelligence Team produces the attribution at the heart of that data — connecting on-chain activity to the real-world entities behind it, across the global crypto ecosystem. It’s the intelligence data moat beneath every Chainalysis product, and what investigators, sanctions authorities, and national-security agencies rely on to follow the money and disrupt threats.

Few threats test that mission harder than North Korea and China. Through Lazarus Group, the DPRK has stolen billions in crypto — via exchange and DeFi hacks and IT-worker schemes — to fund its weapons program, then laundered it through mixers, cross-chain bridges, and Chinese OTC networks. China, in turn, sits at the center of global crypto money laundering — from guarantee marketplaces and underground banking to scam compounds, fentanyl vendors, and cartel-linked laundering. The two are deeply intertwined, and making that activity visible on-chain is one of the most consequential problems in crypto intelligence today.

As our DPRK- and China-focused intelligence analyst — the team’s subject-matter expert on North Korea and China — you’ll own that problem end to end. This is a depth role: while our analysts cover the breadth of the crypto-services ecosystem, you’ll go deep on a single, high-stakes domain — becoming the person, inside Chainalysis and increasingly across the industry, who understands how DPRK and Chinese actors use crypto and can prove it on-chain. You’ll own the attribution for their crypto footprint, map how these networks actually operate, turn that into finished intelligence customers act on, and be the expert voice representing Chainalysis on DPRK and China crypto threats.

Who you’ll work with

You’ll join a fast-moving, globally distributed team — analysts, threat-domain SMEs, data scientists, and engineers — collaborating across time zones, async and in real time. We move fast, hold each other to a high bar, and back each other up across regions. As the DPRK & China SME, you’ll be the single point of depth for the domain and a force multiplier for everyone working adjacent to it.

In this role, you’ll:

• Own DPRK & China attribution end to end — the threat-actor entities, their definitions, and the accounts, addresses, and infrastructure they operate: Lazarus Group and DPRK state-sponsored theft and laundering, DPRK IT-worker networks, Chinese-language OTC and underground-banking networks, guarantee marketplaces (e.g., Huione-style platforms), scam-compound and pig-butchering laundering infrastructure, fentanyl and precursor vendors, and Chinese money-laundering organizations.

• Lead the attribution response to DPRK- and China-related sanctions events — when OFAC or allied authorities designate DPRK actors, exchange-hacking units, or Chinese laundering networks, drive the rapid, high-visibility on-chain attribution that turns those designations into coverage in our data, often against the clock.

• Map the networks on-chain — trace how stolen and illicit funds move through mixers, cross-chain bridges, no-KYC swaps, OTC brokers, and off-ramps, following DPRK hack proceeds into and through Chinese laundering infrastructure, and keep that picture current as they adapt to pressure.

• Produce finished intelligence — advisory notes, customer and partner briefings, and contributions to flagship publications (the Crypto Crime Report and beyond) that make DPRK theft/laundering and Chinese money laundering legible and actionable.

• Be the named external expert — represent Chainalysis on DPRK and China crypto threats at conferences, on panels, with the press, and in briefings to public- and private-sector partners.

• Help set the DPRK & China collection agenda — surface what data we need on these networks and feed those requirements into our collection process and priority intelligence requirements; you direct collection for the domain, but it runs through the team’s apparatus and prioritization, not you alone.

• Translate typologies into detection — turn what you learn about DPRK and Chinese methods into guidance that our products and our customers can operationalize.

• Build with AI — design and tune the automation that scales your analysis and the team’s, and handle the hard cases automation can’t.

• Level up the team — raise the bar on DPRK, China, and money-laundering tradecraft broadly, and partner closely with analysts, other SMEs, data science, and engineering.

We’re looking for candidates who have:

• Deep, demonstrable DPRK and/or China expertise — real command of DPRK state-sponsored crypto operations (Lazarus Group, exchange and bridge hacks, IT-worker schemes) and/or Chinese-language money laundering, OTC and underground banking, guarantee marketplaces, and organized-crime finance. This is the core of the role, and we’ll expect you to show it.

• On-chain tracing ability against DPRK/China targets — direct experience following DPRK hack laundering or Chinese OTC/laundering networks on-chain, or deep DPRK/China threat-finance expertise paired with proven blockchain-tracing skill you can bring to bear here from day one.

• A national-security or threat-finance background — intelligence, sanctions, counter-threat-finance, or investigations, from the IC, Treasury/OFAC, law enforcement, the military, a think tank or research institution, or private-sector CTF/sanctions work.

