Insider Risk Technical Analyst

JLL; Chicago (IL); On-site; USD 90,000 - 140,000; Full time

Job summary

JLL is seeking an Insider Risk Technical Analyst to support its global investigations team. The role triages escalations from internal security groups, logs sources such as DLP and SIEM, and helps identify, document, and mitigate insider threats across the organization.

The ideal candidate has hands-on experience with DLP, UEBA, SIEM, EDR, and eDiscovery tools, plus familiarity with digital forensics, investigative analysis, and risk mitigation.

Qualifications

• Degree in Information Security, CyberSecurity, Computer Science, or related field is highly desirable.

Responsibilities

• Evaluate escalations from security teams, validate materials, and collect information to determine handoff to investigations team.
• Support Global Insider Risk investigators by compiling evidence from multiple sources and consolidating findings into insider risk cases.
• Document findings and prepare materials for escalation to investigations team or for alert closure decisions.
• Partner with internal security teams to refine and strengthen the organization’s overall security posture.
• Perform triage of recent user activities and coordinate findings with relevant stakeholders.
• Analyze logs from DLP, SIEM, EDR, and other security platforms in support of the Insider Risk Program.

Skills

DLP solutions

UEBA

SIEM

eDiscovery solutions

Digital Forensics

Investigation analysis

Scripting languages

Education

Information Security or CS degree

Tools

SIEM platforms

DLP solutions

XDR

eDiscovery tools

Job description

Insider Risk – Technical Analyst

JLL is seeking an Insider Risk Technical Analyst to support our global investigations team. This position plays a critical role in identifying, reporting, and mitigating potential insider threats across the organization by triaging escalations from multiple internal security teams and logging sources, including DLP, SOC, and other insider-specific technical data.

The successful candidate will bring a strong technical background with proven analytic capabilities, excellent communication and interpersonal skills, and hands‑on familiarity with DLP, UEBA, and other user‑facing information security tools. Experience with investigative analysis, digital forensics, security monitoring, and risk mitigation is essential. Familiarity with scripting languages and SIEM applications is desirable.

Primary Responsibilities

• Evaluate escalations from security teams, validate supporting materials, and collect additional information to determine appropriate handoff to the investigations team.
• Support Global Insider Risk investigators by compiling evidence from multiple sources and consolidating findings into comprehensive insider risk cases.
• Document findings and prepare materials for escalation to the investigations team or support alert closure decisions.
• Partner with internal security teams to refine and strengthen the organization's overall security posture.
• Perform triage of recent user activities and coordinate findings with relevant stakeholders.
• Analyze logs from DLP, SIEM, EDR, and other security platforms in support of the Insider Risk Program.

Sound like you? It’s worth knowing what an ideal candidate has to offer.

• 3+ years prior experience working in an Insider Threat team, SOC, Threat Hunt/ Intel, Digital Forensics and Incident Response, Cyber Risk Management or similar teams.
• Hands‑on experience with SIEM platforms, DLP solutions, XDR and eDiscovery solutions.
• Strong collaboration and communication skills.
• Ability to prioritize and execute responsibilities independently with minimal oversight.
• Demonstrates strong problem‑solving skills and takes proactive initiative when addressing technical challenges.

Separate yourself: Preferred Qualifications

• Degree in Information Security, CyberSecurity, Computer Science, or related field is highly desirable.
• Advanced training in specialized fields within CyberSecurity, or professional certifications such as Security+, Certified Information Systems Security Professional (CISSP), GIAC Certified Forensic Analyst (GCFA), Microsoft SC-200, Splunk Core Certified User (SCCU), or similar is highly desirable.