Threat Intel Analyst

Location: Arlington Heights, IL (Onsite; potential flexibility)

Contract Duration: Through January 8, 2027

Schedule: Evening and weekend shifts

Openings: 2

We are seeking an experienced Senior Cyber Threat Intelligence Analyst to support an enterprise Cyber Intelligence program.

This role focuses on identifying, analyzing, and reporting cyber threats, supporting incident response investigations, and providing actionable intelligence to security teams. The position requires independent investigation and coordination during evening and weekend hours.

• Collect and analyze cyber threat intelligence from open-source (OSINT), commercial, and confidential sources.
• Research emerging threats, threat actors, vulnerabilities, and tactics, techniques, and procedures (TTPs).
• Develop cyber threat intelligence reports and communicate findings to technical and nontechnical stakeholders.
• Support incident response investigations through threat research, analysis, and technical expertise.
• Collaborate with CSOC teams to investigate escalated security incidents and recommend appropriate actions.
• Monitor emerging threats and elevate critical findings to cybersecurity teams.
• Provide timely intelligence and support during urgent cybersecurity incidents.

• 7–10 years of experience in Cyber Threat Intelligence or closely related intelligence functions.
• Strong experience with OSINT collection, threat actor analysis, and cyber threat research.
• Knowledge of attacker TTPs and cybersecurity threat analysis methodologies.
• Experience supporting SOC/CSOC operations or incident response investigations.
• Ability to independently investigate threats and develop actionable intelligence reports.
• Strong analytical, troubleshooting, and communication skills.
• Availability to support evening, weekend, and occasional after-hours incidents.

• Experience with MITRE ATT&CK and threat intelligence platforms.
• Familiarity with commercial intelligence sources and cybersecurity monitoring tools.
• Experience supporting enterprise security operations and incident response.
• Background in tactical and strategic cyber intelligence reporting.

The team is expanding coverage beyond standard business hours.

• Weekday Evenings: 4:00 PM – 12:00 AM
• After
  - Hours:
  
  Availability for urgent CSOC escalations when needed.
• The hiring team is flexible in dividing these coverage windows between the two analysts. Candidates may primarily cover weekday evenings, weekends, or a combination.