• Regional fluency — a strong grasp of the DPRK and Chinese illicit-finance ecosystems and regional money-laundering flows. Mandarin and/or Korean language ability is a significant plus.

• Elite potential and a proven track record — exceptional aptitude, judgment, and work ethic; you’ve led hard problems end to end and you raise everyone around you.

• Excellent writing and communication — this is an outward-facing expert role; your intelligence has to land with analysts, customers, and senior audiences alike.

• AI-forward instincts — you build automation to scale your work and others’, not just use it.

• Comfort working with data; blockchain forensics experience strongly preferred.

• 5+ years of relevant analytic, intelligence, or threat-finance experience for a Senior hire; 8+ years and recognized domain authority for a Staff hire.

You might also have:

• Mandarin and/or Korean language ability.

• Direct experience with OFAC sanctions, designations, or the designation process — especially involving DPRK or Chinese entities.

• A record of published research or public speaking on DPRK crypto theft, Lazarus Group, or Chinese money laundering.

• Familiarity with cross-chain bridge and mixer laundering, guarantee marketplaces (e.g., Huione-style platforms), or Chinese OTC and underground-banking networks.

AI at Chainalysis
AI is not a feature at Chainalysis - it is a new way of working. One that turns instructions into work done, and helps us move faster than the threats we're built to counter, and we expect our employees to take ownership of the output and ensure quality. As the world's most trusted blockchain analytics platform, Chainalysis sits at a rare intersection of proprietary data, regulatory relationships and crypto expertise that makes it uniquely placed to shape and lead the next era of AI-driven intelligence - and we expect everyone here, regardless of role, to be an active part of it.

AI fluency is tied directly to how we measure performance and how we plan to win. There is no substitute for your own curiosity. We provide the tools, workflows, and space to experiment - but the expectation is that you develop these capabilities yourself, bring ideas, and collaborate across teams to reinvent the way work gets done. We are not using AI to do less. We are using it to do what was never possible before.

About Chainalysis

Chainalysis is the blockchain data platform, making it easy to connect the movement of digital assets to real-world services. Powered by deep blockchain data and AI, organizations can investigate illicit activity, manage risk exposure, and develop innovative market solutions built on the industry's most trusted blockchain intelligence. Our mission is to build trust in blockchains, blending safety and security with an unwavering commitment to growth and innovation.

You belong here. 

At Chainalysis, we believe that diversity of experience and thought makes us stronger. With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us. We’re ensuring we keep learning by committing to continually revisit and reevaluate our diversity culture.

We encourage applicants across any race, ethnicity, gender/gender expression, age, spirituality, ability, experience and more. If you need any accommodations to make our interview process more accessible to you due to a disability, don't hesitate to let us know. You can learn more here. We can’t wait to meet you. 

The R&D team at Chainalysis is inspired by solving the hardest technical challenges and building products that establish trust in cryptocurrencies. We're a global organization that thrives on challenging work and doing it alongside exceptionally talented teammates. Our industry evolves rapidly, and our mission is to build a flexible, AI-driven platform that automates entity resolution, optimizes data labeling pipelines, and creates predictive models that identify illicit patterns before they escalate.

Our data and solutions have been used to solve some of the world's most high-profile criminal cases and grow consumer access to cryptocurrency safely. Now, by pairing the industry's most trusted blockchain data with agents that reason, investigate, and act, we help our customers scale their workflows as the cryptocurrency economy becomes increasingly mainstream.

Chainalysis data has helped solve some of the world’s highest-profile criminal and national-security cases and made it safer for people everywhere to access crypto. The Global Intelligence Team produces the attribution at the heart of that data — connecting on-chain activity to the real-world entities behind it, across the global crypto ecosystem. It’s the intelligence data moat beneath every Chainalysis product, and what investigators, sanctions authorities, and national-security agencies rely on to follow the money and disrupt threats.

Few threats test that mission harder than Iran. Through the IRGC and its Qods Force, a network of proxies and Shia militant groups, state-linked cyber actors, and a sprawling sanctions-evasion apparatus, the Islamic Republic has turned to cryptocurrency to raise, move, and launder value beyond the reach of the traditional financial system — from exchange-based sanctions evasion and crypto mining powered by subsidized energy, to oil- and commodity-for-crypto schemes, dual-use procurement, and the financing of proxies across the region. Making that activity visible on-chain is one of the most consequential problems in crypto intelligence today.

