Threat Intel Analyst

Location: Arlington Heights, IL (Onsite; potential flexibility)Contract Duration: Through January 8, 2027Schedule: Evening and weekend shiftsOpenings: 2Work Authorization: U.S. Citizenship RequiredPosition OverviewWe are seeking an experienced Senior Cyber Threat Intelligence Analyst to support an enterprise Cyber Intelligence program.This role focuses on identifying, analyzing, and reporting cyber threats, supporting incident response investigations, and providing actionable intelligence to security teams. The position requires independent investigation and coordination during evening and weekend hours.Key ResponsibilitiesCollect and analyze cyber threat intelligence from open-source (OSINT), commercial, and confidential sources.Research emerging threats, threat actors, vulnerabilities, and tactics, techniques, and procedures (TTPs).Develop cyber threat intelligence reports and communicate findings to technical and nontechnical stakeholders.Support incident response investigations through threat research, analysis, and technical expertise.Collaborate with CSOC teams to investigate escalated security incidents and recommend appropriate actions.Monitor emerging threats and escalate critical findings to cybersecurity teams.Provide timely intelligence and support during urgent cybersecurity incidents.Required Qualifications7–10 years of experience in Cyber Threat Intelligence or closely related intelligence functions.U.S. citizenship required.Strong experience with OSINT collection, threat actor analysis, and cyber threat research.Knowledge of attacker TTPs and cybersecurity threat analysis methodologies.Experience supporting SOC/CSOC operations or incident response investigations.Ability to independently investigate threats and develop actionable intelligence reports.Strong analytical, troubleshooting, and communication skills.Availability to support evening, weekend, and occasional after-hours incidents.Preferred QualificationsExperience with MITRE ATT&CK and threat intelligence platforms.Familiarity with commercial intelligence sources and cybersecurity monitoring tools.Experience supporting enterprise security operations and incident response.Background in tactical and strategic cyber intelligence reporting.Work ScheduleThe team is expanding coverage beyond standard business hours.Weekday Evenings: 4:00 PM – 12:00 AMWeekends: 8:00 AM – 12:00 AMAfter-Hours: Availability for urgent CSOC escalations when needed.The hiring team is flexible in dividing these coverage windows between the two analysts. Candidates may primarily cover weekday evenings, weekends, or a combination.