Senior Cybercrime Analyst

Akima, LLC•Arlington, VA

3h•Remote

About The Position

Suvi, an AKIMA company, is seeking an experienced Senior Cybercrime Analyst to join a high-impact investigative team supporting the IRS Criminal Investigation Division (IRS-CI) in conducting complex and multidisciplinary technical analysis in support of cybercrime investigations. This role is ideal for seasoned professionals who thrive at the intersection of cryptocurrency tracing, open-source intelligence (OSINT), and digital investigations. We’re looking for someone who can move beyond basic compliance reviews and bring actionable insights to law enforcement partners by tracing financial flows, mapping threat actor networks and infrastructure, and identifying attribution leads. The ideal candidate will bring deep technical expertise, critical thinking, and strong interpersonal skills to collaborate effectively with IRS-CI and interagency officials. The Senior Cybercrime Analyst will be responsible for analyzing data from a variety of sources, uncovering key patterns, and providing actionable intelligence in support of ongoing investigations. This position requires the ability to work under pressure, deliver timely results, develop creative solutions, and communicate findings clearly to law enforcement partners.

Requirements

Must be a U.S. Citizen.
Ability to obtain Public Trust clearance.
Bachelors Degree and 10+ years of investigative experience in a cyber, financial crime, or intelligence support role.
Demonstrated experience tracing cryptocurrency transactions using platforms such as Chainalysis Reactor, TRM, Elliptic, or similar tools.
Proven track record working in cybersecurity or law enforcement-related environments.
Experience conducting investigations involving darknet forums, vendor shops, or threat actor networks.
Knowledge of cybercriminal ecosystems, common laundering typologies, smart contracts, ICOs, and anonymity techniques (e.g., mixers, privacy coins).
Basic proficiency in MySQL; ability to extract and manipulate data from large and/or unstructured datasets.
Strong background in social media exploitation (SOMEX), IP resolution, DNS research, and OSINT tools (e.g., Maltego, DomainTools, managed attribution platforms).
Briefing law enforcement partners and contributing to case development.
Excellent communication skills, both verbal and written, with the ability to explain complex technical concepts to non-technical stakeholders.
Strong interpersonal skills and the ability to collaborate effectively with internal teams and external law enforcement agencies.
Willingness to serve as a fact or expert witness when required.

Nice To Haves

Prior experience working alongside federal law enforcement agencies, with a deep understanding of investigative processes and protocols.
Chainalysis certifications (CRC, CISC, CEIC, etc.), TRM Academy, or similar.
Experience with covert persona operations or open-source protocols.
Understanding of legal frameworks and compliance related to digital evidence and cybercrime investigations.
Background in targeting, threat attribution, or tracking high-value actors across platforms.
Strong analytical thinking, with the ability to solve complex problems using a combination of technical knowledge and investigative techniques.

Responsibilities

Conduct end-to-end cryptocurrency tracing to support attribution of illicit financial activity involving darknet vendors, crypto scams, ransomware, pig butchering schemes, fraud, etc.
Analyze cryptocurrency transactions and blockchain data to trace illicit financial flows, uncover criminal activities, and identify key suspects involved in cybercrime operations.
Provide real-time investigative support to IRS-CI agents, contributing technical insights and contextualized intelligence to build strong prosecutorial cases.
Support dark web investigations, including threat actor research and forensic review of marketplaces, chat platforms, and credential dumps.
Use OSINT tools and selector-based targeting techniques to monitor online platforms, identify potential leads or suspects, and map actor behavior across social media, dark web forums, and public datasets. Pivot from identifiers such as BTC addresses, Ips, emails, or monikers.
Extract and analyze structured and unstructured data from databases, subpoena returns, or seized infrastructure using SQL and data analysis tools (e.g., DBeaver, Navicat, or similar platforms).
Produce clear, concise, and actionable reports detailing investigative findings, methodologies used, attribution assessments, evidence trails, and detailed technical reports for law enforcement partners.
Collaborate with U.S. Attorneys and prosecutors on investigative findings and case development; assist in preparing case materials for indictment or trial.