Senior Intelligence Analyst, Iran Focus

About the role

The role centers on owning the Iran problem end to end within Chainalysis as the designated subject matter expert. You will become the singular depth resource on how Iran and its proxies leverage cryptocurrency, capable of proving on-chain activity that supports real-world decisions. This position requires deep specialization while operating within a broader analyst team that covers the crypto-services ecosystem comprehensively. You will own the full lifecycle of Iran attribution, from initial hypothesis through to validated findings and customer-ready intelligence. The work involves mapping actual network operations, translating complex typologies into structured detection logic, and ensuring findings are actionable. You will also serve as the named external voice representing Chainalysis on Iran-related crypto threats to partners and the public. This is a high-impact role where your analysis directly influences how the industry and authorities understand and counter Iranian malign crypto activity.

Key facts

What you'll do

• Own Iran attribution end to end - the threat-actor entities, their definitions, and the accounts, addresses, and infrastructure they operate: Iranian exchanges and OTC/no-KYC networks, IRGC and IRGC-QF financing, Iranian proxy and Shia militant finance (e.g., Hezbollah, the Houthis, and Iraqi militias), sanctions-evasion infrastructure, Iranian ransomware and state-linked cyber operations, and oil-, commodity-, and procurement-for-crypto flows.
• Lead the attribution response to Iran-related sanctions events - when OFAC or allied authorities designate Iranian entities, actors, or infrastructure, drive the rapid, high-visibility on-chain attribution that turns those designations into coverage in our data, often against the clock.
• Map the networks on-chain - trace how Iranian actors raise, move, launder, and cash out value through Iranian VASPs, regional exchanges, mixers, no-KYC swaps, mining operations, and off-ramps, and keep that picture current as they adapt to pressure.
• Produce finished intelligence - advisory notes, customer and partner briefings, and contributions to flagship publications (the Crypto Crime Report and beyond) that make the Iran crypto threat legible and actionable.
• Be the named external expert - represent Chainalysis on Iran crypto threats at conferences, on panels, with the press, and in briefings to public- and private-sector partners.
• Help set the Iran collection agenda - surface what data we need on Iranian networks and feed those requirements into our collection process and priority intelligence requirements; you direct collection for the domain, but it runs through the team's apparatus and prioritization, not you alone.
• Translate typologies into detection guidance - convert your findings about Iranian methods into clear specifications that feed our products, data labeling pipelines, and detection rules.
• Partner with data science and engineering to operationalize Iran-focused signals - ensuring models, features, and entity-resolution logic reflect the latest understanding of Iranian actor behavior.
• Maintain and evolve the Iran-focused portion of Chainalysis' global attribution data, ensuring consistency, accuracy, and traceability across all linked on-chain entities.
• Collaborate asynchronously and in real time with a globally distributed team of analysts, threat-domain SMEs, data scientists, and engineers, upholding a high bar of quality and timeliness.
• Support rapid-response playbooks when Iran-related designations or major on-chain events occur, coordinating with internal stakeholders and external partners.
• Contribute to the development of predictive models that identify illicit patterns specific to Iranian networks before they escalate, leveraging both historical and emerging on-chain data.

Requirements

You must meet these hard eligibility criteria and possess the following experience and skills:

• You are authorized to work in the United States and require no company-sponsored work authorization at this time.
• You have the right to work in the United States without sponsorship now or at any point in the future.
• You have a demonstrated history of analyzing Iran, the IRGC, or Iran-aligned proxies in a professional, government, or commercial intelligence environment.
• You have deep, hands-on experience tracing cryptocurrency flows on-chain and linking them to real-world entities and activities.
• You are fluent in blockchain data tools, transaction graph analysis, and relevant open-source intelligence methods.
• You have a track record of producing clear, concise intelligence products for senior stakeholders, including written briefings and verbal presentations.
• You are comfortable working independently across long time zones with minimal direct supervision while remaining tightly aligned with team priorities.
• You are meticulous about data accuracy, source vetting, and methodological rigor, maintaining detailed documentation of your reasoning and evidence.
• You understand sanctions programs, watchlist practices, and the regulatory expectations placed on Chainalysis and its customers.

Practical notes

• Hours: Full-time (40 hours per week).
• Travel: None.
• Visa: The candidate must already have the necessary authorization to work in the United States without sponsorship.
• Deadlines: None specified.

LENGTH: 700-900 words. No HTML, no markdown, no em dashes. Output the page only.