Insider Risk Technical Analyst

JLL•Chicago, IL

9d•$144,000 - $186,000•Remote

About The Position

JLL is seeking an Insider Risk Technical Analyst to support our global investigations team. This position plays a critical role in identifying, reporting, and mitigating potential insider threats across the organization by triaging escalations from multiple internal security teams and logging sources, including DLP, SOC, and other insider-specific technical data. The successful candidate will bring a strong technical background with proven analytic capabilities, excellent communication and interpersonal skills, and hands-on familiarity with DLP, UEBA, and other user-facing information security tools. Experience with investigative analysis, digital forensics, security monitoring, and risk mitigation is essential. Familiarity with scripting languages and SIEM applications is desirable.

Requirements

3+ years prior experience working in an Insider Threat team, SOC, Threat Hunt/ Intel, Digital Forensics and Incident Response, Cyber Risk Management or similar teams.
Hands-on experience with SIEM platforms, DLP solutions, XDR and eDiscovery solutions.
Strong collaboration and communication skills.
Ability to prioritize and execute responsibilities independently with minimal oversight.
Demonstrates strong problem-solving skills and takes proactive initiative when addressing technical challenges.

Nice To Haves

Degree in Information Security, CyberSecurity, Computer Science, or related field is highly desirable.
Advanced training in specialized fields within CyberSecurity, or professional certifications such as Security+, Certified Information Systems Security Professional (CISSP), GIAC Certified Forensic Analyst (GCFA), Microsoft SC-200, Splunk Core Certified User (SCCU), or similar is highly desirable.
Familiarity with scripting languages and SIEM applications is desirable.
Candidates must be authorized to work in the United States without sponsorship.

Responsibilities

Evaluate escalations from security teams, validate supporting materials, and collect additional information to determine appropriate handoff to the investigations team.
Support Global Insider Risk investigators by compiling evidence from multiple sources and consolidating findings into comprehensive insider risk cases.
Document findings and prepare materials for escalation to the investigations team or support alert closure decisions.
Partner with internal security teams to refine and strengthen the organization's overall security posture.
Perform triage of recent user activities and coordinate findings with relevant stakeholders.
Analyze logs from DLP, SIEM, EDR, and other security platforms in support of the Insider Risk Program.