{"id":1508009,"url":"https://alion.io/job/okx-senior-fraud-risk-manager","title":"Senior Fraud Risk Manager","company":{"id":76,"name":"OKX","domain":"okx.com","url":"https://alion.io/company/okx","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":89,"open_postings":313,"ghost_share":0.102,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":91,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Finance","role_family":"Finance","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":143000,"max":214000,"currency":"USD","period":"year","gross":null,"usd_annual":214000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Chainalysis","optional":false},{"name":"DeFi","optional":false},{"name":"Microsoft Excel","optional":false},{"name":"Python","optional":false},{"name":"Smart Contracts","optional":false},{"name":"Splunk","optional":false},{"name":"SQL","optional":false},{"name":"TRM Labs","optional":false}],"status":"live","first_seen_at":"2026-09-29T22:00:03Z","employer_posted_date":"2026-09-29","last_verified_at":"2026-10-26T13:51:22Z","board_verified":true,"closed_at":null,"days_open":26,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":26},"description":"Who We Are\nAt OKX, we believe the future will be reshaped by crypto and blockchain technology. We operate a leading global crypto platform and build products and services designed to expand access to the digital-asset ecosystem.\nAcross our global organization, we value ownership, sound judgment, collaboration, innovation, and the ability to operate effectively in a fast-moving and continuously evolving environment.\nRecruiting should insert the current approved OKX corporate “Who We Are” language when the position is posted.\nAbout the Team\nThe Fraud Investigations Team (FIT) is a First Line of Defense function within OKX’s Risk organization responsible for identifying, assessing, investigating, and helping manage significant internal and external fraud risks affecting the company, its customers, personnel, and operations.\nFIT conducts and supports complex investigations involving digital assets, internal and external fraud, employee misconduct, insider threats, unauthorized access or misuse of information, vendor and third-party misconduct, account compromise, social engineering, collusion, conflicts of interest, and other significant fraud-related matters.\nThe team works closely with Legal, HR, Information Security,Engineering, Physical Security, Compliance, Finance, Operations, and other functions across OKX.\nAbout the Opportunity\nWe are looking for an experienced Senior Analyst, Blockchain Investigations &FraudIntelligence to join FIT.\nThis is first and foremost a blockchain investigations role requiring significant hands-on expertise tracing digital assets across complex blockchain ecosystems. The successful candidate must be capable of independently conducting sophisticated on-chain investigations, developing and testing attribution hypotheses, identifying relationships among wallets and entities, following assets through multiple chains and protocols, and translating highly technical blockchain activity into clear investigative findings.\nBlockchain analysis is a specialized investigative discipline. Accordingly, we are seeking someone who understands not only how to operate commercial tracing platforms, but also the underlying blockchain architecture, transactional mechanics,attribution methodologies, clustering techniques, tracing limitations, and evidentiary considerations necessary to reach reliable conclusions.\nThe role extends beyond on-chain analysis. The Senior Analyst will combine blockchain intelligence with enterprise data, system logs, transactional records, open-source information, and other evidence to support complex fraud and insider-risk investigations.\nThe position will also provide analytical support to the Global Physical Security Team (PST) on selected protective-intelligence and threat-assessment matters.\nThe Senior Analyst will directly manage one Analyst and will be expected to serve as a subject-matter resource for blockchain investigations and analytical methodology across FIT.\nWhat You’ll Be Doing\nBlockchain Investigations & Digital-Asset Intelligence\nLead and conduct complex blockchain investigations and transaction tracing across multiple wallets, counterparties, entities, blockchains, tokens, protocols, and digital-asset ecosystems.\n\nTrace the origin, movement, conversion, layering, consolidation, and ultimate disposition of digital assets, including activity spanning multiple intermediaries and blockchain environments.\n\nConduct investigations using tools such as ChainalysisReactor, TRM Labs, Elliptic, or comparable blockchain intelligence platforms, while understanding the methodologies and limitations underlying platform-generated attribution.