operational intelligence analyst

Wachter

<div><div><p>Wachter is seeking an AI Enablement &amp; Operations Analyst to support our NSP Operations teams by combining strong business operations knowledge with advanced Microsoft Office and AI capabilities. This role will serve as a technical problem-solver, AI adoption specialist, and internal trainer&mdash;helping teams work smarter while guiding Wachter&rsquo;s practical use of Microsoft Copilot and other AI tools.</p>
<p>
This is a hands-on role focused on real operational challenges, not theoretical AI development.</p>
</div>
<h3 class="jobSectionHeader"><b>Key Responsibilities:
</b></h3><div><p><b>Operational &amp; Technical Support</b></p>
<p>
Act as an internal expert for complex Excel, reporting, and data-related issues tied to NSP operations<br>
Analyze operational data and workflows to identify opportunities for automation and efficiency<br>
Build, enhance, and troubleshoot advanced Excel solutions (formulas, Power Query, VBA preferred but not required)</p>
<p><b>
AI &amp; Copilot Enablement</b></p>
<p>
Lead practical usage of Microsoft Copilot across Excel, Word, Outlook, PowerPoint, and Teams<br>
Identify high-value, safe, and realistic AI use cases within NSP Operations<br>
Assist with prompt design, workflow integration, and AI-assisted reporting<br>
Support experimentation and phased adoption of additional AI tools as Wachter&rsquo;s AI ecosystem evolves</p>
<p><b>
Training &amp; Change Enablement</b></p>
<p>
Design and deliver role-based training for operations staff and analysts<br>
Create job aids, examples, and best-practice documentation<br>
Coach team members on effective AI usage rather than simply &ldquo;doing it for them&rdquo;</p>
<p><b>
Cross-Functional Support</b></p>
<p>
Partner with Business Process, IT, and Operations leaders to align AI and tooling with real operational needs<br>
Serve as a translator between business users and technical teams<br>
Help establish responsible AI usage standards and guardrails</p>
</div><h3 class="jobSectionHeader"><b>
Required Skills &amp; Experience:</b></h3><div>
<p>
Strong understanding of business operations (NSP, field operations, logistics, or similar preferred)<br>
Advanced proficiency in Microsoft Excel (Power Query strongly preferred; VBA a plus)<br>
Deep familiarity with Microsoft 365 tools (Excel, Word, PowerPoint, Outlook, Teams)<br>
Hands-on experience using Microsoft Copilot or similar AI productivity tools<br>
Ability to explain technical concepts clearly to non-technical users<br>
Experience delivering training or enablement is highly preferred</p>
<p><b>
Preferences (Not Required)</b></p>
<p>
Exposure to Power BI, Power Automate, or Power Apps<br>
Familiarity with Copilot Studio or low-code automation tools<br>
Prior experience supporting operational or finance-heavy teams<br>
Change management or internal enablement background</p>
</div><div>
<ul><li><h3 class="jobSectionHeader"><b>Benefits Package: Company Paid!</b></h3>
<div><div><ul><li>Medical, Dental, Prescription &amp; Vision Benefits</li>
<li>Life, AD&amp;D, and LTD insurance</li>
<li>Paid Vacation and Holidays</li>
<li>Company-Matched 401(k) and IRA Retirement Savings.</li>
</ul></div></div></li></ul></div><div><div>About:</div>
<div></div>
<div><i>Wachter is a family-owned company since 1930 and we see each employee as a critical piece of the Wachter Family. With over 900 licenses across the country, Wachter serves commercial and industrial clients with the right technologies needed to keep them successful.</i></div>
<div></div>
<div><i>We design, install, and maintain the technologies that keep businesses operating efficiently. Our team of dedicated electricians, engineers, and technicians provides electrical, data, security, communications, and automation services to clients in numerous industries.</i></div><br>
<div></div>
<div></div>
<div>Follow us on Facebook, Instagram, Twitter, and LinkedIn.</div>
<div></div>
<div>We're an equal opportunity employer. All applicants will be considered for employment without attention to age, race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.</div>
</div>
<p>We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</p></div>

