Threat Investigation Analyst

Responsibilities

The Threat Investigation Analyst is a key member of the Threat Operations Team and serves as a first responder to cybersecurity incidents. This role is responsible for triaging, investigating, and responding to security alerts to protect customer environments. Analysts evaluate real-world logs, network traffic, and security artifacts to determine malicious versus benign activity and communicate findings clearly to both technical and non-technical stakeholders.

Schedule:
Friday, Saturday, Sunday and Monday | 4x10 (11:00 PM CST - 9:30 AM CST).
This position can be remote, with occasional onsite support required at our Downers Grove, IL headquarters.

Training & Onboarding

New hires will complete a structured onboarding and training period onsite unless they live outside a 50-mile radius of Sentinel Technologies.

Training hours will be
Monday through Friday, 8:30 AM CST – 5:00 PM CST
and will continue until the employee is prepared to transition to their assigned shift. Preparedness will be determined through regular performance reviews focusing on readiness to operate independently in the position.

During onboarding, employees will:

• Work closely with their manager, team leads, and senior analysts.
• Shadow live security investigations and incident response activities.
• Learn customer environments, security tools, workflows, and response procedures.
• Develop proficiency in investigation, escalation, documentation, and communication processes.

• 1+ years of experience in a Security Operations role (SOC, Incident Response, Threat Intel, Malware Analysis, IDS/IPS, etc.) preferred
• Required minimum certifications:
  CompTIA Security+
• Experience with SIEM platforms and security investigations
• Experience performing daily system monitoring and health checks for various security products
• Confident triaging alerts and reports of incidents
• Familiarity with network, endpoint, and host-based security telemetry
• Understanding of common and emerging attack techniques
• Understanding basic network protocols and traffic flow in an enterprise environment
• Strong attention to detail and documentation accuracy
• The ability to communicate clearly with verbal and written skills
• Must be able to meet and uphold CJIS requirements
• The candidate must have a car, as this position requires travel between location and the transportation of equipment
• A valid driver’s license and proof of vehicle insurance will be required
• Legally authorized to work in the US without sponsorship
• Must demonstrate a “can-do” attitude

We focus on candidates that display our “ACE” factor – Attitude, Compassion, and Enthusiasm to deliver quality solutions with exceptional customer service.

Compensation:

$60,000-$65,000

What you get:

We offer an energetic work environment with many corporate culture amenities, competitive salary, and rich benefit plan including:
Medical, Dental, Vision, 401K, 529, Life Insurance, Income Protection Short and Long-Term Disability, Medical and Child/Elder Care, Flexible Spending Account Plans, Family Planning Benefits, Financial Education, Identity Theft Protection and Assistance, Legal Services, Employee Assistance Program, Two weeks’ vacation, additional paid time-off for Personal and Sick, certification and hands-on training, and employee discount for product services and entertainment.

MOTIVATED…..make IT happen!

Sentinel Technologies, Inc. has been rated a top workplace every year since 2012!

About Us:

Sentinel delivers solutions that can efficiently address a range of IT needs – from security, to communications, to systems & networks, to software applications, to cloud and managed services; all of which include our staffing solutions for our clients. Since 1982, Sentinel has grown from providing technology maintenance services to our current standing as one of the leading IT services and solutions provider in the US.

We have aligned with many of today’s global technology leaders including Cisco, Dell, VMware and Microsoft. Sentinel services customers both nationally and internationally with primary support operating centers in Downers Grove (HQ), Chicago, and Springfield, IL;
Phoenix, AZ.;
Lansing, and Grand Rapids, MI;
…