\n\nAnalyze activity involving centralized exchanges, self-hosted wallets, decentralized exchanges, cross-chain bridges, mixers, privacy-enhancing technologies,DeFiprotocols, smart contracts, stablecoins, NFTs, OTC activity, gambling platforms, and other relevant ecosystems.\n\nTrace assets across multiple chains and cross-chain transactions, identifying continuity of funds where technically supportable and clearly documenting assumptions or limitations where definitive attribution is not possible.\n\nAnalyze transaction graphs, address relationships, behavioral patterns, clusters, counterparties, timing, amounts, transaction sequencing, and other relevant blockchain indicators.\n\nUnderstand and appropriately apply wallet-clustering andattributionmethodologies, including the limitations and potential for false attribution associated with particular heuristics.\n\nIndependently evaluate blockchain intelligence rather than relying solely on automated labels, risk scores, or vendor-generated attribution.\n\nCorroborate on-chain findings, where appropriate, with internal account records,KYC/KYBinformation, transaction data, access information, open-source intelligence, legal-process returns, or other available evidence.\n\nIdentify relationships among blockchain addresses, OKX accounts, external counterparties, individuals, organizations, vendors, affiliates, and other relevant entities.\n\nReconstruct complex transaction flows and create clear fund-flow diagrams, transaction maps, timelines, and visualizations that allow investigators and nontechnical stakeholders to understand the movement of assets.\n\nAnalyze blockchain activity associated with suspected fraud, theft, account takeover, social engineering, insider activity, collusion, payment diversion, asset misappropriation, or other misconduct.\n\nIdentify new wallets, counterparties, entities, or transactional patterns that may generate additional investigative leads.\n\nClearly document the methodology, assumptions, confidence level, and limitations associated with blockchain findings.\n\nDistinguish between confirmedattribution, vendor attribution, analytical inference, behavioral similarity, and an unverified investigative hypothesis.\n\nAvoid presenting blockchain proximity, exposure, clustering, or a commercial risk score alone as proof of ownership, control, intent, or misconduct.\n\nMaintain current knowledge of emerging blockchain technologies, protocols, tracing methodologies, obfuscation techniques,fraudtypologies, and developments affecting blockchainattributionor investigations.\n\nFraudInvestigations & Investigative Intelligence\nConduct and support investigations involving internal and externalfraud, employee misconduct, insider threats, vendor and third-party misconduct, collusion, conflicts of interest, asset misappropriation, unauthorized access, credential misuse, and other significant fraud risks.\n\nCombine blockchain findings with off-chain evidence to develop a comprehensive investigative picture rather than treating blockchain activity in isolation.\n\nDevelop investigative hypotheses and objectively test those hypotheses against available evidence, including information that supports, contradicts, or fails to establish the hypothesis.\n\nConduct timeline reconstruction, link analysis, relationship mapping, pattern analysis, clustering, and comparative analysis across individuals, accounts, wallets, devices, systems, transactions, and entities.\n\nSupport investigations involving account takeover, impersonation, social engineering, business-email compromise, payment diversion, affiliate misconduct, and trusted-party abuse, particularly where a digital-asset, employee, vendor, or enterprise nexus exists.\n\nAnalyze vendor, affiliate, partner, and other third-party activity for indicators of billing irregularities, undisclosed relationships, conflicts of interest, unusual payments, control circumvention, or other potential misconduct.\n\nSupport investigative interviews by developing transaction timelines, identifying inconsistencies or information gaps, organizing evidence, and identifying appropriate areas for follow-up.\n\nEnterprise Data & Insider-Risk Analytics\nAnalyze appropriately authorized information including system and access logs, authentication records, audit trails, customer-account activity,KYC/KYBinformation, transaction records, payment information, case-management records, vendor information, and relevant security telemetry.\n\nCorrelate blockchain activity with enterprise data to identify possible connections among wallets, accounts, employees, customers, vendors, devices, transactions, and other relevant entities.\n\nSupport investigations involving suspected unauthorized access, information misuse or exfiltration, credential compromise, control circumvention, unauthorized disclosure, or abuse of privileged access.