Threat Intelligence Analyst

NiSource•Columbus, OH

16h•$96,600 - $144,900•Hybrid

About The Position

NiSource Enterprise Security encompasses our Corporate Security, Cybersecurity, Security Compliance, and Operational Technology teams, ensuring collaboration and continuity in securing our critical business operations and creating a safe working environment for all. Within the broader security organization, the Threat Intelligence Analysts provide a critical bridge between security theory and practice, offering insights that shape our security strategies. The Cybersecurity and Physical Threat Intelligence Team plays a pivotal role in identifying and analyzing cyber and physical threats, emerging risks, and industry developments. Our team partners closely with Cybersecurity Incident Response, Physical Security Operations, Cyber Risk Management, and other stakeholders to detect and mitigate potential threats to the business across our digital and physical environments. As cyber and physical threats continue to converge, our fused intelligence program drives cohesion, a proactive approach, and strengthens information-sharing practices across the Enterprise Security department. As a Threat Intelligence Analyst, you will follow the intelligence lifecycle to collect, analyze, and interpret threat data, build tactical and strategic intelligence products based on documented trends, and inform security protocols with actionable intelligence. You will have the opportunity to support and further develop our protective intelligence and travel security programs. You will partner with a range of stakeholders across Enterprise Security to deliver intelligence-led insights for company events, travel, incident response, investigations, and geopolitical trends. You will also play a key role in improving intelligence processes, reporting, and automation capabilities while building strong relationships across the organization and with external partners.

Requirements

Bachelor’s degree or equivalent experience
4+ years of experience in Threat Intelligence, Security Operations, Incident Response, Intelligence Analysis, or related fields in the public or private sectors
4+ years of experience applying the intelligence lifecycle, analytical frameworks such as structured analytic techniques (SATs), and conducting research with OSINT, HUMINT, SIGINT, or GEOINT methodologies
4+ years of experience producing all-source intelligence reports, briefings, and assessments for both technical and senior business audiences
4+ years of experience working with intelligence platforms and OSINT tools such as Dataminr, Google Threat Intelligence, Flashpoint, International SOS, Skopenow, and a range of social media platforms.
Proficiency in Word, SharePoint, Excel, Power BI, and AI models for data analytics and tracking

Nice To Haves

Advanced degree or relevant industry certifications
5+ years in a strategic Threat Intelligence role with experience developing a wide array of analytic intelligence products for senior leaders and iterating on intelligence processes, methodologies, and program KPIs
Excellent writing, verbal, and interpersonal skills
Ability to adapt to a fast-paced and innovative work environment
Strong analytical, problem-solving, and communication skills, with the ability to translate complex topics into clear and actionable insights
Experience with the utility or energy industry
Experience with AI and ML technologies in security

Responsibilities

Collect and analyze open-source, proprietary, and partner intelligence related to geopolitical risks, critical infrastructure and industry developments, threat actors, and physical security concerns
Produce strategic and tactical intelligence products, including threat assessments, executive briefings, and risk forecasts, and ensure intelligence reports are relevant, timely, and aligned with business requirements
Support executive-focused protective intelligence and travel security programs by tracking upcoming travel and events, producing travel briefings, and providing real-time updates or assistance
Collaborate with Cybersecurity and Corporate Security teams on incident response and investigations. Compile available intelligence into timely, high-confidence products
Continue to update key stakeholders throughout a security or crisis event to provide essential information, translate technical information for a business audience, and support overall business response and recovery efforts
Assist in developing new intelligence reporting thresholds, templates, products, and data collection mechanisms
Develop and maintain intelligence metrics, dashboards, investigative records, and KPIs to ensure that team activities are measurable and aligned to business objectives
Utilize intelligence tools and platforms such as Dataminr, Google Threat Intelligence, Skopenow, TLO, other OSINT capabilities to support routine monitoring, investigations, and analysis
Collaborate with internal and external partners to enhance information sharing and benchmarking across physical and cyber disciplines
Participate periodically in procedural audits, analytic reviews, lessons-learned sessions, or after-action reports
Continuously refine sourcing strategies and help evaluate technology needs within the changing AI and information security environment