Intelligence Analyst - Security Operations Center

JOB DESCRIPTION Intelligence Analyst About M1 Global Since 1994, M1 Global has grown from a local security provider to the trusted security partner of Fortune 500 companies worldwide.

We build security programs for complex enterprise environments -- from loading docks to data centers, headquarters to event venues -- powered by Aurix™, our proprietary automation platform.

We are part of the Specialized family of brands.

Protecting the companies that power the world.

The Role The Intelligence Analyst is the senior analytical seat in the operation.

You monitor an all-hazards picture for client critical infrastructure across multiple sites in a disperse geographical areas severe weather, grid and utility disruption, civil unrest and protest activity, crime and targeted violence, unauthorized drone activity, transportation and supply disruption, wildfire, seismic activity, and public health events.

You calculate what each event actually threatens, and you communicate that judgment to the people who act on it.

Key Responsibilities All-Hazards Monitoring • Monitor a defined portfolio of sites continuously for natural, technological, human-caused, and geopolitical hazards.

• Run open-source intelligence collection across news, government, utility, meteorological, transportation, and social sources -- and verify before you report.

• Maintain persistent awareness of regional conditions surrounding each assigned site, including power and water availability, road and airspace status, and local civil activity.

• Track developing situations through resolution and update stakeholders as the picture changes.

Risk Calculation and Assessment • Assess every event against three factors -- proximity to the site, severity of the hazard, and incident or risk type -- and produce a defensible risk determination from them.

• Apply the program's scoring and threshold criteria consistently, so the same event produces the same call regardless of who is on shift.

• Distinguish credible threats from noise.

Explain the reasoning behind each call, not just the conclusion.

• Identify second-order effects: what a hazard disrupts downstream, and which sites inherit the consequence.

• Recommend threshold and criteria adjustments to leadership when event patterns show the current settings are miscalibrated.

Stakeholder Communication and Escalation • Notify the right stakeholders at the right time, matched to proximity, severity, and risk type -- site leadership, regional leadership, operations, and client security leadership.

• Write and deliver alerts that state the hazard, the affected site, the assessed impact, and the recommended action.

Bottom line first.

• Escalate through defined paths without delay, and confirm receipt on time-critical notifications.

• Serve as the analytical voice during crisis coordination -- give leadership the picture they need to decide, in the time they have to decide it.

• Brief technical and...