Operations Analyst - AI Enablement

Tait Consulting, LLC

<p><b>AI Operations &amp; Investigative Analyst</b></p><p>Mesa, AZ (Hybrid)</p><p><b>Investigations. AI. Operations. Problem Solving.</b></p><p>We&rsquo;re hiring a highly analytical, tech-savvy operator to help scale a fast-growing investigative and AI consulting environment.</p><p>This is not a traditional assistant role.</p><p>We&rsquo;re looking for someone who thrives in fast-moving environments, loves solving operational problems, thinks critically, and can leverage AI tools to improve workflows, investigations, and execution.</p><p>You&rsquo;ll work at the intersection of:</p><ul><li>Investigations</li><li>Legal operations</li><li>AI systems</li><li>Operational strategy</li><li>Workflow optimization</li></ul><p>The ideal candidate is resourceful, detail-oriented, proactive, and comfortable managing multiple moving pieces without constant direction.</p><p>If you enjoy creating structure, improving systems, and figuring things out independently, this role was built for you.</p><p>Pay: $50,000.00 - $70,000.00 per year</p><p>Experience:</p><ul><li>AI: 1 year (Required)</li><li>criminal defense law: 1 year (Preferred)</li></ul><p>Location:</p><ul><li>Mesa, AZ 85215 (Preferred)</li></ul><p>Work Location: Hybrid remote in Mesa, AZ 85215</p>

AI Operations & Investigative Analyst

Columbia Bank

<div><p><b>About the Role:
</b></p><p></p><p>The AML Operations Analyst supports the daily operational components of the Bank&rsquo;s BSA/AML and OFAC compliance programs under the direction of the AML Operations Manager. This role is responsible for executing core AML operational tasks, including OFAC sanctions screening, AML alert processing, CIP support, CTR‑related recordkeeping activities, and other regulatory requirements. The AML Operations Analyst works closely with investigations, compliance, and business partners to ensure accurate, timely, and well‑controlled AML operations.
</p><p></p><ul><li>AML Operations and Compliance Support:
</li><li>Perform day‑to‑day AML operational activities, including OFAC sanctions screening, alert review, CIP support, and regulatory recordkeeping tasks.
</li><li>Review AML and OFAC alerts, conduct required research and documentation, and escalate issues or potential risks in accordance with established procedures.
</li><li>Support CTR‑related processes, including data review, recordkeeping requirements, and exemption‑related activities, as applicable.
</li><li>Monitor CIP reports and conduct follow‑up to resolve missing or incomplete customer identification information.
</li><li>Gather, analyze, and organize AML‑related data to support regulatory compliance and internal oversight.
</li><li>Develop a basic knowledge of bank laws and regulations.
</li><li>Controls, Quality, and Audit Support:
</li><li>Follow established AML operational procedures to ensure consistency, accuracy, and adherence to internal controls.
</li><li>Assist with audits, regulatory exams, and quality reviews by compiling files, reports, and supporting documentation.
</li><li>Identify potential process issues or operational risks and escalate concerns to management.
</li><li>Collaboration and Program Support:
</li><li>Provide operational support to Financial Investigations, Compliance, and other internal partners as needed.
</li><li>Assist with AML‑related training efforts and knowledge‑sharing initiatives as directed by management.
</li><li>Maintain familiarity with Bank policies, procedures, and regulatory guidance related to BSA, AML, OFAC, CIP, and other applicable regulations.
</li><li>Working knowledge of BSA/AML and OFAC regulatory requirements and operational expectations.
</li><li>Experience with AML transaction monitoring systems, case management tools, and OFAC screening platforms.
</li><li>Strong analytical and research skills, including the ability to gather, evaluate, and document information accurately.
</li><li>Ability to follow defined procedures while exercising sound judgment and recognizing when escalation is appropriate.
</li><li>Strong organizational skills with the ability to manage multiple tasks and deadlines effectively.
</li><li>Clear written and verbal communication skills, with the ability to interact professionally across departments.
</li><li>Ability to work independently while contributing effectively within a team environment.
