Threat Intel Analyst IV

Our client, a leading aviation provider, is seeking a Threat Intelligence Analyst IV to support its Cyber Security Operations Center (CSOC) Build project. This position is W-2 only. We do not work with third-party firms or C2C arrangements for this role.

• Contract duration: 19 weeks, August 31, 2026 – January 8, 2027
• Number of openings: 2
• Work location:
  
  Arlington Heights, IL
• Work arrangement:
  Flexible, with evening and weekend coverage required; remote availability may be accommodated based on team needs
• Schedule:
  
  Evening coverage from 4:00 PM to midnight and weekend coverage from 8:00 AM to midnight, with the ability to respond to CSOC requests outside these hours as needed

• Collect open-source cyber intelligence to identify emerging threats and potential attacks
• Analyze open-source, confidential, and commercial cyber intelligence sources
• Assess cyber threats and potential attacks within the scope of the internal Cyber Intelligence program
• Develop and support cyber threat intelligence reporting for diverse audiences
• Assist with incident response engagements by providing technical expertise, research, and investigative insight
• Research threat actor motivations and tactics, techniques, and procedures (TTPs)
• Coordinate with the CSOC team through Microsoft Teams and escal

• Willingness to work flexible evening and weekend schedules, including weekday coverage from 4:00 PM to midnight, weekend coverage from 8:00 AM to midnight
• Availability to respond to CSOC requests outside scheduled hours during critical incidents
• 7+ years of experience in cyber intelligence, consistent with the Level IV requirement
• Senior-level experience in cyber threat intelligence
• Experience collecting open-source cyber intelligence
• Experience analyzing open-source, confidential, and/or commercial cyber intelligence sources
• Experience developing cyber threat intelligence reports for diverse audiences
• Experience supporting incident response through technical research and analysis of threat actor motivations and tactics, techniques, and procedures (TTPs)

• Experience supporting a Cyber Security Operations Center (CSOC)
• Experience providing cyber intelligence support during security incidents
• Experience researching threat actor behavior, motivations, and attack methodologies
• Experience working with commercial cyber intelligence sources
  
  Experience translating technical intelligence into reports for different audiences
• Experience coordinating incident-related communications through Microsoft Teams or similar collaboration platforms
• Flexibility to coordinate evening and weekend coverage with other intelligence analysts

• Analytical thinking and critical evaluation of cyber threat intelligence
• Strong research and investigative skills
• Clear written communication and ability to tailor reporting to diverse audiences
• Collaboration and effective communication during incident response
• Flexibility and responsiveness when supporting time-sensitive security incidents

• Location:
  
  Arlington Heights, IL
• Work arrangement: onsite unless on call
• Provide evening coverage from 4:00 p.m. to midnight and weekend coverage from 8:00 a.m. to midnight
• Remain available to respond to CSOC escalations outside scheduled coverage hours, as needed
• Coordinate coverage schedules flexibly to ensure evening and weekend support, including weekday/weekend splits or rotating schedules
• Escalate complex issues to the team for additional support during critical incidents
• Collaborate primarily through Microsoft Teams chats, with in-person availability being less critical than responsiveness during crisis situations

Temporary…