Cyber Threat Engineer – 24/7 MSS & TDR

LevelBlue, LLC.; Philippines; Remote; PHP 900,000 - 1,500,000; Full time

Job summary

LevelBlue, LLC. is seeking a Cyber Threat Engineer to join the Threat Detection and Response team. The role supports 24/7 monitoring as an extension of the DFIR team, working on complex security events from EDR platforms and coordinating with customers and partners.

Responsibilities include resolving technical problems, documenting processes, tuning security devices, and participating in on-call rotations. Strong communication and incident handling skills are essential, with a preference for

Qualifications

• Cyber investigation and incident handling best practices.
• Endpoint Detection and Response.
• Unix/Linux and Windows system administration.
• Current exploit and remediation techniques.
• Threat Hunting and Investigation.
• Web Services Administration.
• Log collection and analysis tools.

Responsibilities

• Analyze escalated, complex cases involving a pattern of security events from endpoint detection and response technologies.
• Resolve intractable technical problems within managed security solutions as part of a sustained improvement project.
• Create, improve, and document processes for the management and monitoring of security solutions.
• Tune devices for blocking and reporting based on customer business need.
• Baseline threat detection devices for complex and potentially breached customer environments.
• Test and improve endpoint detection, protection, and response policies.
• Take responsibility for customer satisfaction and overall success of managed services.
• Timely respond to questions and concerns of the DFIR and client security teams concerning incident investigation and response.
• Adhere to policies, procedures, and security best practices.
• Resolve problems independently and understand appropriate documentation and escalation procedures.
• Perform rotating on-call duties (nights/weekend rotations).
• Act as a mentor and escalation point for analysts within the Threat Detection and Response team.

Skills

Cyber investigation

Endpoint Detection and Response

Unix/Linux admin

Windows admin

Threat Hunting

Web Services Administration

Log analysis

Education

High school diploma or higher

Tools

Palo Alto Cortex XDR

Job description

LevelBlue, LLC. is seeking a Cyber Threat Engineer to join the Threat Detection and Response team. The role supports 24/7 monitoring as an extension of the DFIR team, working on complex security events from EDR platforms and coordinating with customers and partners.

Responsibilities include resolving technical problems, documenting processes, tuning security devices, and participating in on-call rotations. Strong communication and incident handling skills are essential, with a preference for