</li><li>Proficiency with Microsoft Office tools and data review activities.
</li><li>Strong commitment to confidentiality, ethical behavior, and regulatory compliance.
</li><li>Demonstrates compliance with all bank regulations for assigned job function and applies to designated job responsibilities &ndash; knowledge may be gained through coursework and on-the-job training. Keeps up to date on regulation changes.
</li><li>Follows all Bank policies and procedures, compliance regulations, and completes all required annual or job-specific training.
</li><li>Maintain a working knowledge of Bank's written policies and procedures regarding Bank Secrecy Act, Regulation CC, Regulation E, Bank Security and other regulations as applicable to this job description.
</li><li>May be asked to coach, mentor, or train others and teach coursework as subject matter expert.
</li><li>Actively learns, demonstrates, and fosters the Columbia corporate culture in all actions and words.
</li><li>Takes personal initiative and is a positive example for others to emulate.
</li><li>Embraces our vision to become &ldquo;Business Bank of Choice&rdquo;
</li><li>May perform other duties as assigned.
</li></ul><p></p><p><b>About You:
</b></p><p></p><ul><li>H.S. Diploma/GED Required
</li><li>Bachelor's Degree in business, business management, criminal justice, accounting, or related field Preferred.
</li><li>2 years of experience supporting BSA/AML, OFAC, or financial crimes operations within a financial institution. Required
</li><li>2 years of exposure to AML operational processes such as sanctions screening, alert handling, CIP/KYC activities, or CTR-related recordkeeping. Preferred
</li><li>Certified Anti-Money Laundering Specialist (CAMS) Or willingness to obtain - 2years. Preferred
</li></ul><p></p><p>The pay range for this role is $25.23 - $33.64.
</p><p></p><p>The pay rate for the selected candidate is dependent upon a variety of non-discriminatory factors including, but not limited to, job-related knowledge, skills, and experience, education, and geographic location. The role may be eligible for performance-based incentive compensation, and those details will be provided during the recruitment process.
</p><p></p><p><b>Primary Location: </b>Ability to work fully onsite at posted location(s).
</p><p></p>6610 SW Cardinal Lane 1st Floor Tigard OR 97224
<p></p><p><b>Our Benefits:
</b></p><p></p><p>We are proud to offer a competitive total rewards package including base wages and comprehensive benefits.<br>
</p><p></p><p>We offer eligible associates comprehensive healthcare coverage (medical, dental, and vision plans), a 401(k)-retirement savings plan with employer match for qualifying associate contributions, an employee assistance program, life insurance, disability insurance, tuition assistance, mental health resources, identity theft protection, legal support, auto and home insurance, pet insurance, access to an online discount marketplace, and paid vacation, sick days, volunteer days, and holidays. Benefit eligibility begins the first day of the month following the date of hire for associates who are regularly scheduled to work at least thirty hours weekly.
</p><p></p><p><b>Our Commitment to Diversity:
</b></p><p></p><p>Columbia Bank is an equal opportunity and affirmative action employer committed to employing, engaging, and developing a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, national origin, religion, sex, age, sexual orientation, gender identity, gender expression, protected veteran status, disability, or any other applicable protected status or characteristics. If you require an accommodation to complete the application or interview(s), please let us know by email: careers@columbiabank.com .
</p><p></p><p><b>To Staffing and Recruiting Agencies:
</b></p><p></p><p>Our posted job opportunities are only intended for individuals seeking employment at Columbia Bank. Columbia Bank does not accept unsolicited resumes or applications from agencies and Columbia Bank will not be responsible for any fees related to unsolicited resume submissions. Staffing and recruiting agencies are not authorized to submit profiles, applications, or resumes to this site or to any Columbia Bank employee and any such submissions will be considered unsolicited unless requested directly by a member of the Talent Acquisition team.</p></div>

