This job was posted by https://illinoisjoblink.illinois.gov : For more
information, please see:
https://illinoisjoblink.illinois.gov/jobs/13766895
Job ID 2026-5101
The Threat Investigation Analyst is a key member of the Threat
Operations Team and serves as a first responder to cybersecurity
incidents. This role is responsible for triaging, investigating, and
responding to security alerts to protect customer environments. Analysts
evaluate real-world logs, network traffic, and security artifacts to
determine malicious versus benign activity and communicate findings
clearly to both technical and non-technical stakeholders. **Schedule:
Friday, Saturday, Sunday and Monday | 4x10 (11:00 PM CST - 9:30 AM
CST) *. * This position can be remote, with occasional onsite support
required at our Downers Grove, IL headquarters.
Training & Onboarding **
New hires will complete a structured onboarding and training period
onsite unless they live outside a 50-mile radius of Sentinel
Technologies.
Training hours will be**Monday through Friday, 8:30 AM CST 5:00 PM
CST**and will continue until the employee is prepared to transition to
their assigned shift. Preparedness will be determined through regular
performance reviews focusing on readiness to operate independently in
the position.
During onboarding, employees will:
Work closely with their manager, team leads, and senior analysts.
Shadow live security investigations and incident response
activities.
Learn customer environments, security tools, workflows, and response
procedures.
Develop proficiency in investigation, escalation, documentation, and
communication processes.
Qualifications
1+ years of experience in a Security Operations role (SOC, Incident
Response, Threat Intel, Malware Analysis, IDS/IPS, etc.) preferred
Required minimum certifications: CompTIA Security+
Experience with SIEM platforms and security investigations
Experience performing daily system monitoring and health checks for
various security products
Confident triaging alerts and reports of incidents
Familiarity with network, endpoint, and host-based security telemetry
Understanding of common and emerging attack techniques
Understanding basic network protocols and traffic flow in an enterprise
environment
Strong attention to detail and documentation accuracy
The ability to communicate clearly with verbal and written skills
Must be able to meet and uphold CJIS requirements
The candidate must have a car, as this position requires travel between
location and the transportation of equipment
[]{style="font-size: 12pt; font-family: calibri
"}
