Cyber Threat Engineer: 24/7 Incident Response (Poland)

Trustwave; Poland; On-site; PLN 130,000 - 210,000; Full time

Benefits offered by this job

Sport card

Vacation co-financing

Life insurance

Medical insurance

Lunch card

Annual bonus

Employee assistance program (EAP)

Employee pension scheme (PPE)

Job summary

LevelBlue is seeking a Cyber Threat Engineer in Poland to join the Threat Detection and Response team within LevelBlue MSS. You will act as the monitoring and response extension of the DFIR unit, advancing 24/7 security operations and customer outcomes while mentoring junior staff.

The role requires strong incident handling, EDR expertise, and excellent communication with clients and partners. On-call rotations and collaboration across security domains are key aspects of the position.

Qualifications

• Advanced knowledge of cyber investigation and incident handling.
• Experience with EDR and security operations.
• Fluent English; strong communication and customer service.

Responsibilities

• Analyze escalated, complex security cases from EDR technologies.
• Resolve technical problems within managed security solutions.
• Create, improve and document monitoring processes.
• Tune devices for blocking/reporting based on customer needs.
• Baseline threat detection for complex environments.
• Test and improve endpoint detection and response policies.
• Respond to questions from DFIR and client teams.
• Take rotating on-call duties; mentor analysts.

Skills

Threat detection

Incident handling

Endpoint Detection and Response

Unix/Linux admin

Windows admin

Threat hunting

Log analysis

Customer service

Communication skills

Analytical thinking

Education

High school diploma

Bachelor's degree (plus preferred)

GCIA

GCIH

Security+

OSCP

CEH

PCDRA

Tools

Palo Alto Cortex XDR

CrowdStrike Falcon

SentinelOne

SIEM tooling

Job description

LevelBlue is seeking a Cyber Threat Engineer in Poland to join the Threat Detection and Response team within LevelBlue MSS. You will act as the monitoring and response extension of the DFIR unit, advancing 24/7 security operations and customer outcomes while mentoring junior staff.

The role requires strong incident handling, EDR expertise, and excellent communication with clients and partners. On-call rotations and collaboration across security domains are key aspects of the position.