Cyber Threat Engineer - Global Threat Operations

Trustwave; Poland; Remote; PLN 120,000 - 180,000; Full time

Job summary

A leading cybersecurity provider is seeking a Cyber Threat Engineer in Poland to join its Threat Detection and Response team. This role involves analyzing security incidents, resolving technical challenges, and ensuring customer satisfaction. Applicants should possess strong skills in cyber investigation, incident handling, and communication. Remote work is available, but in-person interactions may be necessary based on team needs.

Benefits

Contract of employment

Sport card/co-financing of vacation

Life insurance

Medical insurance

Lunch card

Annual bonus

Employee assistance program (EAP)

Employee pension scheme (PPE)

Qualifications

• Intermediate skills in security investigation.
• Experience in incident handling and documentation.
• Strong communication and customer service skills.

Responsibilities

• Analyze escalated cyber security cases.
• Improve processes for security solution management.
• Timely respond to incident investigation queries.

Skills

Cyber investigation and incident handling best practices

Endpoint Detection and Response

Unix/Linux and Windows system administration

Current exploit and remediation techniques

Threat Hunting and Investigation

Web Services Administration

Log collection and analysis tools

Education

High school diploma or equivalent

College or university degree

Tools

Palo Alto Cortex XDR

Intrusion analysis

Job description

About Trustwave

Trustwave is a leading cybersecurity and managed security services provider focused on threat detection and response. We uncover threats that others can’t and respond quicker than others can to protect against the devastating impacts of cyberattacks. We’re a world-class team of cyber consultants, threat hunters and researchers serving clients in 96 countries. At Trustwave, you can learn alongside the best, make a personal impact on a global scale, and solve new challenges every day. Learn more about us at https://www.trustwave.com.

A Cyber Threat Engineer is a member of the Threat Detection and Response (TDR) team within Trustwave Managed Security Services (MSS). This team specifically will act as the monitoring and response extension of a Digital Forensics and Incident Response Services (DFIR) team to provide 24/7 monitoring. In addition to possessing technical knowledge, a Threat Engineer interacts extensively with customers and partners using polite professional etiquette and serves as a technical point of escalation within TDR.

POLAND-based required!

Cyber Threat Engineers perform the following duties:

• Analyze escalated, complex cases involving a pattern of security events from endpoint detection and response technologies.


• Resolve intractable technical problems within managed security solutions as part of a sustained improvement project.


• Create, improve, and document processes for the management and monitoring of security solutions.


• Tune devices for blocking and reporting based on customer business need.


• Baseline threat detection devices for complex and potentially breached customer environments.


• Test and improve endpoint detection, protection, and response policies.


• Take responsibility for customer satisfaction and overall success of managed services.


• Timely respond to questions and concerns of the DFIR and client security teams concerning incident investigation and response.


• Adhere to policies, procedures, and security best practices.


• Resolve problems independently and understand appropriate documentation and escalation procedures.


• Perform rotating on-call duties (nights/weekend rotations).


• Act as a mentor and escalation point for analysts within the Threat Detection and Response team.

Skills & Knowledge Requirements:

Must have intermediate skills/knowledge in some of the following:

• Cyber investigation and incident handling best practices


• Endpoint Detection and Response


• Unix/Linux and Windows system administration


• Current exploit and remediation techniques


• Threat Hunting and Investigation


• Web Services Administration


• Log collection and analysis tools

Desired experience:

• Advanced Palo Alto Cortex XDR


• Intrusion analysis experience


• Incident handling and documentation


• Excellent customer service skills


• Excellent analytical thinking and problem-solving skills


• Strong oral and written communication skills


• Self-managed and team oriented


• Deadline and detail oriented


• Highly motivated

Required:

• English: Demonstrated Fluency

Preferred:

• Intermediate to advanced experience in Information Security related areas


• Certified in Security related Industry, Vendor or Professional Certification- GCIA, GCIH, Security+, OSCP, or CEH preferred.


• Certified in Vendor Specific Incident Handling and Investigation Certifications:


• Palo Alto Networks Systems Engineer: Cortex Associate


• Palo Alto Networks Systems Engineer: Cortex Professional


• Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA)


• SentinelOne Incident Response


• Crowdstrike Certified Falcon Responder (CCFR)

Education:

• A high school diploma or equivalent is required; a college or university degree is a plus.

What We Offer:

• contract of employment


• sport card/ co-financing of vacation


• life insurance


• medical insurance


• lunch card


• annual bonus


• employee assistance program (EAP)


• the employee pension scheme (PPE)

This is a remote opportunity open to anyone legally authorized to work in Poland. Guided by our flexible workplace philosophy, Moments That Matter, people gather in the office when in-person interaction is most impactful; full-time remote employees may be asked to travel occasionally based on the needs of the team and the business.

Trustwave is an Equal Opportunity Employer of Minorities, Females, Protected Veterans, and Individuals with Disabilities.