AML Operations Analyst

The University of Kansas Health System

<div><div><div><div><div><div><div><div><h1 class="jobSectionHeader"><b>Position Title
</b></h1></div></div></div></div></div></div></div><p></p>Ambulatory Operations and Informatics Analyst
<p></p>Broadmoor Campus
<p></p><h2 class="jobSectionHeader"><b>Position Summary / Career Interest:
</b></h2>The Ambulatory Informatics and Operations Analyst applies informatics knowledge and collaborates with operational leadership, end users of the electronic health record (EHR), Revenue Cycle, and IT to develop and drive adoption of standard workflows, assess usability and recommend optimizations. Supports departments by providing on site rounding, assessment, and execution of opportunities for efficiency, and implementation of user level system (EHR) personalization. Executes communication plans that are developed by project teams ensuring understanding and adoption across all departments.
<p></p><b>Responsibilities and Essential Job Functions
</b><ul><li>Must be able to perform the professional, clinical and or technical competencies of the assigned unit or department. Note: These statements are intended to describe the essential functions of the job and are not intended to be an exhaustive list of all responsibilities. Skills and duties may vary dependent upon your department or unit. Other duties may be assigned as required.
</li><li>Spends a significant amount of time rounding in ambulatory clinic settings. Communicates electronic health record documentation requirements. Observes and identifies efficiencies to enhance the patient, provider, and allied health staff experience. Documents and reinforces standard workflows and recommends modifications. Utilizes lean methodologies (PDCA, SOP Documentation, etc.) to document standards and increase ambulatory efficiency. Determines proper upline to escalate barriers (department vs informatics leadership). Ensures follow-up with providers and staff for removal of barriers and implementation of improvements.
</li><li>Participates in the distributive build program. Supports user level personalization. Triages optimization requests obtaining necessary build requirements to assist with navigation. Ensures those requests that are triaged meet operational goals and direction.
</li><li>Establishes relationships with ambulatory department and division leadership, physicians, and allied health staff.
</li><li>Researches and advises leadership on best practices utilizing benchmarking resources including, but not limited to, Epic User Web, GPIN, MGMA and the Access Collaborative.
</li><li>Able to collaborate with departments across the health system including information technology, revenue cycle, operations, and organizational leadership to understand ambulatory processes. Utilizes that knowledge to review, analyze, and optimize the patient and user experience by applying basic informatics principles that meet operational goals.
</li><li>Collaborates with team members to understand KPIs post go live. Understands workflow. Executes communication plans developed by team members ensuring adoption and understanding across departments. Escalates barriers to adherence to team and department leaders to ensure transformation.
</li><li>Participates in introductory transformational governance groups ensuring ambulatory expertise is represented. Brings items forward for discussion/approval based on findings during clinic rounding.
</li><li>Provides guidance and support to team members.
</li><li>Certification or proficiency in assigned Epic application must be obtained within 6 months of employment or assignment.
</li><li>Must be able to perform the professional, clinical and or technical competencies of the assigned unit or department.
</li><li>These statements are intended to describe the essential functions of the job and are not intended to be an exhaustive list of all responsibilities. Skills and duties may vary dependent upon your department or unit. Other duties may be assigned as required.
</li></ul><br>
<b>Required Education and Experience
</b><ul><li>High School Graduate
</li><li>Bachelors Degree
</li><li>3 or more years of direct patient care experience; literature search/review experience.
</li></ul><br>
<b>Preferred Education and Experience
</b><ul><li>Less than 1 year Informatics/super user experience.
</li></ul><br>
<b>Required Licensure and Certification
</b><ul><li>EPIC Proficiency/Certification as designated by role requirements. within 180 Days
</li><li>Professional Clinical License or Certification in Kansas or Missouri.
</li></ul><br>
<b>Knowledge Requirements
</b><ul><li>Demonstrates knowledge of computers and desktop software.
</li><li>Ability to work autonomously, by demonstrating self-motivation and creativity.
</li><li>Good communication, writing, organizational and presentation skills.
</li><li>Ability to effectively interact with multidisciplinary teams including physicians, administrative staff, clinical personnel, and peers.
</li><li>Demonstrates persistence to solving problems. Must work with limited resources within designated time restraints.
</li><li>Able to receive verbal communications from users, vendors and other employees in English.
</li><li>Able to verbally communicate with users, vendors and other employees in English.
</li><li>Able to read technical documentation manuals.
</li><li>Able to use the phone.
</li><li>Able to use a computer.
</li><li>Able to receive directions and follow through to completion.
</li><li>Basic knowledge of Microsoft products.
</li><li>Able to solve common design and development problems.
</li><li>Able to apply critical thinking and interpersonal skills.
</li><li>Has reliable transportation available in order to attend meetings and support users in multiple locations. Up to 10% overnight travel can be needed.
</li></ul><p></p><h2 class="jobSectionHeader"><b>Time Type:
</b></h2>Full time
<p></p><h2 class="jobSectionHeader"><b>Job Requisition ID:
</b></h2>R-52617
<p></p><h3 class="jobSectionHeader"><b>Important information for you to know as you apply:
</b></h3><ul><li><p>The health system is an equal employment opportunity employer. Qualified applicants are considered for employment without regard to race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, ancestry, age, disability, veteran status, genetic information, or any other legally-protected status. <i>See also </i>Diversity, Equity &amp; Inclusion <i>.
</i></p></li><li><p>The health system provides reasonable accommodations to qualified individuals with disabilities. If you need to request reasonable accommodations for your disability as you navigate the recruitment process, please let our recruiters know by requesting an Accommodation Request form using this link asktalentacquisition@kumc.edu .
</p></li><li><p>Employment with the health system is contingent upon, among other things, agreeing to the health-system-dispute-resolution-program.pdf and signing the agreement to the DRP.
</p></li></ul><p></p><h2 class="jobSectionHeader"><b>Need help finding the right job?
</b></h2><p></p><p>We can recommend jobs specifically for you! Create a custom Job Alert by selecting criteria that suit your career interests.</p></div>

