Cyber Forensic Analyst II

This position supports the Research & Analysis Division of the Financial Crimes Enforcement Network (FinCEN) in combating financial crimes, including terrorist financing, proliferation financing, and complex money laundering schemes.

About the role

Conduct financial cyber investigations of complex financial and business records, providing advanced analytical, technical, and operational support. Analyze cyber-enabled crime methods and trends, including technical methods and money laundering techniques. Perform cyber target development to identify cyber-enabled crime networks that may threaten systemically important financial institutions. Evaluate emerging payment technologies, such as virtual currencies, for criminal use or terrorist financing. Provide analytical and product evaluative services to analyze cyber evidence and support case investigations.

Responsibilities

• Conduct cyber forensics, including acquisition, chain of custody, and analysis of electronic evidence from computers, mobile devices, and digital storage media.
• Apply investigation and analysis techniques to gather and preserve evidence suitable for presentation in a court of law.
• Assist with cryptocurrency analysis, blockchain analytics, open internet (including social media), deep and dark web intelligence gathering, data analytics, and electronic evidence analysis related to cybercrime investigations.
• Conduct research and analysis using open-source information, national and international databases, and corporate record filings to match investigative findings and produce professional reports.
• Support enforcement of Title 18, Title 31, and other applicable federal statutes, including seizure and forfeiture of illegally derived property.
• Apply process improvement and reengineering methodologies to modernize investigative processes and develop operational policies.

Requirements

• Active Top Secret (TS) clearance with SCI eligibility.
• Bachelor’s degree and 4–7 years of relevant experience, or a master’s degree and 2–5 years of relevant experience.
• Knowledge of procedures and techniques used in cryptocurrency investigations.
• Experience conducting cryptocurrency analysis in support of federal investigations using tools such as Chainalysis and TRM Labs.
• Ability to demonstrate expertise in industry best practices for process modernization and reengineering.

Preferred Qualifications

• Experience in cryptocurrency, including global portfolios of virtual currencies, cyber actors, intrusion sets, and ransomware infrastructure.
• Experience tracing cryptocurrency transactions through cyber data platforms.
• Experience producing all-source, cybersecurity, or threat finance intelligence products.
• Experience in the financial services industry, including compliance, asset management, securities, or banking operations.
• Foreign language skills in Russian, Romanian, or Arabic (preferred but not required).

Pay

$110,000 – $120,000 per year. Actual compensation may vary based on job responsibilities, education, experience, skills, internal equity, market data, and applicable laws or agreements.

Benefits

• Health, dental, and vision insurance.
• Paid time off and holidays.
• Retirement benefits, including 401(k) matching.
• Educational reimbursement.
• Parental leave.
• Employee stock purchase plan.
• Tax-saving options.
• Disability and life insurance.
• Pet insurance.

Benefits may vary based on employment type, location, and applicable agreements.