Intelligence Analyst

Our people at JLL are shaping the future of real estate for a better world by combining world class services, advisory and technology for our clients. Whether you’ve got deep experience in commercial real estate, skilled trades or technology, or you’re looking to apply your relevant experience to a new industry, join our team as we help shape a brighter way forward.

We have operations in over 80 countries and a workforce of over 91,000 individuals around the world who help real estate owners, occupiers, and investors achieve their business ambitions. As a global Fortune 500 company, we also have an inherent responsibility to drive sustainability and corporate social responsibility. We’re using the most advanced technology to create rewarding opportunities, amazing spaces, and sustainable real estate solutions for our clients, our people, and our communities.

This individual-contributor role sits on JLL's Threat Intelligence Program, working across the full intelligence cycle in close partnership with Cyber Defense, engineering, and business leaders. We view threat intelligence as, at its core, rigorous analytic tradecraft, the discipline of reasoning under uncertainty, quickly and always in service of a stakeholder. That demands the full range of analytic discipline, source vetting, calibrated confidence, and clear reasoning among them so that what we hand a stakeholder is a defensible assessment, not a repeated claim.

Operate across all phases of the intelligence cycle, from requirements through dissemination, exercising sound judgment on scope and priority as new threats emerge.

• Take loosely scoped questions and add the bounds yourself, frame the problem, define what "answered" looks like, and drive it to a conclusion that serves a real stakeholder, not just closes the request.
• Produce intelligence calibrated to its audience, from engineers to executives, with a clear read on who the customer is and what decision they need to make.
• Partner with Cyber Defense and engineering as a technical peer to translate intelligence into mitigation and detection strategies.
• Help guide our intel-architecture requirements, working with engineers to shape the tooling, automation, and data flows that support the team, without needing to be the engineer yourself.
• Help shape and evolve our Priority Intelligence Requirements and Collection Requirements as the threat landscape shifts.
• 5+ years in cybersecurity, with at least 3 in a dedicated threat intelligence role.
• Meaningful experience working in, on, or alongside operational security teams such as threat hunt, SOC/IR, or detection engineering, either supporting them in an intelligence capacity or handling and applying intelligence directly while serving in one of those roles.
• A demonstrated ability to bring structure to ambiguous problems and drive them to a customer-focused resolution.
• An understanding of the adversary ecosystem, how different threat groups are structured and how they interplay, and of adversary tradecraft: how campaigns are executed, and where along the attack chain defenders have opportunities to act.
• Grounding in intelligence discipline: how to gauge source fidelity, how to determine relevance and actionability, what timeliness means, and how to ingest and interpret intel reporting from different vendors and sources.
• Excellent briefing skills, in person and virtual, tailored to audiences of varying technical depth.
• Working knowledge of EDR, SIEM, TIP, IPS, and WAF, with experience building intelligence automation into tooling.

Remote –Chicago, IL

Personalized benefits that support personal well-being and growth:

• Comprehensive Medical, Dental & Vision Care
• Paid Time Off and Company Holidays
• Flexible and…