Protective Intelligence Analyst- OSINT Monitoring and Triage

Vanguard; Malvern (Chester County); Hybrid; USD 80,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Vanguard in Malvern, PA is seeking a Protective Intelligence Analyst to monitor and triage alerts, manage intake queues, and support case management and intelligence production. You will rotate through triage and monitoring, escalate as needed, and contribute to analytic judgments for final products.

The role emphasizes strong OSINT skills, high-volume queue experience, and clear briefing of senior leaders.

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• 3+ years in intelligence analysis, GSOC/watch operations, journalism/research, or military/law-enforcement analysis.
• Ability to manage a high-volume queue with consistent, accurate decisions.
• Strong OSINT skills to locate, verify, and assess information across sources.
• Comfort with reading concerning content professionally and escalating appropriately.
• Excellent written and verbal communication skills, including briefing senior leaders.
• Ability to think critically with incomplete or conflicting information.

Responsibilities

• Manage daily alert and intake queues and route appropriately.
• Triage inbound items against threat screening criteria; disposition as unfounded or open cases with rationale.
• Provide monitoring coverage during travel and events, escalating as needed.
• Maintain watchlist hygiene and refine OSINT feeds for reliable threat ID.
• Maintain protective intelligence trackers/metrics and dashboard integrity.
• Draft weekly intelligence summary; synthesize activity and trends for decision-ready reporting.
• Process intake acknowledgements and maintain records-handling standards.

Skills

OSINT analysis

Threat monitoring

Decision documentation

Critical thinking

High-volume queue management

Team collaboration

Communication (briefing)

Education

Bachelor's degree in criminal justice or related field

Tools

Threat intelligence platforms

Case management platforms

Job description

Monitoring & Triage

• Manage daily alert and intake queues: vendor alerting feeds, the program's intake channels, executive-assistant and partner referrals, and regional intelligence routing.
• Triage inbound items against the program's established threat screening criteria; disposition items as unfounded with documented rationale or open cases for investigation.
• Provide dedicated monitoring coverage during executive travel and event windows, assessing emerging developments in real time and escalating per defined criteria.
• Maintain watchlist hygiene and help fine tune OSINT feeds to ensure reliable threat identification.

Case Management & Intelligence Production

• Maintain key protective intelligence trackers/metrics: request log, alert log, case entries, product IDs, and dashboard integrity.
• Conduct OSINT collection and analysis for protective intelligence assessments, documenting sources and findings and contributing analytic judgments to final products.
• Draft the program's weekly intelligence summary, synthesizing alert activity, case developments, and emerging threat trends into concise, decision-ready reporting.
• Process intake acknowledgements and maintain records-handling standards for intake channels.

Team Model - Primary Focus, Universal Capability

Triage and monitoring is the primary focus of this role, not an exclusive lane. Every Protective Intelligence Analyst trains to produce the program's core assessment products to standard, rotates through triage and monitoring coverage, and serves as designated backup for at least one other product line, so the team carries no single points of failure.

Cross-train teammates in triage and monitoring, maintain current proficiency in teammates' specialties, and participate in the program's dual-review and after-action practices.

Required Qualifications

• Bachelor's degree in criminal justice, intelligence studies, security studies, psychology, or a related field (or equivalent experience).
• Minimum of three years of related experience in a field such as intelligence analysis, GSOC/watch operations, journalism/research, or military/law-enforcement analysis.
• Demonstrated ability to work a high-volume queue with consistency, accuracy, and documented decisions.
• Strong OSINT skills, including the ability to locate, verify, and assess the credibility of information across open sources.
• Comfort with reading concerning or threatening content professionally and escalating appropriately.
• High ethical standards and discretion when handling sensitive executive and corporate information.
• Excellent written and verbal communication skills, including the ability to brief senior leaders clearly and calmly under time pressure.
• Proven ability to think critically and assess incomplete, ambiguous, or conflicting information.

Preferred Qualifications

• Hands-on experience with threat intelligence, alerting, or case management platforms.
• Formal training or applied experience in threat assessment, targeted violence prevention, or intelligence analysis.
• ATAP membership, with active interest or progress toward obtaining the Certified Threat Manager (CTM) designation.

Special Factors

• Participation in an on-call rotation for after-hours escalation support as the program matures.
• Early-morning queue coverage; occasional evening and weekend surge coverage during executive travel windows.
• Occasional domestic travel ( Special Factors

Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission-we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.