Senior Threat Intelligence Analyst

JLL; Chicago (IL); Remote; USD 170,000 - 200,000; Full time

Benefits offered by this job

401(k) plan

Medical/Dental/Vision

Parental leave

Paid time off

Flexible/Remote work

Job summary

JLL is seeking a Senior Threat Intelligence Analyst to execute across the intelligence cycle in a primarily remote capacity. You will deliver concise intelligence to engineers, executives, and stakeholders while collaborating with Cyber Defense and engineering teams.

The role requires depth in threat intelligence, experience with security tooling, and strong briefing skills to inform risk decisions. A proactive, structured approach will help shape intel architecture and defense strategies.

Qualifications

• 5+ years in cybersecurity, with at least 3 in a dedicated threat intelligence role.
• Experience working in, on, or alongside operational security teams such as threat hunt, SOC/IR, or detection engineering, either supporting them in an intelligence capacity or handling and applying intelligence directly while serving in one of those roles.
• Ability to bring structure to ambiguous problems and drive them to a customer-focused resolution.
• Working knowledge of AI in an analytic context: its strengths, its failure modes, and how to codify analyst judgment and discipline into repeatable tooling and workflows.
• Understanding of the adversary ecosystem, how different threat groups are structured and how they interplay, and of adversary tradecraft: how campaigns are executed, and where along the attack chain defenders have opportunities to act.
• Grounding in intelligence discipline: how to gauge source fidelity, how to determine relevance and actionability, what timeliness means, and how to ingest and interpret intel reporting from different vendors and sources.
• Excellent briefing skills, in person and virtual, tailored to audiences of varying technical depth.
• Working knowledge of EDR, SIEM, TIP, IPS, and WAF, with experience building intelligence automation into tooling.
• Familiarity with frameworks such as NIST 800-53, ISO 27001, MITRE ATT&CK, and CIS.

Responsibilities

• Operate across all phases of the intelligence cycle, from requirements through dissemination, exercising sound judgment on scope and priority as new threats emerge.
• Take loosely scoped questions and add the bounds yourself, frame the problem, define what "answered" looks like, and drive it to a conclusion that serves a real stakeholder, not just closes the request.
• Produce intelligence calibrated to its audience, from engineers to executives, with a clear read on who the customer is and what decision they need to make.
• Partner with Cyber Defense and engineering as a technical peer to translate intelligence into mitigation and detection strategies.
• Help guide our intel-architecture requirements, working with engineers to shape the tooling, automation, and data flows that support the team, without needing to be the engineer yourself.
• Help shape and evolve our Priority Intelligence Requirements and Collection Requirements as the threat landscape shifts.
• Prepare and deliver briefings, after-action reports, and program metrics to technical and executive audiences.

Skills

Cybersecurity experience

Threat intelligence collaboration

Problem solving

AI in analytics

Threat landscape understanding

Intelligence discipline

Briefing skills

NIST 800-53

ISO 27001

MITRE ATT&CK

CIS

Tools

EDR

SIEM

TIP

IPS

WAF

Job description

Find your next move at JLL and build a fulfilling career

At JLL, we value what makes you unique, and we’re committed to give you the opportunity, knowledge and tools to own your success. Explore opportunities to advance your career from within, whether you’re looking to move up, broaden your experience or deepen your expertise.

About JLL

We’re JLL—a leading professional services and investment management firm specializing in real estate. We have operations in over 80 countries and a workforce of over 91,000 individuals around the world who help real estate owners, occupiers, and investors achieve their business ambitions. As a global Fortune 500 company, we also have an inherent responsibility to drive sustainability and corporate social responsibility. That’s why we’re committed to our purpose to shape the future of real estate for a better world. We’re using the most advanced technology to create rewarding opportunities, amazing spaces, and sustainable real estate solutions for our clients, our people, and our communities.

