Senior Cyber Crypto & Blockchain Forensic Investigator

HallieMorgan Technologies; Washington (District of Columbia); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Company-paid education

Job summary

HallieMorgan Technologies seeks a Cyber Crypto/Blockchain Forensic Investigator for a mission-critical environment with a federal law enforcement agency. The role emphasizes cryptocurrency tracing across multiple blockchains, DeFi protocol analysis, and financial forensics in complex datasets.

The ideal candidate will perform OSINT across social media and dark-web sources, support large-scale investigations, and deliver defensible analytical reporting.

Qualifications

• Performs highly complex cryptocurrency tracing across multiple blockchains and obfuscation methods.
• Conducts advanced on-chain pattern and network analysis to characterize DeFi protocols, laundering networks and threat infrastructure.
• Performs comprehensive financial forensic analysis across large datasets to identify ownership and illicit flows.
• Leads OSINT collection and analysis across social media, gray literature, commercial, infrastructure, and dark web sources.
• Supports large-scale cyber-enabled investigations, targeting, briefings, and defensible analytical reporting.

Responsibilities

• Apply expert techniques to full lifecycle of cyber-enabled investigations involving on-chain and off-chain data.
• Perform complex cryptocurrency tracing across multiple blockchains with obfuscation techniques.
• Conduct advanced on-chain pattern analysis to identify and characterize DeFi protocols and money-laundering networks.
• Leverage knowledge of smart contracts, signature approvals and network layers for analysis and monitoring.
• Perform financial forensic analysis using large data sets from reports, banking records and digital asset accounts.
• Conduct OSINT collection to generate actionable intelligence for attribution and network connections.

Skills

Cryptocurrency tracing

On-chain pattern analysis

DeFi protocol knowledge

OSINT collection

Financial forensic analysis

Open-source intelligence

Investigative reporting

Education

BS or higher in IT/Mathematics or related field

Job description

HallieMorgan Technologies is seeking a highly skilled Cyber Crypto/Blockchain Forensic Investigator to support a mission-critical environment for a federal law enforcement agency.

Why HallieMorgan?

Join a thriving team environment that will put your skills and expertise to the test. A long-term opportunity in a fast paced environment. Company paid education, with a customized career path which includes conferences, certifications and multiple learning opportunities.

Required Education/Experience

• A BS or Higher in IT, Mathematics or related field
• Minimum of 4 years of Cyber Crypto/Blockchain Forensic Investigation experience

Qualifications

• Performs highly complex cryptocurrency tracing across multiple blockchains and obfuscation methods, including cross-chain bridges, token swaps, OTC desks, privacy-enhanced tokens and networks, smart contract-based obfuscation, CoinJoin, and mixing services.
• Conducts advanced on-chain pattern and network analysis to characterize DeFi protocols, laundering networks, threat infrastructure, and entity relationships. Applies deep expertise in smart contracts, signature approvals, blockchain architectures, and network layers to support technical analysis, entity identification, trigger-based monitoring, and operational engagement.
• Performs comprehensive financial forensic analysis across large investigative, banking, account, invoicing, investment, and digital asset datasets to identify ownership, control, and illicit financial flows.
• Leads OSINT collection and analysis across social media, gray literature, commercial, infrastructure, and dark web sources.
• Supports large-scale cyber-enabled investigations, targeting, briefings, and defensible analytical reporting.

Experience

The successful candidate shall:

• be capable of applying expert level techniques to the full lifecycle of a cyber-enabled fraud investigation involving both on-chain and off-chain data points and open source and legally sourced data sets to focus on asset recovery, victim restitution, target identification and arrest.
• be capable of performing complex cryptocurrency tracing across multiple blockchains, including analysis of transactions that employ obfuscation techniques such as cross-chain bridges, token swaps, over-the-counter (OTC) desks, and privacy-enhanced tokens and/or networks.
• be capable of conducting advanced on-chain pattern and network analysis to identify and characterize decentralized finance (DeFi) protocols, OTC desks, and money-laundering networks, including probability-based tracing of privacy-enhanced transactions and de-mixing of CoinJoin and other mixing services.
• possess a robust understanding of virtual currency smart contracts, signature approvals, and network layers, and shall be capable of leveraging this knowledge for technical analysis, entity identification, and trigger-based monitoring and engagement.
• be capable of performing financial forensic analysis, including time-and date-based analysis; identifying patterns of deposits and withdrawals; and attributing corporate ownership and control using large, complex data sets derived from investigative reports, database reports, banking records, account and invoicing records, investment portfolios, and digital currency accounts.
• be capable of conducting Open-Source Intelligence (OSINT) collection and analysis to generate actionable intelligence for attribution and identification of network connections associated with individuals and/or property. This includes harvesting and analyzing data from social media platforms, gray literature, commercial data providers, infrastructure providers, and dark-web sources.
• be capable of exploiting and triaging large financial data sets to support targeting and investigative efforts related to cyber-enabled crimes, including but not limited to network breaches, bridge hacks, social-engineering campaigns, dark-web marketplaces, business email compromise schemes, ransomware incidents, and phishing operations.
• shall have demonstrated experience supporting large-scale investigations initiated by state, local, Federal, and/or foreign law enforcement entities, including a working understanding of criminal procedures and asset seizure and forfeiture processes.