Embedded GSOC Analyst

About Sibylline

Sibylline is a leading intelligence and strategic risk consultancy in the security sector. Since 2010 we have supported businesses, governments and NGOs through the provision of high-quality risk analysis, due diligence and consultancy services. The firm provides an innovative, entrepreneurial and fast‑growing working environment, offering employees ever greater exposure to high‑profile clients and challenges. Sibylline offers fantastic opportunities for career progression within a successful company, and we aim to help our employees to build their own personal profiles as well‑regarded analysts within the broader industry.

• Self‑motivated, and auto‑improving individuals who can couple initiative and boldness with good judgement
• Excellent written and spoken English
• Clarity of thought and analytical flair
• Strong, demonstrable interest in security and intelligence
• The ability to work under pressure, demonstrate leadership when required but also be able to collaborate effectively in teams
• Excellent attention to detail

The GSOC Analyst is part of a 24/7 team of GSOC analysts, embedded with our client. The role is based in Minneapolis, MN and reports to the GSOC Supervisor. GSOC Analysts are responsible for monitoring physical security functions, detecting and assessing risks, and reporting occurrences while determining their impact on the client's business operations, employees, and facilities. The GSOC uses a variety of tools, such as global access control and alarm monitoring systems, CCTV monitoring systems, threat intelligence sources, and in‑house applications to detect and report threats and incidents.

These situations can include political instability, terrorism, natural disasters, or technical failures. This position requires the ability to work on weekends and holidays and on rotational shifts. The role is on‑site only at the client’s offices in Minneapolis, MN. The shift rotation for this position is 11:00 pm – 7:00 am, Friday – Tuesday. GSOC Analysts will exhibit flexibility and adaptability to changing needs of the work schedule and shift workload.

They must be self‑starters, with the ability to work both independently and as part of a global team. GSOC Analysts will be managed by the Embedded GSOC Supervisor day‑to‑day but will also report to Sibylline’s Intelligence Operations team. Full support and guidance will be provided from our head office, including training and professional development.

• Monitor security alerts, surveillance feeds, and threat intelligence sources in real time to identify potential security incidents or threats.
• Analyze security events to determine their severity, origin, and potential impact on the organization or client.
• Act promptly to security incidents by initiating appropriate response procedures, coordinating with internal teams, law enforcement, or emergency services as needed.
• Collect and assess relevant threat intelligence to stay ahead of emerging risks and trends affecting security posture.
• Accurately document all security events, incidents, and responses in incident management systems, ensuring thorough records for post‑incident review.
• Provide clear, timely updates to stakeholders, including clients, management, and response teams, about ongoing security situations.
• Identify incidents requiring escalation and follow established protocols to ensure swift action and resolution.
• Operate and maintain security tools and systems, such as access controls, CCTV, intrusion detection, and alarm systems.
• Other duties as assigned.

• Attentive, organized, and detail‑oriented.
• A quick learner with the ability to multi‑task.
• Comfortable working in a fast‑paced environment.
• A strong team player with the ability to work independently as needed.
• Excellent written and verbal communication skills.
• Strong customer service skills.
• Ability to work under pressure and remain calm during emergencies.

• High School diploma or equivalent; bachelor's degree in security, criminal justice, cybersecurity, or a related field is preferred.
• Familiarity with…