Ambulatory Operations and Informatics Analyst

CTTRANSIT

<div><div><div><h2 class="jobSectionHeader"><b>Job Description</b></h2></div>
<div><p>Serve as CT<i>transit</i>&rsquo;s data analyst in operations analysis tracking, reporting, and support to assist in successful service delivery to achieve established goals, performance expectations set forth by the AGM of Transit Services.<br>
<br>
This position reports directly to the Operations Performance Manager. The position is responsible for data collection, analysis, tracking and reporting as it relates to transit operations, transit service delivery, including managing agency-wide National Transit Database (NTD) reporting.</p></div>
<div><h2 class="jobSectionHeader"><b>Examples of Duties</b></h2></div>
<p></p><div><div><ul><li>Monitor schedule adherence, on-time performance and other operations key performanceindicators.</li><li>
Collect, monitor, and evaluate CAD/AVL system data issues and identify opportunities forimprovement.</li><li>
Identify and communicate trends and operationalissues.</li><li>
Creating and maintaining BI reports anddashboards.</li><li>
Provide training and support on CAD/AVL, Business Intelligence, TransitMaster, OPS and other system data- relatedtools.</li><li>
Develop, complete, and provide reports on various areas related to key performance indicators,operations, and systemperformance.</li><li>
Assists in creating PowerBI/Tableau reports anddashboards. Produce comprehensive reports, including service reliability, strategic initiative reports and other reports in a timelymanner.</li><li>
Assists in the collection, preparation and analysis of department and transit system data andreporting including National Transitdatabase.</li><li>
Translates, interprets, analyses data impacting key performance indicators and communicating findings to key stakeholders.</li><li>
Monitoring, evaluating, and supporting projects related to CAD/AVL system data to determineCTtransit servicecompliance.</li><li>
Assists in developing and providing regular and specialized ridership and system datareports.</li><li>
Coordinating CAD/AVL system data issue resolution with vendors and CTtransitlocations.</li><li>
Providing training and support to different departments on system datausage.</li><li>
Coordinating work activities with transit operations personnel for field and electronic data collection anddata integrity.</li><li>
Monitoring and supporting location in identifying and tracking improvements to on-time performance ona routelevel.</li><li>
Providing support for the identification, analysis, process improvement, and resolution of customercomments.</li><li>
Assists with special events and specialservices.</li><li>
Assists in maintaining departmentdatabases.</li><li>
Assists other departments and divisions asneeded.</li><li>
Responds to inquiries for information from employees, senior leadership, and/or external partners asneeded.</li><li>
Work cooperatively with all levels ofpersonnel.</li><li>
Attends in-service training, seminars or other opportunities for professional development as madeavailable by the Agency. Provides training for Agency personnel as required. Actively participates in staff meetings, trainings,etc.</li><li>
Has thorough working knowledge of Agency policies and procedures, and collective bargainingagreements.</li><li>
Other duties and responsibilities asassigned.</li></ul></div></div><p></p>
<div><h2 class="jobSectionHeader"><b>Qualifications</b></h2></div>
<p></p><div><div><ul><li>Minimum possession of a bachelor's degree in business, mathematics, statistics, analytics, information technology or a closely related field, and one (1) year of relevant work experienceor recent relevant course work isrequired.</li><li>
An equivalent combination of education and work experience on a year-for-year basis can be substituted for the 4-year degree requirement.</li><li>
Microsoft Power BI or other analytics software/language experience is required.</li><li>
Experience in Python, SQL, and Power BI (DAX formulas and Power Query) is required.</li><li>
Experience with Automation, Scripting and API integration is required</li><li>
Ability to solve practical problems and deal with a variety of variables in situations where only limited standardization exists is required.</li><li>
Experience performing intensive data analysis.</li><li>
Experience working directly with customers.</li><li>
Knowledge of National Transit Database reporting is strongly preferred.</li><li>
Knowledge of public transit operations, policies and procedures and regulations strongly preferred.</li><li>
Excellent written and verbal communication skills, interpersonal skills, tact and diplomacy required.</li><li>
Ability to work in a fast-paced environment, to multitask, ability to conduct training when necessary is required.</li><li>
Advanced knowledge of the entire Microsoft Office Suite / Microsoft 365 is required. The ability to quickly learn new software programs is required.</li><li>
The ability to prioritize projects and to work both independently and in a team environment.</li><li>
A valid Driver&rsquo;s License is required. May be required to travel in the course of their daily work.</li><li>
Flexible availability including nights and weekends as needed.</li></ul></div></div><p></p>
<div><h2 class="jobSectionHeader"><b>How To Apply</b></h2></div>
<div><p>To view full job description and apply visit our careers website https://www.governmentjobs.com/careers/cttransit\ Please attach your resume and cover letter with your application</p></div></div></div>
<br><div></div><div><div><div><p><b>Why work at CT</b><b><i>transit ?.......</i></b><br>
<br>
CT<i>transit</i> offers a highly competitive benefit package to all full-time eligible employees.<br>
<br>
<b>Competitive Wages</b></p><ul><li>Competitive Pay</li><li>Paid Time Off (vacation, sick and holidays)</li><li>401k and Pension Retirement plans</li></ul><b>Insurance </b><ul><li>Low cost no deductible medical, dental and vision including family</li><li>Life Insurance</li><li>Company paid Life Insurance and short term disability plans</li><li>Voluntary Supplemental family, Accident Insurance an Additional Disability Plans</li></ul><b>Other Benefits</b><ul><li>Flexible Spending Account</li><li>Employee Assistance Program</li><li>Tuition Reimbursement</li></ul>Free public transportation for you and your spouse!!!!<br>
<br>
<b>For more information about benefits, contact Human Resources.</b><br>
 <div>CT<i>transit</i> is an Equal Opportunity /Affirmative Action Employer.</div></div></div></div><p></p>