As our Iran-focused intelligence analyst — the team’s subject-matter expert on Iran and the IRGC — you’ll own that problem end to end. This is a depth role: while our analysts cover the breadth of the crypto-services ecosystem, you’ll go deep on a single, high-stakes domain — becoming the person, inside Chainalysis and increasingly across the industry, who understands how Iran and its proxies use crypto and can prove it on-chain. You’ll own the attribution for Iran’s crypto footprint, map how these networks actually operate, turn that into finished intelligence customers act on, and be the expert voice representing Chainalysis on Iran crypto threats.

Who you’ll work with

You’ll join a fast-moving, globally distributed team — analysts, threat-domain SMEs, data scientists, and engineers — collaborating across time zones, async and in real time. We move fast, hold each other to a high bar, and back each other up across regions. As the Iran SME, you’ll be the single point of depth for the domain and a force multiplier for everyone working adjacent to it.

In this role, you’ll:

• Own Iran attribution end to end — the threat-actor entities, their definitions, and the accounts, addresses, and infrastructure they operate: Iranian exchanges and OTC/no-KYC networks, IRGC and IRGC-QF financing, Iranian proxy and Shia militant finance (e.g., Hezbollah, the Houthis, and Iraqi militias), sanctions-evasion infrastructure, Iranian ransomware and state-linked cyber operations, and oil-, commodity-, and procurement-for-crypto flows.

• Lead the attribution response to Iran-related sanctions events — when OFAC or allied authorities designate Iranian entities, actors, or infrastructure, drive the rapid, high-visibility on-chain attribution that turns those designations into coverage in our data, often against the clock.

• Map the networks on-chain — trace how Iranian actors raise, move, launder, and cash out value through Iranian VASPs, regional exchanges, mixers, no-KYC swaps, mining operations, and off-ramps, and keep that picture current as they adapt to pressure.

• Produce finished intelligence — advisory notes, customer and partner briefings, and contributions to flagship publications (the Crypto Crime Report and beyond) that make the Iran crypto threat legible and actionable.

• Be the named external expert — represent Chainalysis on Iran crypto threats at conferences, on panels, with the press, and in briefings to public- and private-sector partners.

• Help set the Iran collection agenda — surface what data we need on Iranian networks and feed those requirements into our collection process and priority intelligence requirements; you direct collection for the domain, but it runs through the team’s apparatus and prioritization, not you alone.

• Translate typologies into detection — turn what you learn about Iranian methods into guidance that our products and our customers can operationalize.

• Build with AI — design and tune the automation that scales your analysis and the team’s, and handle the hard cases automation can’t.

• Level up the team — raise the bar on Iran and threat-finance tradecraft broadly, and partner closely with analysts, other SMEs, data science, and engineering.

We’re looking for candidates who have:

• Deep, demonstrable Iran expertise — real command of the IRGC and IRGC-Qods Force, Iran’s proxy and Shia militant landscape, Iranian sanctions evasion, and/or Iran’s illicit-finance and procurement systems. This is the core of the role, and we’ll expect you to show it.

• On-chain tracing ability against Iranian targets — direct experience following Iranian crypto activity on-chain (Iranian exchanges, sanctions evasion, proxy or terror finance), or deep Iran threat-finance expertise paired with proven blockchain-tracing skill you can bring to bear here from day one.

• A national-security or threat-finance background — intelligence, sanctions, counter-threat-finance, or investigations, from the IC, Treasury/OFAC, law enforcement, the military, a think tank or research institution, or private-sector CTF/sanctions work.

• Regional fluency — a strong grasp of Iranian geopolitics, the proxy network, and regional financial flows. Farsi (or Arabic) language ability is a significant plus.

• Elite potential and a proven track record — exceptional aptitude, judgment, and work ethic; you’ve led hard problems end to end and you raise everyone around you.

• Excellent writing and communication — this is an outward-facing expert role; your intelligence has to land with analysts, customers, and senior audiences alike.

• AI-forward instincts — you build automation to scale your work and others’, not just use it.

• Comfort working with data; blockchain forensics experience strongly preferred.

• 5+ years of relevant analytic, intelligence, or threat-finance experience for a Senior hire; 8+ years and recognized domain authority for a Staff hire.

You might also have:

• Farsi language ability.

• Direct experience with OFAC sanctions, terror-finance designations, or the designation process.

• A record of published research or public speaking on Iran, sanctions evasion, or crypto threat finance.

• Familiarity with Iranian exchange infrastructure, crypto mining as a sanctions-evasion vector, or dual-use procurement networks.

