Senior Blockchain Intelligence Analyst, Ransomware

What you'll do

• Trace ransomware proceeds across blockchains and laundering services, identify controllers and cash-out routes, and uncover recovery or disruption opportunities.
• Correlate blockchain activity with threat intelligence, OSINT, and off-chain signals; produce clear, auditable intelligence and attribution assessments.
• Lead investigative workstreams, strengthen ransomware investigative methods, and mentor peers without formal people-management responsibilities.

What they ask for

• 5-8+ years of relevant professional experience in blockchain intelligence, crypto investigations, cybercrime analysis, threat intelligence, financial crime investigations, or a comparable senior analytical role.
• Hands-on expertise tracing funds across multiple blockchains and laundering or obfuscation methods, including mixers, chain-hopping, bridges, and peel chains.
• Ability to independently conduct complex investigations and write clear intelligence products, including assessments, lead packages, fund-flow analysis, and attribution reporting.
• Ransomware ecosystem expertise, strong communication and judgment, and experience using AI tools and LLMs critically to augment analytical workflows.

Nice to have

• Experience in government, national security, law enforcement, incident response, or mature investigative or threat intelligence programs.
• Familiarity with OSINT, cybercrime infrastructure research, investigative platforms such as TRM, Maltego, or Palantir, or HUMINT and threat actor engagement.

Pay

$100K – $160K (base salary)

Tools

TRM, Maltego, Palantir, Slack, Notion, AI, LLMs

AI focus

Use AI tools and large language models to accelerate research, surface insights, and augment analytical workflows; critically evaluate generated outputs. AI fluency is evaluated during interviews.