Cybersecurity Threat Intelligence Analyst

Cybersecurity Threat Intelligence Analyst

Full Time Perm

Shift: Hybrid - 3 days on location

Salary: $ 96,600 - $144,900 with 8% annual bonus

Location:

Columbus, OH, Merrillville, IN, Lexington, KY, Chester, VA, Canonsburg, PA, or Washington, DC

Relocation Assistance Provided

NiSource is one of the largest fully regulated utility companies in the U.S., serving millions of customers across six states. We're more than an energy provider—we're a team committed to innovation, inclusion, and growth. At NiSource, you'll find a workplace that encourages collaboration, supports professional development, and empowers employees to make an impact.

The Cybersecurity department ensures the confidentiality, integrity, and availability of NiSource assets to achieve the company mission. We excel in engineering sophisticated defenses, architecting resilient systems, and proactively defending the vital cyber infrastructure that is crucial to our business operations. At NiSource, the Cybersecurity Consultants provide the critical bridge between security theory and practice, offering insights that shape our security strategies.

The Cybersecurity and Physical Threat Intelligence Team plays a pivotal role in identifying and analyzing cyber and physical threats, emerging risks, and industry developments. Our team partners closely with Cybersecurity Incident Response, Physical Security Operations, Cyber Risk Management, and various other partners to detect and mitigate potential threats to the business across our digital and physical environments. As cyber and physical threats continue to converge, our fused intelligence program drives cohesion, a proactive approach, and strengthens information-sharing practices across the Enterprise Security department.

As a Cybersecurity Threat Intelligence Analyst, you will collect, analyze, and interpret threat data, build strategic intelligence products based on documented trends, employ frameworks such as NIST CSF, and inform security protocols based on actionable intelligence. You will have the opportunity to support and further develop insider risk projects and insider threat investigations. You will work with a range of stakeholders across Enterprise Security to deliver intelligence-led insights for incident response, threat hunting, and cyber defense activities.

You will also play a key role in improving intelligence processes, reporting, and automation capabilities while building strong relationships across the organization and with external partners.

Your responsibilities may include, but are not limited to:

• Monitor, analyze, track, and report on evolving threat trends related to the company, industry, or critical infrastructure and national security more broadly
• Conduct advanced open-source intelligence (OSINT) research and investigations into cyber threat actors, origins, motives, TTPs, emerging trends, and geopolitical developments. Assess how geopolitical and societal developments drive cyber activity over time and impact the organization
• Synthesize large volumes of multi-source intelligence and technical processes into concise products and executive-level briefings to ensure that senior leaders get a clear understanding of threat activity, related risks, business implications, and recommended mitigations or controls
• Support tactical intelligence collection and reporting, including monitoring for indicators like IOCs or malicious IPs, leveraging tools for detection, and validation within NiSource systems, and providing actionable intelligence to Incident Response
• Respond and support Cybersecurity or Physical Security teams during high-impact incidents. Compile available intelligence into timely, high-confidence products
• Continue to update key stakeholders throughout a security or crisis event to provide essential information, translate technical information for a business audience, and support overall business response and recovery efforts
• Assist in developing new intelligence reporting thresholds, templates, products, and data collection mechanisms
• Develop and maintain intelligence metrics, dashboards, investigative records, and KPIs to ensure that team activities are measurable and aligned to business objectives
• Utilize intelligence tools and platforms such as Dataminr, Recorded Future, Zero Fox, and other OSINT capabilities to support routine monitoring, investigations, and analysis
• Facilitate and develop new data connections for Power BI dashboards (database development) used for insider risk detection and tracking. Perform regular updates to API connections and dashboards as the Insider Risk and Threat programs evolve
• Collaborate closely with other team members and Cybersecurity verticals to conduct investigations, validate findings, support incident response efforts, and enhance information sharing across the physical and cyber disciplines
• Participate periodically in procedural audits, analytic reviews, lessons-learned sessions, or after-action reports
• Continuously refine sourcing strategies and…