AI at Chainalysis
AI is not a feature at Chainalysis - it is a new way of working. One that turns instructions into work done, and helps us move faster than the threats we're built to counter, and we expect our employees to take ownership of the output and ensure quality. As the world's most trusted blockchain analytics platform, Chainalysis sits at a rare intersection of proprietary data, regulatory relationships and crypto expertise that makes it uniquely placed to shape and lead the next era of AI-driven intelligence - and we expect everyone here, regardless of role, to be an active part of it.

AI fluency is tied directly to how we measure performance and how we plan to win. There is no substitute for your own curiosity. We provide the tools, workflows, and space to experiment - but the expectation is that you develop these capabilities yourself, bring ideas, and collaborate across teams to reinvent the way work gets done. We are not using AI to do less. We are using it to do what was never possible before.

About Chainalysis

Chainalysis is the blockchain data platform, making it easy to connect the movement of digital assets to real-world services. Powered by deep blockchain data and AI, organizations can investigate illicit activity, manage risk exposure, and develop innovative market solutions built on the industry's most trusted blockchain intelligence. Our mission is to build trust in blockchains, blending safety and security with an unwavering commitment to growth and innovation.

You belong here. 

At Chainalysis, we believe that diversity of experience and thought makes us stronger. With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us. We’re ensuring we keep learning by committing to continually revisit and reevaluate our diversity culture.

We encourage applicants across any race, ethnicity, gender/gender expression, age, spirituality, ability, experience and more. If you need any accommodations to make our interview process more accessible to you due to a disability, don't hesitate to let us know. You can learn more here. We can’t wait to meet you. 

The R&D team at Chainalysis is inspired by solving the hardest technical challenges and building products that establish trust in cryptocurrencies. We're a global organization that thrives on challenging work and doing it alongside exceptionally talented teammates. Our industry evolves rapidly, and our mission is to build a flexible, AI-driven platform that automates entity resolution, optimizes data labeling pipelines, and creates predictive models that identify illicit patterns before they escalate.

Our data and solutions have been used to solve some of the world's most high-profile criminal cases and grow consumer access to cryptocurrency safely. Now, by pairing the industry's most trusted blockchain data with agents that reason, investigate, and act, we help our customers scale their workflows as the cryptocurrency economy becomes increasingly mainstream.

Chainalysis data has helped solve some of the world’s highest-profile criminal and national-security cases and made it safer for people everywhere to access crypto. The Global Intelligence Team produces the attribution at the heart of that data — connecting on-chain activity to the real-world entities behind it, across the global crypto ecosystem. It’s the intelligence data moat beneath every Chainalysis product, and what investigators, sanctions authorities, and national-security agencies rely on to follow the money and disrupt threats.

Few threats test that mission harder than North Korea and China. Through Lazarus Group, the DPRK has stolen billions in crypto — via exchange and DeFi hacks and IT-worker schemes — to fund its weapons program, then laundered it through mixers, cross-chain bridges, and Chinese OTC networks. China, in turn, sits at the center of global crypto money laundering — from guarantee marketplaces and underground banking to scam compounds, fentanyl vendors, and cartel-linked laundering. The two are deeply intertwined, and making that activity visible on-chain is one of the most consequential problems in crypto intelligence today.

As our DPRK- and China-focused intelligence analyst — the team’s subject-matter expert on North Korea and China — you’ll own that problem end to end. This is a depth role: while our analysts cover the breadth of the crypto-services ecosystem, you’ll go deep on a single, high-stakes domain — becoming the person, inside Chainalysis and increasingly across the industry, who understands how DPRK and Chinese actors use crypto and can prove it on-chain. You’ll own the attribution for their crypto footprint, map how these networks actually operate, turn that into finished intelligence customers act on, and be the expert voice representing Chainalysis on DPRK and China crypto threats.

Who you’ll work with

You’ll join a fast-moving, globally distributed team — analysts, threat-domain SMEs, data scientists, and engineers — collaborating across time zones, async and in real time. We move fast, hold each other to a high bar, and back each other up across regions. As the DPRK & China SME, you’ll be the single point of depth for the domain and a force multiplier for everyone working adjacent to it.

In this role, you’ll:

• Own DPRK & China attribution end to end — the threat-actor entities, their definitions, and the accounts, addresses, and infrastructure they operate: Lazarus Group and DPRK state-sponsored theft and laundering, DPRK IT-worker networks, Chinese-language OTC and underground-banking networks, guarantee marketplaces (e.g., Huione-style platforms), scam-compound and pig-butchering laundering infrastructure, fentanyl and precursor vendors, and Chinese money-laundering organizations.

