Cyber Threat Analyst - Global Threat Operations

LevelBlue, LLC.; Manila; On-site; PHP 700,000 - 1,000,000; Full time

Job summary

LevelBlue, LLC. is seeking a Cyber Threat Analyst to join the Global Threat Operations team in the Philippines. The role focuses on analyzing security events from firewalls, IDS/IPS, SIEM and WAF, and coordinating with customers to meet SLA commitments.

Ideal candidates have strong TCP/IP networking knowledge, experience with security products (Snort/Sourcefire) and excellent written and verbal communication. English fluency is required; a college degree is a plus.

Qualifications

• English fluency required.
• High school diploma or equivalent; college degree preferred.
• Experience in information security, networking, or related IT fields.
• Knowledge of TCP/IP networking and security technologies.
• Familiarity with Snort/Sourcefire and SIEM tools.

Responsibilities

• Analyze and respond to security events from firewalls, IDS/IPS, SIEM, and WAF.
• Respond to incidents within SLA and coordinate with customers.
• Tune devices for blocking and reporting per customer needs.
• Communicate effectively with customers and internal teams.
• Adhere to security policies and procedures; escalate as needed.

Skills

Information security best practices &

Network security architecture

Cyber Security awareness

TCP/IP networking

Sourcefire/Snort

Scanning technologies

Log collection & analysis tools

Education

High school diploma or equivalent

Job description

Cyber Threat Analyst - Global Threat Operations

Job Description

Posted Tuesday, August 4, 2026 at 4:00 PM

LevelBlue reduces risk and builds lasting resilience so organizations can innovate and advance their mission with confidence. As the world’s most analyst-recognized and largest pure‑play managed security services provider, LevelBlue elevates client outcomes that matter: stronger defense, faster response, and sustained business continuity. LevelBlue combines AI-powered security operations, advanced threat intelligence, and elite human expertise to provide the most comprehensive portfolio of strategic advisory, managed security, offensive security, and incident response services.

This position will cover US Day shift - may include weekend

The Cyber Threat Analyst is a member of the Global Threat Operations (GTO) team within LevelBlue Managed Security Services (MSS). In addition to possessing technical knowledge, a Threat Analyst interacts extensively with customers and partners using polite, professional etiquette.
Cyber Threat Analysts perform the following duties:

• Use strong TCP/IP networking skills to perform network analysis and understand detected threats.
• Analyze and respond to security events from firewalls, IDS, IPS, SIEM, Web Application Firewall (WAF) and other security data sources within documented SLA.
• Respond within service level agreement (SLA) standards to customer tickets and threats requiring incident notification.
• Tune devices for blocking and reporting based on customer business need.
• Use effective written and verbal communication skills to interact with customers and internal resources in a polite, positive, and professional manner.
• Take responsibility for customer satisfaction and overall success of managed services.
• Respond to needs and questions of customers concerning their managed services, managed devices and detected threats.
• Adhere to policies, procedures, and security best practices.
• Resolve problems independently and understands the correct escalation procedures.

Skills & Knowledge Requirements:
Must have basic proficient skills/knowledge in some of the following:

• Information security best practices & network security architecture
• Current events in Cyber Security and associated patching and remediation efforts
• TCP/IP networking
• Sourcefire/Snort based security products
• Scanning technologies
• Log collection and analysis tools

Desired experience:

• Information security, web server administration, or networking
• Excellent analytical thinking and problem solving skills
• Strong oral and written communication skills
• Self-managed and team oriented
• Deadline and detail oriented
• Highly motivated

Required:

• English: Demonstrated Fluency

Preferred:

• Certified in Security related Industry, Vendor or Professional Certification- GCIA, GCIH, Security+, OSCP, or CEH preferred.

Education:

• A high school diploma or equivalent is required; a college or university degree is a plus.

This role is open to candidates legally authorized to work in the Philippines. At LevelBlue, including teams that previously operated as Trustwave, we support flexible work and bring people together in person for key moments based on role, team, and business needs.

LevelBlue is committed to a culture of respect, inclusion, and equal opportunity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other status protected under applicable law.