• Investigate and analyze complex insurance claims for potential fraud • Conduct thorough investigations including background searches and scene inspections • Perform surveillance and create scene reconstructions • Provide guidance and mentoring to less experienced team members

• Conduct complex investigations into intellectual property infringement using advanced OSINT techniques and digital intelligence tools • Gather and analyze information from online sources, including websites, social media, forums, and dark web environments • Identify counterfeit, trademark, and copyright infringement operations by uncovering hidden infrastructure, networks, and key actors • Perform code review, network traffic analysis, and technical investigations to understand illicit websites, applications, and devices • Develop and utilize automation scripts (e.g., Python) to streamline investigative processes • Prepare comprehensive investigative reports, criminal referrals, and actionable recommendations to support enforcement and legal action • Collaborate with analysts, investigators, attorneys, law enforcement, and clients to advance investigations and achieve case objectives • Present findings to stakeholders, translating complex technical information into clear, actionable insights

• Conduct end-to-end investigations into sanctions-related alerts, CTF suspicions, and high-risk activity flagged through transaction monitoring or referrals • Perform blockchain tracing and on-chain analysis to identify fund flows, wallet attribution, and links to sanctioned entities or terrorist financing networks • Investigate cases involving OFAC, UN, EU, and other global sanctions lists, applying appropriate jurisdictional knowledge • Prepare clear, accurate, and well-evidenced investigation reports, including SAR/STR filings where required • Manage an assigned caseload within defined SLAs, prioritising effectively and maintaining accurate case records • Conduct open-source research (OSINT) to enrich investigations and identify connections to sanctioned parties, terrorist organisations, or illicit networks • Support client off-boarding processes for cases involving confirmed or suspected sanctions exposure • Ensure all investigative activity is conducted in line with Binance's Global Sanctions Policy and CTF compliance frameworks • Identify process gaps or control weaknesses observed during investigations and escalate recommendations for improvement

• Proactively detect and reacquire bad actors on our platform. • Investigate potentially policy-violating activity by querying internal data sources (using SQL and Python) and cross-referencing open source information (OSINT). • Document and share investigative findings with internal stakeholders.