• Lead the attribution response to DPRK- and China-related sanctions events — when OFAC or allied authorities designate DPRK actors, exchange-hacking units, or Chinese laundering networks, drive the rapid, high-visibility on-chain attribution that turns those designations into coverage in our data, often against the clock.

• Map the networks on-chain — trace how stolen and illicit funds move through mixers, cross-chain bridges, no-KYC swaps, OTC brokers, and off-ramps, following DPRK hack proceeds into and through Chinese laundering infrastructure, and keep that picture current as they adapt to pressure.

• Produce finished intelligence — advisory notes, customer and partner briefings, and contributions to flagship publications (the Crypto Crime Report and beyond) that make DPRK theft/laundering and Chinese money laundering legible and actionable.

• Be the named external expert — represent Chainalysis on DPRK and China crypto threats at conferences, on panels, with the press, and in briefings to public- and private-sector partners.

• Help set the DPRK & China collection agenda — surface what data we need on these networks and feed those requirements into our collection process and priority intelligence requirements; you direct collection for the domain, but it runs through the team’s apparatus and prioritization, not you alone.

• Translate typologies into detection — turn what you learn about DPRK and Chinese methods into guidance that our products and our customers can operationalize.

• Build with AI — design and tune the automation that scales your analysis and the team’s, and handle the hard cases automation can’t.

• Level up the team — raise the bar on DPRK, China, and money-laundering tradecraft broadly, and partner closely with analysts, other SMEs, data science, and engineering.

We’re looking for candidates who have:

• Deep, demonstrable DPRK and/or China expertise — real command of DPRK state-sponsored crypto operations (Lazarus Group, exchange and bridge hacks, IT-worker schemes) and/or Chinese-language money laundering, OTC and underground banking, guarantee marketplaces, and organized-crime finance. This is the core of the role, and we’ll expect you to show it.

• On-chain tracing ability against DPRK/China targets — direct experience following DPRK hack laundering or Chinese OTC/laundering networks on-chain, or deep DPRK/China threat-finance expertise paired with proven blockchain-tracing skill you can bring to bear here from day one.

• A national-security or threat-finance background — intelligence, sanctions, counter-threat-finance, or investigations, from the IC, Treasury/OFAC, law enforcement, the military, a think tank or research institution, or private-sector CTF/sanctions work.

• Regional fluency — a strong grasp of the DPRK and Chinese illicit-finance ecosystems and regional money-laundering flows. Mandarin and/or Korean language ability is a significant plus.

• Elite potential and a proven track record — exceptional aptitude, judgment, and work ethic; you’ve led hard problems end to end and you raise everyone around you.

• Excellent writing and communication — this is an outward-facing expert role; your intelligence has to land with analysts, customers, and senior audiences alike.

• AI-forward instincts — you build automation to scale your work and others’, not just use it.

• Comfort working with data; blockchain forensics experience strongly preferred.

• 5+ years of relevant analytic, intelligence, or threat-finance experience for a Senior hire; 8+ years and recognized domain authority for a Staff hire.

You might also have:

• Mandarin and/or Korean language ability.

• Direct experience with OFAC sanctions, designations, or the designation process — especially involving DPRK or Chinese entities.

• A record of published research or public speaking on DPRK crypto theft, Lazarus Group, or Chinese money laundering.

• Familiarity with cross-chain bridge and mixer laundering, guarantee marketplaces (e.g., Huione-style platforms), or Chinese OTC and underground-banking networks.

AI at Chainalysis
AI is not a feature at Chainalysis - it is a new way of working. One that turns instructions into work done, and helps us move faster than the threats we're built to counter, and we expect our employees to take ownership of the output and ensure quality. As the world's most trusted blockchain analytics platform, Chainalysis sits at a rare intersection of proprietary data, regulatory relationships and crypto expertise that makes it uniquely placed to shape and lead the next era of AI-driven intelligence - and we expect everyone here, regardless of role, to be an active part of it.

AI fluency is tied directly to how we measure performance and how we plan to win. There is no substitute for your own curiosity. We provide the tools, workflows, and space to experiment - but the expectation is that you develop these capabilities yourself, bring ideas, and collaborate across teams to reinvent the way work gets done. We are not using AI to do less. We are using it to do what was never possible before.

