Note: The job is a remote job and is open to candidates in USA. JLL is hiring a Senior Threat Intelligence Analyst to support its Threat Intelligence Program across the intelligence cycle. The role produces stakeholder-focused assessments and briefings, partners with Cyber Defense and engineering on mitigations and detection, and helps evolve intelligence requirements, architecture, and workflows.
Responsibilities
- Operate across all phases of the intelligence cycle, from requirements through dissemination, exercising sound judgment on scope and priority as new threats emerge
- Take loosely scoped questions and add the bounds yourself, frame the problem, define what "answered" looks like, and drive it to a conclusion that serves a real stakeholder, not just closes the request
- Produce intelligence calibrated to its audience, from engineers to executives, with a clear read on who the customer is and what decision they need to make
- Partner with Cyber Defense and engineering as a technical peer to translate intelligence into mitigation and detection strategies
- Help guide our intel-architecture requirements, working with engineers to shape the tooling, automation, and data flows that support the team, without needing to be the engineer yourself
- Help shape and evolve our Priority Intelligence Requirements and Collection Requirements as the threat landscape shifts
- Prepare and deliver briefings, after-action reports, and program metrics to technical and executive audiences
Skills
- 5+ years in cybersecurity, with at least 3 in a dedicated threat intelligence role
- Meaningful experience working in, on, or alongside operational security teams such as threat hunt, SOC/IR, or detection engineering, either supporting them in an intelligence capacity or handling and applying intelligence directly while serving in one of those roles
- A demonstrated ability to bring structure to ambiguous problems and drive them to a customer-focused resolution
- A working command of AI in an analytic context: its strengths, its failure modes, and how to codify analyst judgment and discipline into repeatable tooling and workflows
- An understanding of the adversary ecosystem, how different threat groups are structured and how they interplay, and of adversary tradecraft: how campaigns are executed, and where along the attack chain defenders have opportunities to act
- Grounding in intelligence discipline: how to gauge source fidelity, how to determine relevance and actionability, what timeliness means, and how to ingest and interpret intel reporting from different vendors and sources
- Excellent briefing skills, in person and virtual, tailored to audiences of varying technical depth
- Working knowledge of EDR, SIEM, TIP, IPS, and WAF, with experience building intelligence automation into tooling
- Familiarity with frameworks such as NIST 800-53, ISO 27001, MITRE ATT&CK, and CIS
- Candidates must be authorized to work in the United States without sponsorship
Benefits
- 401(k) plan with matching company contributions
- Comprehensive Medical, Dental & Vision Care
- Paid parental leave at 100% of salary
- Paid Time Off and Company Holidays
- Flexible and Remote Work Arrangements may be available
- Early access to earned wages through Daily Pay
Company Overview