PT Operations Performance Analyst (Hartford)

cFocus Software Incorporated

<div><h1 class="jobSectionHeader"><b>Cyber Threat Intelligence Analyst Job Description</b></h1><b>
Position: </b>Cyber Threat Intelligence Analyst<br>
<b>Program: </b>SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader"><b>
Position Summary</b></h2>
The Cyber Threat Intelligence Analyst supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program by delivering advanced cyber threat intelligence, threat analysis, proactive threat hunting, and operational cybersecurity support services.<br>
The Cyber Threat Intelligence Analyst is responsible for collecting, analyzing, correlating, and disseminating actionable cyber threat intelligence to support the SBA Security Operations Center (SOC), cybersecurity operations, incident response activities, and enterprise risk mitigation efforts. The position supports 24x7x365 cybersecurity operations through advanced analysis of indicators of compromise (IOCs), adversary tactics, techniques, and procedures (TTPs), emerging vulnerabilities, and threat actor activity impacting federal information systems and cloud environments.<h2 class="jobSectionHeader"><b>
Essential Duties and Responsibilities</b></h2><ul><li>
Provide cyber threat intelligence and operational analysis support for the SBA SOC in support of Task Area 3.5.3 Cybersecurity Operations Support.</li><li>
Conduct proactive cyber threat hunting activities across enterprise systems, cloud environments, endpoints, and network infrastructure.</li><li>
Analyze indicators of compromise (IOCs), threat actor tactics, techniques, and procedures (TTPs), malware behaviors, and emerging cyber threats.</li><li>
Monitor and evaluate cyber threat intelligence feeds, vendor reporting, CISA advisories, US-CERT alerts, and external intelligence sources.</li><li>
Perform advanced correlation and analysis of security events, SIEM data, IDS/IPS alerts, EDR telemetry, DNS logs, firewall logs, and network traffic.</li><li>
Support incident response and cybersecurity investigations through intelligence-driven analysis and threat attribution support.</li><li>
Develop cyber threat intelligence reports, operational briefings, situational awareness products, and executive-level summaries.</li><li>
Assist with the identification of previously unknown attack vectors and suspicious activity through threat hunting and anomaly analysis.</li><li>
Support digital forensics and incident analysis activities in coordination with SOC analysts, engineers, and incident responders.</li><li>
Develop and maintain threat intelligence playbooks, threat models, attack scenarios, and adversary profiles.</li><li>
Perform analysis of cloud security events and cyber threats impacting Microsoft 365, Azure, AWS, Salesforce, and hybrid cloud environments.</li><li>
Conduct research on advanced persistent threats (APTs), ransomware groups, insider threats, nation-state actors, and emerging cyber attack trends.</li><li>
Provide recommendations for defensive countermeasures, detection logic improvements, and enhanced security monitoring capabilities.</li><li>
Assist in the development of threat signatures, SIEM use cases, detection analytics, and threat detection content.</li><li>
Support continuous improvement of cybersecurity operations, threat intelligence workflows, and incident response processes.</li><li>
Coordinate with federal stakeholders, law enforcement, privacy officials, insider threat teams, and mission partners during cyber incident activities.</li><li>
Document investigative findings, intelligence assessments, and operational actions within case management and reporting systems.</li><li>
Participate in SOC operational meetings, shift briefings, incident coordination calls, and cybersecurity readiness activities.</li><li>
Maintain awareness of evolving cybersecurity technologies, federal threat reporting requirements, and NIST cybersecurity guidance.</li><li>
Support cybersecurity communications, intelligence sharing, and collaboration activities across the SBA enterprise.</li></ul><h2 class="jobSectionHeader"><b>
Minimum Qualifications</b></h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, Intelligence Studies, Information Assurance, or related discipline. Relevant experience may substitute for degree requirements.</li><li>
Minimum of 5 years of experience supporting cybersecurity operations, cyber threat intelligence, threat hunting, incident response, or SOC operations.</li><li>
Experience analyzing threat intelligence, indicators of compromise, adversary TTPs, and cybersecurity attack methodologies.</li><li>
Hands-on experience with SIEM, EDR, IDS/IPS, network analysis, and cyber defense tools.</li><li>
Experience conducting threat hunting and advanced event correlation across enterprise environments.</li><li>
Knowledge of federal cybersecurity frameworks and guidance including NIST SP 800-61, NIST SP 800-53, and CISA operational guidance.</li><li>
Understanding of MITRE ATT&amp;CK framework and cyber kill chain methodologies.</li><li>
Experience with cloud security monitoring and threat analysis in Microsoft Azure, AWS, Microsoft 365, and hybrid environments.</li><li>
Strong analytical, investigative, communication, and reporting skills.</li><li>
Ability to support 24x7x365 cybersecurity operational environments.</li></ul><h2 class="jobSectionHeader"><b>
Preferred Certifications</b></h2><ul><li>
GIAC Cyber Threat Intelligence (GCTI)</li><li>
GIAC Certified Incident Handler (GCIH)</li><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
Certified Information Systems Security Professional (CISSP)</li><li>
CompTIA CySA+</li><li>
Certified Ethical Hacker (CEH)</li><li>
Splunk Enterprise Security Certified Admin</li><li>
Microsoft Security Operations Analyst Associate (SC-200)</li></ul><p>
</p><p>Pw75tUj9Bf</p></div>