About Chainalysis

Chainalysis is the blockchain data platform, making it easy to connect the movement of digital assets to real-world services. Powered by deep blockchain data and AI, organizations can investigate illicit activity, manage risk exposure, and develop innovative market solutions built on the industry's most trusted blockchain intelligence. Our mission is to build trust in blockchains, blending safety and security with an unwavering commitment to growth and innovation.

You belong here.

At Chainalysis, we believe that diversity of experience and thought makes us stronger. With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us. We’re ensuring we keep learning by committing to continually revisit and reevaluate our diversity culture.

We encourage applicants across any race, ethnicity, gender/gender expression, age, spirituality, ability, experience and more. If you need any accommodations to make our interview process more accessible to you due to a disability, don't hesitate to let us know. You can learn more here. We can’t wait to meet you.

About Freshpaint:

Healthcare is a $4+ trillion industry in the U.S. alone, and it’s undergoing a rapid digital transformation.

Hospitals, digital health companies, and life sciences organizations rely on analytics and advertising tools to reach patients, measure performance, and grow. But those tools weren’t built for regulated healthcare data. That creates real compliance risk and forces teams to choose between growth and privacy.

Freshpaint eliminates that trade-off.

We’re a privacy-first data platform that helps healthcare organizations use modern marketing and analytics tools without exposing protected health information (PHI). Freshpaint sits between a company’s website or app and the third-party tools they use, automatically detecting and controlling sensitive data before it’s shared.

In short: we let healthcare teams move fast, safely.

Backed by Top Investors

Freshpaint is backed by some of the most respected names in technology, including:

• Y Combinator (OpenAI, Stripe, Airbnb, Coinbase, DoorDash)

• Intel Capital (Broadcom, Astera Labs, VMware, RedHat, MongoDB)

We’ve raised tens of millions of dollars in funding to build the privacy infrastructure layer for healthcare’s digital future.

Who we’re looking for

We’re looking for an organized, service-oriented IT operations professional who enjoys helping employees stay productive while keeping core IT processes running smoothly behind the scenes. This person should be detail-oriented, comfortable following and improving repeatable processes, and capable of handling device setup, access administration, troubleshooting, and compliance support with good judgment and strong follow-through.

What you’ll be doing

In this role, you’ll support the day-to-day IT operations that help Freshpaint scale, including onboarding and offboarding employees, maintaining secure and compliant laptops and accounts, resolving employee IT issues, and supporting access management and compliance-related operational work. You’ll work closely with engineering and security leadership to execute priorities, keep documentation and operational processes current, and identify opportunities to turn repeat issues into better runbooks, workflows, and support practices. Success in this role requires strong troubleshooting judgment, attention to detail, and the ability to know when to resolve independently versus escalate.

Primary responsibilities

• Execute employee onboarding and offboarding accurately, securely, and on time

• Provision, maintain, and troubleshoot company laptops and employee endpoints

• Support employees with hardware, software, access, and account issues while delivering a fast, dependable support experience

• Handle employee access requests and changes with appropriate approvals and attention to least privilege, while supporting RBAC rollouts, access reviews, and cleanup work

• Support security questionnaires, audit evidence collection, and compliance-related operational processes

• Turn repeat issues into better documentation, runbooks, and lightweight process improvements.

Desired skills & experience

• Experience in IT support, IT operations, helpdesk, or a similar internal-facing technical support role

• Experience onboarding and offboarding employees across devices, accounts, and SaaS tools

• Familiarity with endpoint management, device provisioning, software installation, patching, and basic security hygiene

• Experience administering common internal tools such as identity, password management, collaboration, or device management systems

• Strong troubleshooting skills across laptops, employee software, access, and account issues

• Strong judgment when handling access changes, troubleshooting issues, and deciding when to follow a defined process versus escalate to the right partner.

• Clear written and verbal communication skills with a strong service mindset

• Strong organizational skills and the ability to manage recurring operational work with accuracy and follow-through

• Familiarity with common workplace IT and compliance tools such as Google Workspace, device management platforms, and access or compliance systems

• Experience with Mac administration or supporting primarily Mac-based employee environments

Nice to haves

• Experience supporting security or compliance-related operational work such as SOC 2, HITRUST, audit evidence gathering, or customer security questionnaires

• Experience working in a startup or high-growth SaaS environment

• Familiarity with tools such as Drata, Iru, Google Workspace, identity providers, or similar IT, endpoint, and compliance platforms

• Experience improving internal documentation, runbooks, or lightweight operational processes

