Want to know if this job is worth applying to?
Remote, Oregon, United States
Remote only
The R&D team at Chainalysis is inspired by solving the hardest technical challenges and building products that establish trust in cryptocurrencies. We're a global organization that thrives on challenging work and doing it alongside exceptionally talented teammates. Our industry evolves rapidly, and our mission is to build a flexible, AI-driven platform that automates entity resolution, optimizes data labeling pipelines, and creates predictive models that identify illicit patterns before they escalate.
Chainalysis data has helped solve some of the world’s highest-profile criminal and national-security cases and made it safer for people everywhere to access crypto. The Global Intelligence Team produces the attribution at the heart of that data — connecting on-chain activity to the real-world entities behind it, across the global crypto ecosystem. It’s the intelligence data moat beneath every Chainalysis product, and what investigators, sanctions authorities, and national-security agencies rely on to follow the money and disrupt threats.
Few domains demand more sustained depth than Russia and the broader Eurasian sanctions-evasion ecosystem. Since 2022, sweeping sanctions on Russian financial institutions, oligarchs, and the defense-industrial base have pushed a growing share of Russian value flows into cryptocurrency — from no-KYC exchanges and OTC desks operating across the former Soviet bloc, to sanctions-evasion networks exploiting stablecoins and cross-border payment channels, crypto-denominated procurement of restricted goods, and the financial infrastructure supporting Russian cyber and ransomware operations. Understanding how Russian actors adapt to sanctions pressure on-chain is one of the most consequential problems in crypto intelligence today.
As our Russia & Eurasia-focused intelligence analyst — the team’s subject-matter expert on Russian and Eurasian crypto threats — you’ll own that problem end to end. This is a depth role: while our analysts cover the breadth of the crypto-services ecosystem, you’ll go deep on a single, high-stakes domain — becoming the person, inside Chainalysis and increasingly across the industry, who understands how Russian and Eurasian actors use crypto to evade sanctions and can prove it on-chain. You’ll own the attribution for Russia’s crypto footprint, map how these networks operate and adapt under pressure, turn that into finished intelligence customers act on, and be the expert voice representing Chainalysis on Russian crypto threats.
Who you’ll work with
You’ll join a fast-moving, globally distributed team — analysts, threat-domain SMEs, data scientists, and engineers — collaborating across time zones, async and in real time. We move fast, hold each other to a high bar, and back each other up across regions. As the Russia & Eurasia SME, you’ll be the single point of depth for the domain and a force multiplier for everyone working adjacent to it.
In this role, you’ll:
Own Russia & Eurasia attribution end to end — the threat-actor entities, their definitions, and the accounts, addresses, and infrastructure they operate: Russian and CIS no-KYC exchanges, OTC networks, and instant swap services, sanctions-evasion infrastructure (stablecoin corridors, cross-border payment channels, nested services), Russian-linked ransomware and cybercrime ecosystem financial flows, procurement networks for restricted and dual-use goods, and the broader financial infrastructure enabling Russian value movement outside the traditional financial system.
Lead the attribution response to Russia-related sanctions events — when OFAC or allied authorities designate Russian entities, actors, or infrastructure, drive the rapid, high-visibility on-chain attribution that turns those designations into coverage in our data, often against the clock.
Map the networks on-chain — trace how Russian and Eurasian actors raise, move, launder, and cash out value through regional exchanges, no-KYC swaps, OTC desks, stablecoin corridors, mixers, and off-ramps across the former Soviet bloc and beyond, and keep that picture current as they adapt to pressure.
Produce finished intelligence — advisory notes, customer and partner briefings, and contributions to flagship publications (the Crypto Crime Report and beyond) that make the Russia & Eurasia crypto threat legible and actionable.
Be the named external expert — represent Chainalysis on Russia & Eurasia crypto threats at conferences, on panels, with the press, and in briefings to public- and private-sector partners.
Help set the Russia & Eurasia collection agenda — surface what data we need on Russian and Eurasian networks and feed those requirements into our collection process and priority intelligence requirements; you direct collection for the domain, but it runs through the team’s apparatus and prioritization, not you alone.
