Threat Intel Analyst

Swoon; Westmont (IL); On-site; USD 130,000 - 170,000; Full time

Job summary

Swoon in Arlington Heights, IL is seeking an experienced Senior Cyber Threat Intelligence Analyst to support an enterprise Cyber Intelligence program.

You will identify, analyze, and report cyber threats, support incident response investigations, and deliver actionable intelligence to security teams. Evening and weekend hours are required, with potential after-hours availability.

Qualifications

• 7–10 years of experience in Cyber Threat Intelligence or closely related intelligence functions.
• Strong experience with OSINT collection, threat actor analysis, and cyber threat research.
• Knowledge of attacker TTPs and cybersecurity threat analysis methodologies.
• Experience supporting SOC/CSOC operations or incident response investigations.
• Ability to independently investigate threats and develop actionable intelligence reports.
• Strong analytical, troubleshooting, and communication skills.
• Availability to support evening, weekend, and occasional after-hours incidents.

Responsibilities

• Collect and analyze cyber threat intelligence from OSINT, commercial, and confidential sources.
• Research emerging threats, threat actors, vulnerabilities, and TTPs.
• Develop cyber threat intelligence reports and communicate findings to technical and nontechnical stakeholders.
• Support incident response investigations through threat research and analysis.
• Collaborate with CSOC teams to investigate escalated security incidents and recommend actions.
• Monitor emerging threats and elevate critical findings to cybersecurity teams.
• Provide timely intelligence and support during urgent cybersecurity incidents.

Skills

OSINT collection

Threat actor analysis

Cyber threat research

Analytical thinking

Communication skills

Independent investigation

Evening/weekend availability

Tools

MITRE ATT&CK

Threat intelligence platforms

Job description

Location: Arlington Heights, IL (Onsite; potential flexibility)

Contract Duration: Through January 8, 2027

Schedule: Evening and weekend shifts

Openings: 2

Position Overview

We are seeking an experienced Senior Cyber Threat Intelligence Analyst to support an enterprise Cyber Intelligence program.

This role focuses on identifying, analyzing, and reporting cyber threats, supporting incident response investigations, and providing actionable intelligence to security teams. The position requires independent investigation and coordination during evening and weekend hours.

Key Responsibilities

• Collect and analyze cyber threat intelligence from open-source (OSINT), commercial, and confidential sources.
• Research emerging threats, threat actors, vulnerabilities, and tactics, techniques, and procedures (TTPs).
• Develop cyber threat intelligence reports and communicate findings to technical and nontechnical stakeholders.
• Support incident response investigations through threat research, analysis, and technical expertise.
• Collaborate with CSOC teams to investigate escalated security incidents and recommend appropriate actions.
• Monitor emerging threats and elevate critical findings to cybersecurity teams.
• Provide timely intelligence and support during urgent cybersecurity incidents.

Required Qualifications

• 7–10 years of experience in Cyber Threat Intelligence or closely related intelligence functions.
• Strong experience with OSINT collection, threat actor analysis, and cyber threat research.
• Knowledge of attacker TTPs and cybersecurity threat analysis methodologies.
• Experience supporting SOC/CSOC operations or incident response investigations.
• Ability to independently investigate threats and develop actionable intelligence reports.
• Strong analytical, troubleshooting, and communication skills.
• Availability to support evening, weekend, and occasional after-hours incidents.

Preferred Qualifications

• Experience with MITRE ATT&CK and threat intelligence platforms.
• Familiarity with commercial intelligence sources and cybersecurity monitoring tools.
• Experience supporting enterprise security operations and incident response.
• Background in tactical and strategic cyber intelligence reporting.

Work Schedule

The team is expanding coverage beyond standard business hours.

• Weekday Evenings: 4:00 PM – 12:00 AM
• After-Hours: Availability for urgent CSOC escalations when needed.
• The hiring team is flexible in dividing these coverage windows between the two analysts. Candidates may primarily cover weekday evenings, weekends, or a combination.