• Experience with scripting or automation using tools or languages such as Python, JavaScript, or Go

• Familiarity with cloud platforms such as AWS, GCP, or Azure, and infrastructure tooling such as Terraform

Perks & Benefits

We take care of our team—here’s a peek at what you get when you join:

• Competitive pay + generous equity (10-year exercise window)

• Half-day Fridays, every Friday

• 16 weeks fully paid parental leave (eligible after 6 months; commission-based roles receive 100% base salary during leave)

• Flexible PTO with a required 2-week minimum

• Top-tier health, dental & vision (100% covered for you, 80% for dependents)

• Intentional & engaging company offsites (past trips: Arizona, Jackson Hole, Nashville, New Orleans & more)

And more! Check out our careers page for the full list.

What does Nodes & Links do?

Did you know that an ancient Roman Aqueduct initially cost 12 million sesterces but ended up costing more than 30 million? Big projects have always been problematic to humanity - we want to fix that.

We are developing an AI-first SaaS platform to help people who deal with very large projects. If someone is building a nuclear plant or a data center, they need a special kind of software to organize and prioritize their work. 👋That's us.

Recognized by TechNation, Construction Tech Review, and Amazon as industry leaders, we're part of Oxford University's Creative Destruction Lab and Entrepreneur First alumni, with awards from CIR, CogX, and the British Construction Industry. Our global clients include Intel, AECOM, and BAM, and we've raised $30M to date from top VC funds.

This is a great opportunity to join an ambitious deep-tech start-up in a dynamic and mission-driven environment, driving our growth from a start-up to a scale-up 🚀

You will also be helping to solve one of the oldest problems of mankind and potentially save the economy billions - not bad right? 🤘

📣 What will you do in the role?

We are hiring a Senior Customer Success Manager to lead relationships with enterprise customers across the US and help them realise long-term value from the platform.

This is a strategic, customer-facing role focused on onboarding, adoption, retention, renewals, and expansion across a portfolio of accounts.

The successful candidate will act as a trusted advisor to customers, build strong stakeholder relationships, and work cross-functionally with Sales, Product, Engineering, and Support to deliver an excellent customer experience.

This role is ideal for someone who is commercially aware, highly organised, and experienced in managing complex SaaS customers through the full post-sale lifecycle.

• Managing a portfolio of enterprise customer accounts as the main post-sale contact.
• Leading onboarding and implementation activity to set customers up for success.
• Building success plans tied to customer goals, adoption, and measurable outcomes.
• Running regular customer meetings, business reviews, and value conversations with key stakeholders.
• Monitoring customer health, product usage, and engagement to identify risks and opportunities early.
• Driving renewals and supporting expansion opportunities across existing accounts.
• Acting as the voice of the customer internally and sharing feedback with Product and Engineering.
• Working closely with cross-functional teams to resolve issues and improve the customer journey.

👓 Who you are

• At least 5 years’ experience in a relevant customer-facing role such as Customer Success Manager, Senior Customer Success Manager, Technical Account Manager, Account Manager, or Implementation Manager.
• Experience managing Enterprise  SaaS customers.
• A strong track record in onboarding, adoption, retention, and renewal management.
• Excellent stakeholder management skills, including confidence working with senior customer contacts.
• Strong communication skills, both written and verbal.
• A proactive, commercially minded, and customer-focused approach.

💗We would love if you have 

• Experience in construction, infrastructure, project controls, or a related industry.
• Familiarity with Primavera P6 or similar planning tools.
• Experience working with complex workflows, data-driven platforms, or technical SaaS products.
• Exposure to QBRs, executive reporting, and value-led account management.

🏄What if you’re a partial fit?

We prioritise grit, positivity, and drive for growth, and encourage you to apply even if your experience doesn't exactly match this job description.

🌌 Location

Tennessee, Remote

👨‍👩‍👧 We are

• Hard working but not workaholic
• Explorers. Data is our compass and innovation our destination
• Independent thinkers. We are not afraid of looking where no one else is
• Team players. We believe the whole is bigger than the sum of its parts
• We have strong opinions, weakly held
• Continuously evolving the way we do things. Even our #donut dates

Nodes & Links is an equal opportunity employer: we value diversity. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status or disability status.

