Threat Investigation Analyst

This job was posted by https://illinoisjoblink.illinois.gov : For more information, please see: https://illinoisjoblink.illinois.gov/jobs/13766895 Job ID 2026-5101 The Threat Investigation Analyst is a key member of the Threat Operations Team and serves as a first responder to cybersecurity incidents. This role is responsible for triaging, investigating, and responding to security alerts to protect customer environments. Analysts evaluate real-world logs, network traffic, and security artifacts to determine malicious versus benign activity and communicate findings clearly to both technical and non-technical stakeholders. Schedule: Friday, Saturday, Sunday and Monday | 4x10 (11:00 PM CST - 9:30 AM CST). This position can be remote, with occasional onsite support required at our Downers Grove, IL headquarters. Training & Onboarding ** New hires will complete a structured onboarding and training period onsite unless they live outside a 50-mile radius of Sentinel Technologies. Training hours will beMonday through Friday, 8:30 AM CST 5:00 PM CST**and will continue until the employee is prepared to transition to their assigned shift. Preparedness will be determined through regular performance reviews focusing on readiness to operate independently in the position. During onboarding, employees will: - Work closely with their manager, team leads, and senior analysts. - Shadow live security investigations and incident response activities. - Learn customer environments, security tools, workflows, and response procedures. - Develop proficiency in investigation, escalation, documentation, and communication processes. Qualifications 1+ years of experience in a Security Operations role (SOC, Incident Response, Threat Intel, Malware Analysis, IDS/IPS, etc.) preferred Required minimum certifications: CompTIA Security+ Experience with SIEM platforms and security investigations Experience performing daily system monitoring and health checks for various security products Confident triaging alerts and reports of incidents Familiarity with network, endpoint, and host-based security telemetry Understanding of common and emerging attack techniques Understanding basic network protocols and traffic flow in an enterprise environment Strong attention to detail and documentation accuracy The ability to communicate clearly with verbal and written skills Must be able to meet and uphold CJIS requirements The candidate must have a car, as this position requires travel between location and the transportation of equipment []{style="font-size: 12pt; font-family: calibri "}