Senior Intelligence Analyst, Iran Focus

Join Chainalysis as a Senior Intelligence Analyst focusing on Iran. Leverage your expertise in crypto and intelligence to tackle high-stakes challenges in the crypto landscape. The R&D team at Chainalysis is inspired by solving the hardest technical challenges and building products that establish trust in cryptocurrencies. We're a global organization that thrives on challenging work and doing it alongside exceptionally talented teammates. Our industry evolves rapidly, and our mission is to build a flexible, AI-driven platform that automates entity resolution, optimizes data labeling pipelines, and creates predictive models that identify illicit patterns before they escalate. Our data and solutions have been used to solve some of the world's most high-profile criminal cases and grow consumer access to cryptocurrency safely. Now, by pairing the industry's most trusted blockchain data with agents that reason, investigate, and act, we help our customers scale their workflows as the cryptocurrency economy becomes increasingly mainstream. Chainalysis data has helped solve some of the world’s highest-profile criminal and national-security cases and made it safer for people everywhere to access crypto. The Global Intelligence Team produces the attribution at the heart of that data — connecting on-chain activity to the real-world entities behind it, across the global crypto ecosystem. It’s the intelligence data moat beneath every Chainalysis product, and what investigators, sanctions authorities, and national-security agencies rely on to follow the money and disrupt threats. Few threats test that mission harder than Iran.

• •Own Iran attribution end to end — the threat-actor entities, their definitions, and the accounts, addresses, and infrastructure they operate: Iranian exchanges and OTC/no-KYC networks, IRGC and IRGC-QF financing, Iranian proxy and Shia militant finance (e.g., Hezbollah, the Houthis, and Iraqi militias), sanctions-evasion infrastructure, Iranian ransomware and state-linked cyber operations, and oil-, commodity-, and procurement-for-crypto flows.
• •Lead the attribution response to Iran-related sanctions events — when OFAC or allied authorities designate Iranian entities, actors, or infrastructure, drive the rapid, high-visibility on-chain attribution that turns those designations into coverage in our data, often against the clock.
• •Map the networks on-chain — trace how Iranian actors raise, move, launder, and cash out value through Iranian VASPs, regional exchanges, mixers, no-KYC swaps, mining operations, and off-ramps, and keep that picture current as they adapt to pressure.
• •Produce finished intelligence — advisory notes, customer and partner briefings, and contributions to flagship publications (the Crypto Crime Report and beyond) that make the Iran crypto threat legible and actionable.
• •Be the named external expert — represent Chainalysis on Iran crypto threats at conferences, on panels, with the press, and in briefings to public- and private-sector partners.
• •Help set the Iran collection agenda — surface what data we need on Iranian networks and feed those requirements into our collection process and priority intelligence requirements; you direct collection for the domain, but it runs through the team’s apparatus and prioritization, not you alone.
• •Translate typologies into detection — turn what you learn about Iranian methods into guidance that our products and our customers can operationalize.
• •Build with AI — design and tune the automation that scales your analysis and the team’s, and handle the hard cases automation can’t.
• •Level up the team — raise the bar on Iran and threat-finance tradecraft broadly, and partner closely with analysts, other SMEs, data science, and engineering.