Senior Intelligence Analyst - Russia & Eurasia Regional Focus

OpenKrill; United States; Remote; USD 130,000 - 190,000; Full time

Job summary

Chainalysis is seeking a Russia & Eurasia intelligence analyst to own end-to-end attribution of crypto threats linked to Russian actors. You will map on-chain activity, produce actionable intelligence, and represent the company publicly on Russia-related crypto risk.

This depth role requires experience in threat-finance, sanctions, and threat intelligence, with strong writing and AI-forward capabilities. You will collaborate with analysts, data scientists, and engineers across time zones and

Qualifications

• Deep, demonstrable Russia & Eurasia expertise in sanctions landscape and crypto ecosystem.
• On-chain tracing experience for Russian targets including exchanges and sanctions-evasion flows.
• National-security or threat-finance background with strong writing skills.

Responsibilities

• Own Russia & Eurasia attribution end to end, incl. threat actors, infrastructure, and sanctions-related activity.
• Lead attribution response to Russia-related sanctions events and drive on-chain coverage.
• Map on-chain networks for Russian/Eurasian actors and keep the picture current as they adapt to sanctions.
• Produce finished intelligence for advisory notes, briefings, and flagship publications.
• Represent Chainalysis as the external expert on Russia & Eurasia crypto threats.

Skills

Russia & Eurasia expertise

On-chain tracing

National-security or threat-finance

Regional fluency

Excellent writing

AI-forward instincts

Data and blockchain forensics

Senior/Staff experience

Tools

Blockchain forensics

Job description

The R&D team at Chainalysis is inspired by solving the hardest technical challenges and building products that establish trust in cryptocurrencies. We're a global organization that thrives on challenging work and doing it alongside exceptionally talented teammates. Our industry evolves rapidly, and our mission is to build a flexible, AI-driven platform that automates entity resolution, optimizes data labeling pipelines, and creates predictive models that identify illicit patterns before they elevate.

Chainalysis data has helped solve some of the world’s highest-profile criminal and national-security cases and made it safer for people everywhere to access crypto. The Global Intelligence Team produces the attribution at the heart of that data — connecting on-chain activity to the real-world entities behind it, across the global crypto ecosystem. It’s the intelligence data moat beneath every Chainalysis product, and what investigators, sanctions authorities, and national-security agencies rely on to follow the money and disrupt threats.

Few domains demand more sustained depth than Russia and the broader Eurasian sanctions-evasion ecosystem. Since 2022, sweeping sanctions on Russian financial institutions, oligarchs, and the defense-industrial base have pushed a growing share of Russian value flows into cryptocurrency — from no-KYC exchanges and OTC desks operating across the former Soviet bloc, to sanctions-evasion networks exploiting stablecoins and cross-border payment channels, crypto-denominated procurement of restricted goods, and the financial infrastructure supporting Russian cyber and ransomware operations. Understanding how Russian actors adapt to sanctions pressure on-chain is one of the most consequential problems in crypto intelligence today.

As our Russia & Eurasia-focused intelligence analyst — the team’s subject-matter expert on Russian and Eurasian crypto threats — you’ll own that problem end to end. This is a depth role: while our analysts cover the breadth of the crypto-services ecosystem, you’ll go deep on a single, high-stakes domain — becoming the person, inside Chainalysis and increasingly across the industry, who understands how Russian and Eurasian actors use crypto to evade sanctions and can prove it on-chain. You’ll own the attribution for Russia’s crypto footprint, map how these networks operate and adapt under pressure, turn that into finished intelligence customers act on, and be the expert voice representing Chainalysis on Russian crypto threats.

Who you’ll work with

You’ll join a fast-moving, globally distributed team — analysts, threat-domain SMEs, data scientists, and engineers — collaborating across time zones, async and in real time. We move fast, hold each other to a high bar, and back each other up across regions. As the Russia & Eurasia SME, you’ll be the single point of depth for the domain and a force multiplier for everyone working adjacent to it.

