Threat Intelligence Analyst

Work Arrangement: Primarily onsite; remote availability may be accommodated based on team needs

Schedule: Flexible evening and weekend coverage required

Project: Cyber Security Operations Center (CSOC) Build

Job Summary

Our client, a leading aviation provider, is seeking an experienced Threat Intelligence Analyst IV to support its Cyber Security Operations Center (CSOC) Build project. The ideal candidate will have strong expertise in cyber threat intelligence, open-source intelligence (OSINT), threat actor analysis, and incident response support.

This role involves collecting and analyzing intelligence from open-source, confidential, and commercial sources to identify emerging cyber threats, assess potential attacks, and provide actionable intelligence to support cybersecurity operations.

Key Responsibilities

• Collect and analyze open-source cyber intelligence to identify emerging threats, vulnerabilities, and potential attacks.
• Review and evaluate intelligence from open-source, confidential, and commercial sources.
• Research threat actors, their motivations, attack methodologies, and tactics, techniques, and procedures (TTPs).
• Develop clear and actionable cyber threat intelligence reports for technical and non-technical audiences.
• Support cybersecurity incident response activities through technical research, threat analysis, and investigative insights.
• Collaborate with the CSOC team to assess threats, communicate findings, and escalate critical incidents.
• Coordinate incident-related communications and intelligence requests primarily through Microsoft Teams.
• Provide timely support for security escalations and critical incidents outside scheduled coverage hours, as needed.

Required Qualifications

• 7 years of experience in cybersecurity, cyber threat intelligence, or a closely related field.
• Senior-level experience in cyber threat intelligence analysis.
• Hands-on experience collecting and analyzing open-source cyber intelligence (OSINT).
• Experience analyzing open-source, confidential, and/or commercial cyber intelligence sources.
• Strong understanding of threat actors, their motivations, attack methodologies, and TTPs.
• Experience preparing and delivering cyber threat intelligence reports for diverse audiences.
• Experience providing technical research and intelligence support during cybersecurity incidents.
• Strong analytical, investigative, written communication, and collaboration skills.
• Willingness to work flexible evening and weekend schedules and respond to critical CSOC escalations outside scheduled hours.

Preferred Qualifications

• Experience supporting a Cyber Security Operations Center (CSOC) or Security Operations Center (SOC).
• Experience using commercial cyber threat intelligence platforms and sources.
• Familiarity with incident response processes and security investigations.
• Experience coordinating incident-related communications through Microsoft Teams or similar collaboration tools.

Work Schedule & Environment

• Weekday evening coverage: 4:00 PM – midnight.
• Weekend coverage: 8:00 AM – midnight, based on team requirements.
• Flexible scheduling, including weekday/weekend splits or rotating coverage.
• Primarily onsite in Arlington Heights, IL, unless on-call or otherwise arranged.
• Availability to respond to critical security incidents and escalations outside scheduled hours, as needed.