SBA - Cyber Threat Intelligence Analyst

Eli Lilly

<div><p>At Lilly, we unite caring with discovery to make life better for people around the world. We are a global healthcare leader headquartered in Indianapolis, Indiana. Our employees around the world work to discover and bring life-changing medicines to those who need them, improve the understanding and management of disease, and give back to our communities through philanthropy and volunteerism. We give our best effort to our work, and we put people first. We&rsquo;re looking for people who are determined to make life better for people around the world.</p><p></p><p>
The Cyber Threat Intelligence (CTI) Lead Analyst leads one of the eight functional teams within Global Cyber Defense Operations (GCDO). The role directs the strategy, operations, and continued maturation of Lilly's Cyber Threat Intelligence function &mdash; covering threat actor tracking and attribution, brand and executive protection, intelligence sharing collaborators, and the integration of intelligence into detection, response, and proactive defense across GCDO.</p><p></p><p>
This is a player/coach role. The CTI Lead Analyst is expected to maintain personal technical depth in threat analysis and set the example of the standard on the hardest analytical work, while simultaneously shaping the strategy of the function, developing the analyst team, and representing GCDO across multi-functional and external forums. Candidates should expect to spend their time across both the technical and strategic dimensions of the role rather than choosing one.</p><p></p><p><b>
What You Will Do:</b></p><ul><li><p><b>
Function Strategy and Maturation: </b>Lead the continued development and maturation of the Cyber Threat Intelligence function, advancing it from intelligence consumer to intelligence producer and contributor across the pharmaceutical industry and the broader cyber community.</p></li><li><p><b>
Hands-on Technical Leadership (Player/Coach): </b>Maintain personal technical proficiency in threat analysis, attribution, and intelligence tradecraft. Be the example on complex analytical work, set the technical bar for the team, and remain credible at the keyboard while developing analyst capability.</p></li><li><p><b>
Threat Actor Tracking and Attribution: </b>Direct the threat actor tracking and attribution program as a multi-functional Cybersecurity capability &mdash; championing adoption across response, detection, architecture, platforms, threat mitigation, identity, and other defensive functions, while remaining accountable for the program's outputs, methodology, and long-term maturation. Maintain alignment between internally tracked activity clusters and industry-recognized threat actor designations to support shared understanding across the security community. Ensure the program produces actionable intelligence that informs detection, response, and strategic decisions across the enterprise.</p></li><li><p><b>
Brand and Executive Protection: </b>Lead the cyber threat intelligence components of brand and executive protection, in close coordination with Corporate Security, Legal, the Brand Office, and other partners. Drive multi-functional governance to reduce duplication and improve coverage across protective monitoring services.</p></li><li><p><b>
Partner Collaboration: </b>Develop and maintain strong working relationships with key partners across Cybersecurity, Corporate Security, HR, Legal, the Brand Office, Ethics &amp; Compliance, and Tech@Lilly. Represent GCDO and the CTI function in multi-functional forums where intelligence drives prioritization.</p></li><li><p><b>
Intelligence Sharing and Industry Engagement: </b>Strengthen Lilly's role as an active contributor in pharmaceutical-sector and cross-industry intelligence sharing communities. Direct analyst engagement in intelligence sharing collaborators and ensure Lilly contributes high-value research at a cadence consistent with peer organizations.</p></li><li><p><b>
Team Leadership and Development: Lead a team</b> of cyber threat intelligence analysts. Provide direction, mentorship, and structured development. Build a high-performing team with clear succession depth across analyst tradecraft, brand protection, and strategic intelligence.</p></li><li><p><b>
Tooling and Capability Enhancement: </b>Direct the evaluation, introduction, and integration of capabilities supporting the CTI mission. Ensure intelligence is operationalized into automated enrichment, detection, and response workflows across the GCDO toolchain.</p></li><li><p><b>
Incident Response Support: </b>Provide intelligence-driven support to incident response investigations, particularly for sophisticated and targeted activity. Ensure CTI insights inform the full response lifecycle from triage through after-action review.</p></li><li><p><b>
Training, Awareness, and Communication: </b>Develop and deliver training and awareness programs that improve the organization's understanding of the external threat landscape. Communicate intelligence findings in formats appropriate for technical analysts, operational leaders, and senior leaders.</p></li></ul><p></p><p><b>
