Threat Intelligence Analyst

About the role

NiSource is one of the largest fully regulated utility companies in the U.S., serving millions of customers across six states. The Enterprise Security organization encompasses Corporate Security, Cybersecurity, Security Compliance, and Operational Technology teams, ensuring collaboration and continuity in securing critical business operations. The Cybersecurity and Physical Threat Intelligence Team identifies and analyzes cyber and physical threats, emerging risks, and industry developments, partnering closely with Cybersecurity Incident Response, Physical Security Operations, Cyber Risk Management, and other stakeholders. As cyber and physical threats converge, the fused intelligence program drives cohesion, a proactive approach, and strengthened information-sharing across Enterprise Security.

As a Threat Intelligence Analyst, you will follow the intelligence lifecycle to collect, analyze, and interpret threat data, build tactical and strategic intelligence products based on documented trends, and inform security protocols with actionable intelligence. You will support and further develop protective intelligence and travel security programs, partner with stakeholders across Enterprise Security to deliver intelligence-led insights for company events, travel, incident response, investigations, and geopolitical trends, and play a key role in improving intelligence processes, reporting, and automation capabilities.

Responsibilities

• Collect and analyze open-source, proprietary, and partner intelligence related to geopolitical risks, critical infrastructure and industry developments, threat actors, and physical security concerns
• Produce strategic and tactical intelligence products, including threat assessments, executive briefings, and risk forecasts, ensuring reports are relevant, timely, and aligned with business requirements
• Support executive-focused protective intelligence and travel security programs by tracking upcoming travel and events, producing travel briefings, and providing real-time updates or assistance
• Collaborate with Cybersecurity and Corporate Security teams on incident response and investigations; compile available intelligence into timely, high-confidence products
• Update key stakeholders throughout a security or crisis event to provide essential information, translate technical information for a business audience, and support overall business response and recovery efforts
• Assist in developing new intelligence reporting thresholds, templates, products, and data collection mechanisms
• Develop and maintain intelligence metrics, dashboards, investigative records, and KPIs to ensure team activities are measurable and aligned to business objectives
• Utilize intelligence tools and platforms such as Dataminr, Google Threat Intelligence, Skopenow, TLO, and other OSINT capabilities to support routine monitoring, investigations, and analysis
• Collaborate with internal and external partners to enhance information sharing and benchmarking across physical and cyber disciplines
• Participate periodically in procedural audits, analytic reviews, lessons-learned sessions, or after-action reports
• Continuously refine sourcing strategies and help evaluate technology needs within the changing AI and information security environment

Requirements

• Bachelor’s degree or equivalent experience
• 4+ years of experience in Threat Intelligence, Security Operations, Incident Response, Intelligence Analysis, or related fields in the public or private sectors
• 4+ years of experience applying the intelligence lifecycle, analytical frameworks such as structured analytic techniques (SATs), and conducting research with OSINT, HUMINT, SIGINT, or GEOINT methodologies
• 4+ years of experience producing all-source intelligence reports, briefings, and assessments for both technical and senior business audiences
• 4+ years of experience working with intelligence platforms and OSINT tools such as Dataminr, Google Threat Intelligence, Flashpoint, International SOS, Skopenow, and a range of social media platforms
• Proficiency in Word, SharePoint, Excel, Power BI, and AI models for data analytics and tracking

Preferred Qualifications

• Advanced degree or relevant industry certifications
• 5+ years in a strategic Threat Intelligence role with experience developing a wide array of analytic intelligence products for senior leaders and iterating on intelligence processes, methodologies, and program KPIs
• Excellent writing, verbal, and interpersonal skills
• Ability to adapt to a fast-paced and innovative work environment
• Strong analytical, problem-solving, and communication skills, with the ability to translate complex topics into clear and actionable insights
• Experience with the utility or energy industry
• Experience with AI and ML technologies in security

Pay

Salary range: $96,600 – $144,900 with an 8% annual bonus. The salary offered is based on factors including skills, job-related knowledge, relevant experience, and internal pay equity.

Schedule

Full-time, hybrid — 3 days on location per week.

Location

Columbus, OH or Merrillville, IN. Relocation assistance provided.

Candidates must be legally authorized to work in the United States and must not require employer sponsorship now or in the future. As a public utility, NiSource provides essential services 24/7; employees may be required to support emergency response efforts, including working outside normal hours or assisting with tasks outside typical responsibilities.