🌴 Benefits

Besides a competitive salary starting at $140,000-$155,000, we are also proud to support you with:

• A team of Noders who are second to none. Yep - the team is that good 🚀
• Equity in Nodes & Links - we are all in this together ✊
• Health insurances & 401K plans ⚕️
• Remote work budget, to build your perfect set up ($500 year 1 + $100 year 2) 🏠
• Personal development budget, to keep growing ($1,000 pa) 📔
• Annual #workation trip, to work and have fun with your teammates. We've been to Budapest, Crete, Aegina (x2) 💃🏻
• Wedding/Civil Partnerships additional leave on us ❤️

What does Nodes & Links do?

Did you know that an ancient Roman Aqueduct initially cost 12 million sesterces but ended up costing more than 30 million? Big projects have always been problematic to humanity - we want to fix that.

We are developing an AI-first SaaS platform to help people who deal with very large projects. If someone is building a nuclear plant or a data center, they need a special kind of software to organize and prioritize their work. 👋That's us.

Recognized by TechNation, Construction Tech Review, and Amazon as industry leaders, we're part of Oxford University's Creative Destruction Lab and Entrepreneur First alumni, with awards from CIR, CogX, and the British Construction Industry. Our global clients include Intel, AECOM, and BAM, and we've raised $30M to date from top VC funds.

This is a great opportunity to join an ambitious deep-tech start-up in a dynamic and mission-driven environment, driving our growth from a start-up to a scale-up 🚀

You will also be helping to solve one of the oldest problems of mankind and potentially save the economy billions - not bad right? 🤘

📣 What will you do in the role?

We are hiring a Senior Customer Success Manager to lead relationships with enterprise customers across the US and help them realise long-term value from the platform.

This is a strategic, customer-facing role focused on onboarding, adoption, retention, renewals, and expansion across a portfolio of accounts.

The successful candidate will act as a trusted advisor to customers, build strong stakeholder relationships, and work cross-functionally with Sales, Product, Engineering, and Support to deliver an excellent customer experience.

This role is ideal for someone who is commercially aware, highly organised, and experienced in managing complex SaaS customers through the full post-sale lifecycle.

• Managing a portfolio of enterprise customer accounts as the main post-sale contact.
• Leading onboarding and implementation activity to set customers up for success.
• Building success plans tied to customer goals, adoption, and measurable outcomes.
• Running regular customer meetings, business reviews, and value conversations with key stakeholders.
• Monitoring customer health, product usage, and engagement to identify risks and opportunities early.
• Driving renewals and supporting expansion opportunities across existing accounts.
• Acting as the voice of the customer internally and sharing feedback with Product and Engineering.
• Working closely with cross-functional teams to resolve issues and improve the customer journey.

👓 Who you are

• At least 5 years’ experience in a relevant customer-facing role such as Customer Success Manager, Senior Customer Success Manager, Technical Account Manager, Account Manager, or Implementation Manager.
• Experience managing Enterprise  SaaS customers.
• A strong track record in onboarding, adoption, retention, and renewal management.
• Excellent stakeholder management skills, including confidence working with senior customer contacts.
• Strong communication skills, both written and verbal.
• A proactive, commercially minded, and customer-focused approach.

💗We would love if you have 

• Experience in construction, infrastructure, project controls, or a related industry.
• Familiarity with Primavera P6 or similar planning tools.
• Experience working with complex workflows, data-driven platforms, or technical SaaS products.
• Exposure to QBRs, executive reporting, and value-led account management.

🏄What if you’re a partial fit?

We prioritise grit, positivity, and drive for growth, and encourage you to apply even if your experience doesn't exactly match this job description.

🌌 Location

Georgia, Remote

👨‍👩‍👧 We are

• Hard working but not workaholic
• Explorers. Data is our compass and innovation our destination
• Independent thinkers. We are not afraid of looking where no one else is
• Team players. We believe the whole is bigger than the sum of its parts
• We have strong opinions, weakly held
• Continuously evolving the way we do things. Even our #donut dates

Nodes & Links is an equal opportunity employer: we value diversity. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status or disability status.

🌴 Benefits

Besides a competitive salary starting at $140,000-$155,000, we are also proud to support you with:

• A team of Noders who are second to none. Yep - the team is that good 🚀
• Equity in Nodes & Links - we are all in this together ✊
• Health insurances & 401K plans ⚕️
• Remote work budget, to build your perfect set up ($500 year 1 + $100 year 2) 🏠
• Personal development budget, to keep growing ($1,000 pa) 📔
• Annual #workation trip, to work and have fun with your teammates. We've been to Budapest, Crete, Aegina (x2) 💃🏻
• Wedding/Civil Partnerships additional leave on us ❤️