Insider Risk Technical Analyst

Insider Risk – Technical Analyst

JLL is seeking an Insider Risk Technical Analyst to support our global investigations team. This position plays a critical role in identifying, reporting, and mitigating potential insider threats across the organization by triaging escalations from multiple internal security teams and logging sources, including DLP, SOC, and other insider-specific technical data.

The successful candidate will bring a strong technical background with proven analytic capabilities, excellent communication and interpersonal skills, and hands‑on familiarity with DLP, UEBA, and other user‑facing information security tools. Experience with investigative analysis, digital forensics, security monitoring, and risk mitigation is essential. Familiarity with scripting languages and SIEM applications is desirable.

• Evaluate escalations from security teams, validate supporting materials, and collect additional information to determine appropriate handoff to the investigations team.
• Support Global Insider Risk investigators by compiling evidence from multiple sources and consolidating findings into comprehensive insider risk cases.
• Document findings and prepare materials for escalation to the investigations team or support alert closure decisions.
• Partner with internal security teams to refine and strengthen the organization's overall security posture.
• Perform triage of recent user activities and coordinate findings with relevant stakeholders.
• Analyze logs from DLP, SIEM, EDR, and other security platforms in support of the Insider Risk Program.

Sound like you? It’s worth knowing what an ideal candidate has to offer.

• 3+ years prior experience working in an Insider Threat team, SOC, Threat Hunt/ Intel, Digital Forensics and Incident Response, Cyber Risk Management or similar teams.
• Hands‑on experience with SIEM platforms, DLP solutions, XDR and eDiscovery solutions.
• Strong collaboration and communication skills.
• Ability to prioritize and execute responsibilities independently with minimal oversight.
• Demonstrates strong problem‑solving skills and takes proactive initiative when addressing technical challenges.

Separate yourself:
Preferred Qualifications

• Degree in Information Security, Cyber Security, Computer Science, or related field is highly desirable.
• Advanced training in specialized fields within Cyber Security, or professional certifications such as Security+, Certified Information Systems Security Professional (CISSP), GIAC Certified Forensic Analyst (GCFA), Microsoft SC-200, Splunk Core Certified User (SCCU), or similar is highly desirable.