Threat Investigation Analyst

Threat Investigation Analyst Job ID 2026-5101 Type Regular FTE Client & Job Location : Location US-IL-Downers Grove Responsibilities The Threat Investigation Analyst is a key member of the Threat Operations Team and serves as a first responder to cybersecurity incidents. This role is responsible for triaging, investigating, and responding to security alerts to protect customer environments. Analysts evaluate real-world logs, network traffic, and security artifacts to determine malicious versus benign activity and communicate findings clearly to both technical and non-technical stakeholders. Schedule: Friday, Saturday, Sunday and Monday | 4x10 (11:00 PM CST - 9:30 AM CST) . This position can be remote, with occasional onsite support required at our Downers Grove, IL headquarters. Training & Onboarding New hires will complete a structured onboarding and training period onsite unless they live outside a 50-mile radius of Sentinel Technologies. Training hours will be Monday through Friday, 8:30 AM CST – 5:00 PM CST and will continue until the employee is prepared to transition to their assigned shift. Preparedness will be determined through regular performance reviews focusing on readiness to operate independently in the position. During onboarding, employees will: Work closely with their manager, team leads, and senior analysts. Shadow live security investigations and incident response activities. Learn customer environments, security tools, workflows, and response procedures. Develop proficiency in investigation, escalation, documentation, and communication processes. Qualifications 1+ years of experience in a Security Operations role (SOC, Incident Response, Threat Intel, Malware Analysis, IDS/IPS, etc.) preferred Required minimum certifications: CompTIA Security+ Experience with SIEM platforms and security investigations Experience performing daily system monitoring and health checks for various security products Confident triaging alerts and reports of incidents Familiarity with network, endpoint, and host-based security telemetry Understanding of common and emerging attack techniques Understanding basic network protocols and traffic flow in an enterprise environment Strong attention to detail and documentation accuracy The ability to communicate clearly with verbal and written skills Must be able to meet and uphold CJIS requirements The candidate must have a car, as this position requires travel between location and the transportation of equipment A valid driver’s license and proof of vehicle insurance will be required Legally authorized to work in the US without sponsorship Must demonstrate a “can-do” attitude We focus on candidates that display our “ACE” factor – Attitude, Compassion, and Enthusiasm to deliver quality solutions with exceptional customer service. Compensation: $60,000-$65,000 What you get: We offer an energetic work environment with many corporate culture amenities, competitive salary, and rich benefit plan including: Medical, Dental, Vision, 401K, 529, Life Insurance, Income Protection Short and Long-Term Disability, Medical and Child/Elder Care, Flexible Spending Account Plans, Family Planning Benefits, Financial Education, Identity Theft Protection and Assistance, Legal Services, Employee Assistance Program, Two weeks’ vacation, additional paid time-off for Personal and Sick, certification and hands-on training, and employee discount for product services and entertainment. Overview MOTIVATED…..make IT happen! Sentinel Technologies, Inc. has been rated a top workplace every year since 2012! About Us: Sentinel delivers solutions that can efficiently address a range of IT needs – from security, to communications, to systems & networks, to software applications, to cloud and managed services; all of which include our staffing solutions for our clients. Since 1982, Sentinel has grown from providing technology maintenance services to our current standing as one of the leading IT services and solutions provider in the US. We have aligned with many of today’s global technology leaders including Cisco, Dell, VMware and Microsoft. Sentinel services customers both nationally and internationally with primary support operating centers in Downers Grove (HQ), Chicago, and Springfield, IL; Phoenix, AZ.; Lansing, and Grand Rapids, MI; Milwaukee, WI; and Denver, CO. If you are MOTIVATED… you can make IT happen at Sentinel. Our commitment to our employees is to create a work environment that encourages creativity, an entrepreneurial spirit, fosters growth through certification and hands-on training, and values a team-oriented culture with rewards based on impact! If you share our passion about what technology can do and want to be part of a top workplace environment – we’d like to have you join our team. Learn more at www.sentinel.com/careers . As part of Sentinel's employment process, candidates will be required to complete a background check. Only those who meet the minimum requirements will be contacted. No phone calls please. Sentinel is proud to be an equal opportunity employer including disability and veterans. In accordance with Title VII and state regulations, all qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, marital status, pregnancy, genetics, disability, military, veteran status or any other basis protected by law. If you are an individual with a disability and need assistance in applying for a position, please contact SentinelHR1@sentinel.com . The “Know Your Rights” Poster is available here https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf Sentinel EEO Policy Statement is available here. https://www.sentinel.com/about/diversity JFNDNP Options Apply for this job online Apply Share Email this job to a friend Refer Sorry the Share function is not working properly at this moment. Please refresh the page and try again later. Share on your newsfeed Need help finding the right job? We can recommend jobs specifically for you! Click here to get started. Application FAQs Software Powered by ICIMS www.icims.com