Senior Threat Intelligence Analyst - Remote

This individual-contributor role sits on JLL's Threat Intelligence Program, working across the full intelligence cycle in close partnership with Cyber Defense, engineering, and business leaders. The role requires ownership: you will take problems from ambiguous starting point to briefed conclusion, and you'll be trusted and expected to operate that way. It demands both technical depth and strategic sense, and the judgment to know which the moment calls for.

We view threat intelligence as, at its core, rigorous analytic tradecraft, the discipline of reasoning under uncertainty, quickly and always in service of a stakeholder. We are an actionable support system, and our job is to drive the efficient allocation of resources against the threats that are relevant and timely to JLL. That demands the full range of analytic discipline, source vetting, calibrated confidence, and clear reasoning among them so that what we hand a stakeholder is a defensible assessment, not a repeated claim.

Primary Responsibilities

• Operate across all phases of the intelligence cycle, from requirements through dissemination, exercising sound judgment on scope and priority as new threats emerge.
• Take loosely scoped questions and add the bounds yourself, frame the problem, define what "answered" looks like, and drive it to a conclusion that serves a real stakeholder, not just closes the request.
• Produce intelligence calibrated to its audience, from engineers to executives, with a clear read on who the customer is and what decision they need to make.
• Partner with Cyber Defense and engineering as a technical peer to translate intelligence into mitigation and detection strategies.
• Help guide our intel-architecture requirements, working with engineers to shape the tooling, automation, and data flows that support the team, without needing to be the engineer yourself.
• Help shape and evolve our Priority Intelligence Requirements and Collection Requirements as the threat landscape shifts.
• Prepare and deliver briefings, after-action reports, and program metrics to technical and executive audiences.

What An Ideal Candidate Offers

• 5+ years in cybersecurity, with at least 3 in a dedicated threat intelligence role.
• Meaningful experience working in, on, or alongside operational security teams such as threat hunt, SOC/IR, or detection engineering, either supporting them in an intelligence capacity or handling and applying intelligence directly while serving in one of those roles.
• A demonstrated ability to bring structure to ambiguous problems and drive them to a customer-focused resolution.
• A working command of AI in an analytic context: its strengths, its failure modes, and how to codify analyst judgment and discipline into repeatable tooling and workflows.
• An understanding of the adversary ecosystem, how different threat groups are structured and how they interplay, and of adversary tradecraft: how campaigns are executed, and where along the attack chain defenders have opportunities to act.
• Grounding in intelligence discipline: how to gauge source fidelity, how to determine relevance and actionability, what timeliness means, and how to ingest and interpret intel reporting from different vendors and sources.
• Excellent briefing skills, in person and virtual, tailored to audiences of varying technical depth.
• Working knowledge of EDR, SIEM, TIP, IPS, and WAF, with experience building intelligence automation into tooling.
• Familiarity with frameworks such as NIST 800-53, ISO 27001, MITRE ATT&CK, and CIS.

Estimated compensation for this position is:

170,000.00 – 200,000.00 USD

Location:

Remote –Chicago, IL

Personalized benefits that support personal well-being and growth:

• 401(k) plan with matching company contributions
• Comprehensive Medical, Dental & Vision Care
• Paid parental leave at 100% of salary
• Paid Time Off and Company Holidays
• Flexible and Remote Work Arrangements may be available

JLL Privacy Notice

Jones Lang LaSalle (JLL), together with its subsidiaries and affiliates, is a leading global provider of real estate and investment management services. We take our responsibility to protect the personal information provided to us seriously. Generally the personal information we collect from you are for the purposes of processing in connection with JLL’s recruitment process. We endeavor to keep your personal information secure with appropriate level of security and keep for as long as we need it for legitimate business or legal reasons. We will then delete it safely and securely.

For more information about how JLL processes your personal data, please view our Candidate Privacy Statement.

For additional details please see our career site pages for each country.

For candidates in the United States, please see a full copy of our Equal Employment Opportunity and Aff