About ChicagoFIRST ChicagoFIRST is a nonprofit public-private partnership that helps financial institutions and other critical organizations strengthen operational resilience, emergency preparedness, and crisis coordination. We connect members with local, regional, state, and national public-sector partners; provide timely situational awareness; and convene trusted forums, exercises, and workgroups focused on business continuity, cybersecurity, physical security, intelligence, and emergency management. Position Summary The

SOCMINT / OSINT

Analyst is ChicagoFIRST's primary intelligence analyst for monitoring, validating, analyzing, and communicating information from social media, open sources, government partners, and trusted private-sector sources. The Analyst identifies threats and emerging risks affecting critical infrastructure and member organizations and produces timely, decision-useful intelligence that will support business continuity, cybersecurity, physical security, crisis management, and operational resilience. ChicagoFIRST will provide you with a laptop computer, cell phone, and the associated software and equipment required to execute your duties as

SOCMINT / OSINT

Analyst.

Key Responsibilities Continuous monitoring:

Conduct OSINT and SOCMINT monitoring for incidents, cyber events, severe weather, geopolitical developments, civil unrest, misinformation, public-safety concerns, and other emerging risks relevant to ChicagoFIRST members.

Collection and validation:

Evaluate source credibility, corroborate information, document confidence and information gaps, and distinguish verified facts from unconfirmed reporting or analytical judgment.

Analysis and warning:

Identify trends, indicators, potential impacts, and escalation thresholds affecting financial services, critical infrastructure, employees, facilities, suppliers, or business operations.

Intelligence production:

Prepare concise alerts, executive briefings, situational-awareness reports, dashboards, threat assessments, and other finished intelligence tailored to member needs.

Crisis support:

Provide incident intelligence during emergency activations and support off-hours monitoring or response when significant events may affect member firms or employee safety.

Partner coordination:

Maintain professional relationships with government and private-sector intelligence partners and share information through authorized channels and platforms.

Program support:

Support where available with intelligence products, research, analysis, scenarios, injects, meeting materials, and after-action content for workgroups, tabletop exercises, regulatory roundtables, and operational-resilience initiatives.

Knowledge management:

Maintain intelligence records, member resources, distribution lists, and final deliverables in Microsoft 365, SharePoint, Homeland Security Information Network (HSIN), and other approved platforms.

Capability development:

Help refine member intelligence requirements, collection priorities, analytical workflows, metrics, and responsible uses of AI-assisted research and analysis. Required Qualifications Bachelor's degree in intelligence studies, homeland security, emergency management, criminal justice, cybersecurity, political science, data analytics, communications, or a related field; an equivalent combination of relevant education and experience will be considered. At least two years of relevant experience in intelligence analysis, threat intelligence, OSINT, SOCMINT, emergency management, cybersecurity, corporate security, investigations, journalism, research, or a closely related field. Demonstrated ability to collect, evaluate, corroborate, synthesize, and clearly communicate information from multiple sources under time pressure. Strong analytical writing skills and the ability to produce concise, objective, source-aware products for executive and practitioner audiences. Working knowledge of social-media and open-source research methods, including source validation, misinformation awareness, privacy considerations, and responsible information handling. Sound judgment, discretion, integrity, and the ability to manage sensitive or restricted information in accordance with established handling rules. Proficiency with Microsoft 365 applications, including Word, Excel, PowerPoint, Outlook, Teams, and SharePoint, plus the ability to learn monitoring, visualization, notification, and information-sharing platforms. Will work in person in Chicago and surrounding areas as business needs. The position generally follows ChicagoFIRST's established business schedule. Flexibility is required to support significant incidents, emergencies, special events, and other operational needs, including occasional early-morning, evening, weekend, and holiday assignments. Any formal on-call or extended monitoring expectations will be established by organizational policy. Occasionally, remote working in the Chicagoland area is acceptable. This position is Federal Labor Standards Act (FLSA) Exempt Ability to satisfy identity-verification, training, acceptable-use, and sponsorship requirements established by government or partner information-sharing platforms, when applicable. Preferred Qualifications Experience supporting a public-private partnership, financial services organization, critical-infrastructure sector, fusion center, government agency, security operations center, or emergency operations center. Training or certification in intelligence analysis, OSINT, SOCMINT, threat intelligence, emergency management, cybersecurity, or a related discipline. Experience using commercially available social-media monitoring, open-source research, geospatial, link-analysis, visualization, or emergency-notification tools. Experience administering and utilizing emergency notification systems. Familiarity with DHS critical-infrastructure terminology, the Homeland Security Information Network, intelligence requirements, structured analytic techniques, and common information-handling markings. Experience developing dashboards, metrics, geospatial products, automated workflows, or responsibly governed AI-assisted analytical products. Core Competencies Analytical rigor Source evaluation Clear writing Intellectual curiosity Sound judgment Urgency with balanced validation Collaboration Discretion Attention to detail Compensation and Benefits The anticipated annual salary range is $70,000-$85,000, based on relevant experience, qualifications, and organizational budget. The position may qualify for a year-end performance bonus. Benefits consist of medical, dental, AD&D insurance, and a 401(k) plan with employer contributions that match your contributions at 50%, for up to 6% of your salary. You will be eligible for two weeks of vacation, two personal days, seven sick days and all bank/legal holidays each calendar year. Relocation assistance is not available for this position. Candidates must reside in, or relocate at their own expense to, the Chicago metropolitan area to meet the position's in-person work requirements. How to Apply Please submit a cover letter and resume to Steven.

Caluris@chicagofirst.org. Applications will be reviewed as received, and the position will remain open until filled. Equal Opportunity Statement ChicagoFIRST is committed to equal employment opportunity. Employment decisions are based on qualifications, merit, and organizational needs without regard to any status protected by applicable law.

Pay:

$70,000.00 - $85,000.00 per year

Benefits:

401(k) matching Dental insurance Health insurance

Work Location:

Hybrid remote in Chicago, IL 60603