\n\nIdentify anomalous behavior or access patterns that may warrant additional investigation.\n\nDevelop repeatable analytical methodologies capable of processing and correlating information from disparate systems.\n\nUse appropriate scripting, database querying, data visualization, and analytical technologies to efficiently analyze large or complex datasets.\n\nInvestigative Reporting & Evidence\nPrepare clear, concise, and well-supported blockchain investigation reports, investigative memoranda, executive summaries, transaction-flow diagrams, link charts, timelines, and other analytical products.\n\nExplain complex blockchain concepts and transaction activity in plain language suitable for investigators, senior management, Legal, regulators, orlaw enforcement, as appropriate.\n\nClearly distinguish among allegations, investigative leads, known facts, third-partyattribution, analytical judgments, assumptions, information gaps, and substantiated conclusions.\n\nEnsure analytical conclusions are proportionate to the evidence and do not imply greater certainty than the underlying blockchain or other data supports.\n\nMaintain sufficient documentation to allow significant blockchain findings to be reviewed, reproduced, and understood by another qualified analyst.\n\nPreserve and handle investigative records in accordance with applicable evidence-preservation, chain-of-custody, confidentiality, privacy, access-control, and need-to-know requirements.\n\nSupport appropriately authorized law-enforcement, regulatory, litigation, or legal matters in coordination with the appropriate company functions.\n\nProtective Intelligence & Physical Security Support\nProvide analytical support to PST on selected matters involving threats or concerning activity directed toward employees, executives, offices, events, or other company interests.\n\nConduct authorized open-source, link, timeline, blockchain, financial, or other analytical research where relevant to understanding the identity, relationships, capabilities, or activity associated with a potential threat.\n\nAssist in evaluating available information relating to credibility, corroboration, intent, capability, access or opportunity, targeting, escalation, timing, and other relevant indicators.\n\nPrepare objective analytical products identifying known facts, analytical judgments, material information gaps, uncertainties, and appropriate confidence levels.\n\nSupport PST’s assessment while preserving PST’s responsibility for protective-security decisions and operational response.\n\nLeadership & Development\nDirectly manage and develop one Junior Analyst, including work allocation, coaching, technical development, quality assurance, and review of analytical work product.\n\nServe as a FIT subject-matter resource for blockchain investigations and on-chain analytical methodology.\n\nReview blockchain analysis for technical accuracy, appropriate methodology, corroboration, reasonable attribution, and evidentiary support.\n\nTrain and mentor junior personnel in transaction tracing, blockchain intelligence platforms, analytical reasoning, documentation, and investigative methodology.\n\nHelp establish consistent standards for blockchain investigations,attribution, documentation, quality assurance, and reporting.\n\nParticipate in time-sensitive investigations affecting a global organization, including occasional work outside normal business hours when required.\n\nWhat We Look For In You\n7+ years of relevant investigative or analytical experience, with...","description_format":"text","description_chars":19209,"description_truncated":true,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cryptocurrencies","Crypto Exchanges","Crypto Wallets"],"lifecycle":[{"event":"open","at":"2026-09-30T06:44:53Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":26,"expected_fill_days":91,"reasons":["conf:0","velocity","win:early","comp:brand"],"computed_at":"2026-10-26T05:57:25Z"},"pay":{"stated_usd_annual":214000,"is_top_pay":true},"html_url":"https://alion.io/job/okx-senior-fraud-risk-manager","json_url":"https://alion.io/job/okx-senior-fraud-risk-manager.json","meta":{"generated_at":"2026-10-26T19:08:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25800,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":76},"rest":"https://alion.io/mcp/rest/get_company?id=76"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fokx-senior-fraud-risk-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fokx-senior-fraud-risk-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fokx-senior-fraud-risk-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/okx-senior-fraud-risk-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fokx-senior-fraud-risk-manager"}]}