Senior Threat Intelligence Analyst (Remote)

JLL; Chicago (IL); Remote; USD 170,000 - 200,000; Full time

Benefits offered by this job

401(k) plan

Medical/Dental/Vision

Parental leave

Paid time off

Flexible/Remote work

Job summary

JLL is seeking a Senior Threat Intelligence Analyst to execute across the intelligence cycle in a primarily remote capacity. You will deliver concise intelligence to engineers, executives, and stakeholders while collaborating with Cyber Defense and engineering teams.

The role requires depth in threat intelligence, experience with security tooling, and strong briefing skills to inform risk decisions. A proactive, structured approach will help shape intel architecture and defense strategies.

Qualifications

• 5+ years in cybersecurity, with at least 3 in a dedicated threat intelligence role.
• Experience working in, on, or alongside operational security teams such as threat hunt, SOC/IR, or detection engineering, either supporting them in an intelligence capacity or handling and applying intelligence directly while serving in one of those roles.
• Ability to bring structure to ambiguous problems and drive them to a customer-focused resolution.
• Working knowledge of AI in an analytic context: its strengths, its failure modes, and how to codify analyst judgment and discipline into repeatable tooling and workflows.
• Understanding of the adversary ecosystem, how different threat groups are structured and how they interplay, and of adversary tradecraft: how campaigns are executed, and where along the attack chain defenders have opportunities to act.
• Grounding in intelligence discipline: how to gauge source fidelity, how to determine relevance and actionability, what timeliness means, and how to ingest and interpret intel reporting from different vendors and sources.
• Excellent briefing skills, in person and virtual, tailored to audiences of varying technical depth.
• Working knowledge of EDR, SIEM, TIP, IPS, and WAF, with experience building intelligence automation into tooling.
• Familiarity with frameworks such as NIST 800-53, ISO 27001, MITRE ATT&CK, and CIS.

Responsibilities

• Operate across all phases of the intelligence cycle, from requirements through dissemination, exercising sound judgment on scope and priority as new threats emerge.
• Take loosely scoped questions and add the bounds yourself, frame the problem, define what "answered" looks like, and drive it to a conclusion that serves a real stakeholder, not just closes the request.
• Produce intelligence calibrated to its audience, from engineers to executives, with a clear read on who the customer is and what decision they need to make.
• Partner with Cyber Defense and engineering as a technical peer to translate intelligence into mitigation and detection strategies.
• Help guide our intel-architecture requirements, working with engineers to shape the tooling, automation, and data flows that support the team, without needing to be the engineer yourself.
• Help shape and evolve our Priority Intelligence Requirements and Collection Requirements as the threat landscape shifts.
• Prepare and deliver briefings, after-action reports, and program metrics to technical and executive audiences.

Skills

Cybersecurity experience

Threat intelligence collaboration

Problem solving

AI in analytics

Threat landscape understanding

Intelligence discipline

Briefing skills

NIST 800-53

ISO 27001

MITRE ATT&CK

CIS

Tools

EDR

SIEM

TIP

IPS

WAF

Job description

JLL is seeking a Senior Threat Intelligence Analyst to execute across the intelligence cycle in a primarily remote capacity. You will deliver concise intelligence to engineers, executives, and stakeholders while collaborating with Cyber Defense and engineering teams.

The role requires depth in threat intelligence, experience with security tooling, and strong briefing skills to inform risk decisions. A proactive, structured approach will help shape intel architecture and defense strategies.