In this role, you’ll:

• Own Russia & Eurasia attribution end to end — the threat-actor entities, their definitions, and the accounts, addresses, and infrastructure they operate: Russian and CIS no-KYC exchanges, OTC networks, and instant swap services, sanctions-evasion infrastructure (stablecoin corridors, cross-border payment channels, nested services), Russian-linked ransomware and cybercrime ecosystem financial flows, procurement networks for restricted and dual-use goods, and the broader financial infrastructure enabling Russian value movement outside the traditional financial system.
• Lead the attribution response to Russia-related sanctions events — when OFAC or allied authorities designate Russian entities, actors, or infrastructure, drive the rapid, high-visibility on-chain attribution that turns those designations into coverage in our data, often against the clock.
• Map the networks on-chain — trace how Russian and Eurasian actors raise, move, launder, and cash out value through regional exchanges, no-KYC swaps, OTC desks, stablecoin corridors, mixers, and off-ramps across the former Soviet bloc and beyond, and keep that picture current as they adapt to pressure.
• Produce finished intelligence — advisory notes, customer and partner briefings, and contributions to flagship publications (the Crypto Crime Report and beyond) that make the Russia & Eurasia crypto threat legible and actionable.
• Be the named external expert — represent Chainalysis on Russia & Eurasia crypto threats at conferences, on panels, with the press, and in briefings to public- and private-sector partners.
• Help set the Russia & Eurasia collection agenda — surface what data we need on Russian and Eurasian networks and feed those requirements into our collection process and priority intelligence requirements; you direct collection for the domain, but it runs through the team’s apparatus and prioritization, not you alone.
• Translate typologies into detection — turn what you learn about Russian methods and sanctions-evasion typologies into guidance that our products and our customers can operationalize.
• Build with AI — design and tune the automation that scales your analysis and the team’s, and handle the hard cases automation can’t.
• Level up the team — raise the bar on Russia & Eurasia and sanctions-evasion tradecraft broadly, and partner closely with analysts, other SMEs, data science, and engineering.

We’re looking for candidates who have:

• Deep, demonstrable Russia & Eurasia expertise — real command of the Russian sanctions landscape, Russian financial infrastructure and how it has adapted to sanctions pressure, the CIS/former Soviet bloc crypto ecosystem, and/or Russian illicit-finance and procurement networks. This is the core of the role, and we’ll expect you to show it.
• On-chain tracing ability against Russian targets — direct experience following Russian crypto activity on-chain (Russian exchanges, sanctions evasion, ransomware financial flows), or deep Russia threat-finance expertise paired with proven blockchain-tracing skill you can bring to bear here from day one.
• A national-security or threat-finance background — intelligence, sanctions, counter-threat-finance, or investigations, from the IC, Treasury/OFAC, law enforcement, the military, a think tank or research institution, or private-sector CTF/sanctions work.
• Regional fluency — a strong grasp of Russian and Eurasian geopolitics, the sanctions landscape, and regional financial flows. Russian language ability is a significant plus.
• Elite potential and a proven track record — exceptional aptitude, judgment, and work ethic; you’ve led hard problems end to end and you raise everyone around you.
• Excellent writing and communication — this is an outward-facing expert role; your intelligence has to land with analysts, customers, and senior audiences alike.
• AI-forward instincts — you build automation to scale your work and others’, not just use it.
• Comfort working with data; blockchain forensics experience strongly preferred.
• 5+ years of relevant analytic, intelligence, or threat-finance experience for a Senior hire; 8+ years and recognized domain authority for a Staff hire.

You might also have:

• Russian language ability.
• Direct experience with OFAC, EU, or OFSI sanctions, sanctions-evasion investigations, or the designation process.
• A record of published research or public speaking on Russia, sanctions evasion, or crypto threat finance.
• Familiarity with Russian and CIS exchange infrastructure, stablecoin-based sanctions evasion, ransomware financial flows, or dual-use procurement networks.

AI at ChainalysisAI is not a feature at Chainalysis - it is a new way of working. One that turns instructions into work done, and helps us move faster than the threats we're built to counter, and we expect our employees to take ownership of the output and ensure quality. As the world's most trusted blockchain analytics platform, Chainalysis sits at a rare interse