Your Minimum Basic Qualifications</b></p><ul><li><p>
HS Diploma/GED required</p></li><li><p>
7+ years of shown experience in Cybersecurity, including hands on cyber threat intelligence work</p></li><li><p><b>
Demonstrated experience materially contributing to threat actor tracking, attribution, and analytical methods that directly inform defensive decisions.</b></p></li><li><p><b>
Evidence of skills in areas e.g., malware analysis and/or reverse engineering, and campaign tracking to understand adversary objectives, techniques, and patterns.
</b></p></li><li><p><b><i>Qualified applicants must be authorized to work in the United States on a full-time basis. Lilly will not provide support for or sponsor work authorization or visas for this role, including but not limited to F-1 CPT, F-1 OPT, F-1 STEM OPT, J-1, H-1B, TN, O-1, E-3, H-1B1, or L-1.</i></b></p></li></ul><p><b>
Additional Skills / Preferences</b></p><ul><li><p>
Proven ability to operate as a player/coach &mdash; maintaining technical depth while leading a team and shaping strategy</p></li><li><p>
Strong analytical and problem-solving skills, with a track record of producing intelligence that drives decisions</p></li><li><p>
Experience leading or significantly contributing to a threat actor tracking, attribution, or intelligence analysis program</p></li><li><p>
Experience working across brand protection, executive protection, or related multi-functional domains is preferred</p></li><li><p>
Clear and confident communicator, with the ability to translate technical intelligence for technical, operational, and executive audiences</p></li><li><p>
Ability to work independently and lead through influence across organizational boundaries</p></li><li><p>
High level of integrity and ethical standards; awareness of laws, regulations, policies, and ethics as they relate to cybersecurity, privacy, and intelligence work</p></li><li><p>
Relevant certifications such as GIAC Cyber Threat Intelligence (GCTI), GIAC Certified Forensic Analyst (GCFA), GIAC Network Forensic Analyst (GNFA)</p></li></ul><p><b>
Additional Information</b></p><p>
Due to the global nature of this position, some international travel may be required.</p><p>
This position may be filled with a remote worker. Remote workers may be asked to travel based on business needs, which would require discussion and approval from the employee's supervisor.</p><p>
Lilly is dedicated to helping individuals with disabilities to actively engage in the workforce, ensuring equal opportunities when vying for positions. If you require accommodation to submit a resume for a position at Lilly, please complete the accommodation request form (https://careers.lilly.com/us/en/workplace-accommodation) for further assistance. Please note this is for individuals to request an accommodation as part of the application process and any other correspondence will not receive a response.</p><p></p><p>
Lilly is proud to be an EEO Employer and does not discriminate on the basis of age, race, color, religion, gender identity, sex, gender expression, sexual orientation, genetic information, ancestry, national origin, protected veteran status, disability, or any other legally protected status.</p><p><br>
Our employee resource groups (ERGs) offer strong support networks for their members and are open to all employees. Our current groups include: Africa, Middle East, Central Asia Network, Black Employees at Lilly, Chinese Culture Network, Japanese International Leadership Network (JILN), Lilly India Network, Organization of Latinx at Lilly (OLA), PRIDE (LGBTQ+ Allies), Veterans Leadership Network (VLN), Women&rsquo;s Initiative for Leading at Lilly (WILL), enAble (for people with disabilities). Learn more about all of our groups.</p><p></p><p>
Actual compensation will depend on a candidate&rsquo;s education, experience, skills, and geographic location. The anticipated wage for this position is</p>
$162,000 - $268,400<p></p><p>
Full-time equivalent employees also will be eligible for a company bonus (depending, in part, on company and individual performance). In addition, Lilly offers a comprehensive benefit program to eligible employees, including eligibility to participate in a company-sponsored 401(k); pension; vacation benefits; eligibility for medical, dental, vision and prescription drug benefits; flexible benefits (e.g., healthcare and/or dependent day care flexible spending accounts); life insurance and death benefits; certain time off and leave of absence benefits; and well-being benefits (e.g., employee assistance program, fitness benefits, and employee clubs and activities).Lilly reserves the right to amend, modify, or terminate its compensation and benefit programs in its sole discretion and Lilly&rsquo;s compensation practices and guidelines will apply regarding the details of any promotion or transfer of Lilly employees.</p><p></p><p>
#WeAreLilly</p></div>

Cyber Threat Intelligence - Lead Analyst

Search 10000+ Operational intelligence analyst jobs near you this May. New roles added regularly across leading industries. Apply today.