Translate typologies into detection — turn what you learn about Russian methods and sanctions-evasion typologies into guidance that our products and our customers can operationalize.
Build with AI — design and tune the automation that scales your analysis and the team’s, and handle the hard cases automation can’t.
Level up the team — raise the bar on Russia & Eurasia and sanctions-evasion tradecraft broadly, and partner closely with analysts, other SMEs, data science, and engineering.
We’re looking for candidates who have:
Deep, demonstrable Russia & Eurasia expertise — real command of the Russian sanctions landscape, Russian financial infrastructure and how it has adapted to sanctions pressure, the CIS/former Soviet bloc crypto ecosystem, and/or Russian illicit-finance and procurement networks. This is the core of the role, and we’ll expect you to show it.
On-chain tracing ability against Russian targets — direct experience following Russian crypto activity on-chain (Russian exchanges, sanctions evasion, ransomware financial flows), or deep Russia threat-finance expertise paired with proven blockchain-tracing skill you can bring to bear here from day one.
A national-security or threat-finance background — intelligence, sanctions, counter-threat-finance, or investigations, from the IC, Treasury/OFAC, law enforcement, the military, a think tank or research institution, or private-sector CTF/sanctions work.
Regional fluency — a strong grasp of Russian and Eurasian geopolitics, the sanctions landscape, and regional financial flows. Russian language ability is a significant plus.
Elite potential and a proven track record — exceptional aptitude, judgment, and work ethic; you’ve led hard problems end to end and you raise everyone around you.
Excellent writing and communication — this is an outward-facing expert role; your intelligence has to land with analysts, customers, and senior audiences alike.
AI-forward instincts — you build automation to scale your work and others’, not just use it.
Comfort working with data; blockchain forensics experience strongly preferred.
5+ years of relevant analytic, intelligence, or threat-finance experience for a Senior hire; 8+ years and recognized domain authority for a Staff hire.
You might also have:
Russian language ability.
Direct experience with OFAC, EU, or OFSI sanctions, sanctions-evasion investigations, or the designation process.
A record of published research or public speaking on Russia, sanctions evasion, or crypto threat finance.
Familiarity with Russian and CIS exchange infrastructure, stablecoin-based sanctions evasion, ransomware financial flows, or dual-use procurement networks.
AI at Chainalysis
AI is not a feature at Chainalysis - it is a new way of working. One that turns instructions into work done, and helps us move faster than the threats we're built to counter, and we expect our employees to take ownership of the output and ensure quality. As the world's most trusted blockchain analytics platform, Chainalysis sits at a rare intersection of proprietary data, regulatory relationships and crypto expertise that makes it uniquely placed to shape and lead the next era of AI-driven intelligence - and we expect everyone here, regardless of role, to be an active part of it.
AI fluency is tied directly to how we measure performance and how we plan to win. There is no substitute for your own curiosity. We provide the tools, workflows, and space to experiment - but the expectation is that you develop these capabilities yourself, bring ideas, and collaborate across teams to reinvent the way work gets done. We are not using AI to do less. We are using it to do what was never possible before.
About Chainalysis
Chainalysis is the blockchain data platform, making it easy to connect the movement of digital assets to real-world services. Powered by deep blockchain data and AI, organizations can investigate illicit activity, manage risk exposure, and develop innovative market solutions built on the industry's most trusted blockchain intelligence. Our mission is to build trust in blockchains, blending safety and security with an unwavering commitment to growth and innovation.
You belong here.
At Chainalysis, we believe that diversity of experience and thought makes us stronger. With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us. We’re ensuring we keep learning by committing to continually revisit and reevaluate our diversity culture.
We encourage applicants across any race, ethnicity, gender/gender expression, age, spirituality, ability, experience and more. If you need any accommodations to make our interview process more accessible to you due to a disability, don't hesitate to let us know. You can learn more here. We can’t wait to meet you.
