Senior Threat Intelligence Analyst

Senior Threat Intelligence Analyst - Remote This individual-contributor role sits on JLL's Threat Intelligence Program, working across the full intelligence cycle in close partnership with Cyber Defense, engineering, and business leaders. The role requires ownership: you will take problems from ambiguous starting point to briefed conclusion, and you'll be trusted and expected to operate that way. It demands both technical depth and strategic sense, and the judgment to know which the moment calls for. We view threat intelligence as, at its core, rigorous analytic tradecraft, the discipline of reasoning under uncertainty, quickly and always in service of a stakeholder. We are an actionable support system, and our job is to drive the efficient allocation of resources against the threats that are relevant and timely to JLL. That demands the full range of analytic discipline, source vetting, calibrated confidence, and clear reasoning among them so that what we hand a stakeholder is a defensible assessment, not a repeated claim. Primary Responsibilities Operate across all phases of the intelligence cycle, from requirements through dissemination, exercising sound judgment on scope and priority as new threats emerge. Take loosely scoped questions and add the bounds yourself, frame the problem, define what "answered" looks like, and drive it to a conclusion that serves a real stakeholder, not just closes the request. Produce intelligence calibrated to its audience, from engineers to executives, with a clear read on who the customer is and what decision they need to make. Partner with Cyber Defense and engineering as a technical peer to translate intelligence into mitigation and detection strategies. Help guide our intel-architecture requirements, working with engineers to shape the tooling, automation, and data flows that support the team, without needing to be the engineer yourself. Help shape and evolve our Priority Intelligence Requirements and Collection Requirements as the threat landscape shifts. Prepare and deliver briefings, after-action reports, and program metrics to technical and executive audiences. What an ideal candidate offers 5+ years in cybersecurity, with at least 3 in a dedicated threat intelligence role. Meaningful experience working in, on, or alongside operational security teams such as threat hunt, SOC/IR, or detection engineering, either supporting them in an intelligence capacity or handling and applying intelligence directly while serving in one of those roles. A demonstrated ability to bring structure to ambiguous problems and drive them to a customer-focused resolution. A working command of AI in an analytic context: its strengths, its failure modes, and how to codify analyst judgment and discipline into repeatable tooling and workflows. An understanding of the adversary ecosystem, how different threat groups are structured and how they interplay, and of adversary tradecraft: how campaigns are executed, and where along the attack chain defenders have opportunities to act. Grounding in intelligence discipline: how to gauge source fidelity, how to determine relevance and actionability, what timeliness means, and how to ingest and interpret intel reporting from different vendors and sources. Excellent briefing skills, in person and virtual, tailored to audiences of varying technical depth. Working knowledge of EDR, SIEM, TIP, IPS, and WAF, with experience building intelligence automation into tooling. Familiarity with frameworks such as NIST 800-53, ISO 27001, MITRE ATT&CK, and CIS. Estimated compensation for this position is: 170,000.00 – 230,000.00 USD per year This range is an estimate and actual compensation may differ. Final compensation packages are determined by various considerations including but not limited to candidate qualifications, location, market conditions, and internal considerations. Location: Remote –Atlanta, GA, Chicago, IL, Los Angeles, CA, New York, NY, Raleigh, NC, San Francisco, CA, Seattle, WA, Texas - Other If this job description resonates with you, we encourage you to apply, even if you don't meet all the requirements. We're interested in getting to know you and what you bring to the table! Personalized benefits that support personal well-being and growth: 401(k) plan with matching company contributions Comprehensive Medical, Dental & Vision Care Paid parental leave at 100% of salary Paid Time Off and Company Holidays Early access to earned wages through Daily Pay JLL Privacy Notice Jones Lang LaSalle (JLL), together with its subsidiaries and affiliates, is a leading global provider of real estate and investment management services. We take our responsibility to protect the personal information provided to us seriously. Generally the personal information we collect from you are for the purposes of processing in connection with JLL's recruitment process. We endeavour to keep your personal information secure with appropriate level of security and keep for as long as we need it for legitimate business or legal reasons. We will then delete it safely and securely. For more information about how JLL processes your personal data, please view our Candidate Privacy Statement. For additional details please see our career site pages for each country. For candidates in the United States, please see a full copy of our Equal Employment Opportunity policy here. Jones Lang LaSalle ("JLL") is an Equal Opportunity Employer and is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process – including the online application and/or overall selection process – you may email us at View email address on click.appcast.io. This email is only to request an accommodation. Please direct any other general recruiting inquiries to our Contact Us page > I want to work for JLL. Pursuant to the Arizona Civil Rights Act, criminal convictions are not an absolute bar to employment. Pursuant to Illinois Law, applicants are not obligated to disclose sealed or expunged records of conviction or arrest. Pursuant to Columbia, SC ordinance, this position is subject to a background check for any convictions directly related to its duties and responsibilities. Only job-related convictions will be considered and will not automatically disqualify the candidate. Pursuant to the Los Angeles Fair Chance Initiative for Hiring Ordinance, JLL will consider for employment all qualified Applicants, including those with Criminal Histories, in a manner consistent with the requirements of applicable state and local laws, including the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Accepting applications on an ongoing basis until candidate identified. JLL