Cyber Threat Engineer - Global Threat Operations

Trustwave; Poland; On-site; PLN 130,000 - 210,000; Full time

Benefits offered by this job

Sport card

Vacation co-financing

Life insurance

Medical insurance

Lunch card

Annual bonus

Employee assistance program (EAP)

Employee pension scheme (PPE)

Job summary

LevelBlue is seeking a Cyber Threat Engineer in Poland to join the Threat Detection and Response team within LevelBlue MSS. You will act as the monitoring and response extension of the DFIR unit, advancing 24/7 security operations and customer outcomes while mentoring junior staff.

The role requires strong incident handling, EDR expertise, and excellent communication with clients and partners. On-call rotations and collaboration across security domains are key aspects of the position.

Qualifications

• Advanced knowledge of cyber investigation and incident handling.
• Experience with EDR and security operations.
• Fluent English; strong communication and customer service.

Responsibilities

• Analyze escalated, complex security cases from EDR technologies.
• Resolve technical problems within managed security solutions.
• Create, improve and document monitoring processes.
• Tune devices for blocking/reporting based on customer needs.
• Baseline threat detection for complex environments.
• Test and improve endpoint detection and response policies.
• Respond to questions from DFIR and client teams.
• Take rotating on-call duties; mentor analysts.

Skills

Threat detection

Incident handling

Endpoint Detection and Response

Unix/Linux admin

Windows admin

Threat hunting

Log analysis

Customer service

Communication skills

Analytical thinking

Education

High school diploma

Bachelor's degree (plus preferred)

GCIA

GCIH

Security+

OSCP

CEH

PCDRA

Tools

Palo Alto Cortex XDR

CrowdStrike Falcon

SentinelOne

SIEM tooling

Job description

LevelBlue reduces risk and builds lasting resilience so organizations can innovate and advance their mission with confidence. As the world’s most analyst-recognized and largest pure-play managed security services provider, LevelBlue elevates client outcomes that matter: stronger defense, faster response, and sustained business continuity. LevelBlue combines AI-powered security operations, advanced threat intelligence, and elite human expertise to provide the most comprehensive portfolio of strategic advisory, managed security, offensive security, and incident response services. A Cyber Threat Engineer is a member of the Threat Detection and Response (TDR) team within LevelBlue Managed Security Services (MSS). This team specifically will act as the monitoring and response extension of a Digital Forensics and Incident Response Services (DFIR) team to provide 24/7 monitoring. In addition to possessing technical knowledge, a Threat Engineer interacts extensively with customers and partners using polite professional etiquette and serves as a technical point of escalation within TDR.POLAND-based required!Cyber Threat Engineers perform the following duties: Analyze escalated, complex cases involving a pattern of security events from endpoint detection and response technologies.Resolve intractable technical problems within managed security solutions as part of a sustained improvement project.Create, improve, and document processes for the management and monitoring of security solutions.Tune devices for blocking and reporting based on customer business need.Baseline threat detection devices for complex and potentially breached customer environments.Test and improve endpoint detection, protection, and response policies.Take responsibility for customer satisfaction and overall success of managed services.Timely respond to questions and concerns of the DFIR and client security teams concerning incident investigation and response.Adhere to policies, procedures, and security best practices.Resolve problems independently and understand appropriate documentation and escalation procedures.Perform rotating on-call duties (nights/weekend rotations).Act as a mentor and escalation point for analysts within the Threat Detection and Response team.

Skills & Knowledge Requirements:

Must have intermediate skills/knowledge in some of the following: Cyber investigation and incident handling best practicesEndpoint Detection and ResponseUnix/Linux and Windows system administrationCurrent exploit and remediation techniquesThreat Hunting and InvestigationWeb Services AdministrationLog collection and analysis tools

Desired experience:

Advanced Palo Alto Cortex XDRIntrusion analysis experienceIncident handling and documentationExcellent customer service skillsExcellent analytical thinking and problem-solving skillsStrong oral and written communication skillsSelf-managed and team orientedDeadline and detail orientedHighly motivated Required: English: Demonstrated Fluency Preferred: Intermediate to advanced experience in Information Security related areasCertified in Security related Industry, Vendor or Professional Certification- GCIA, GCIH, Security+, OSCP, or CEH preferred.Certified in Vendor Specific Incident Handling and Investigation Certifications:Palo Alto Networks Systems Engineer: Cortex AssociatePalo Alto Networks Systems Engineer: Cortex ProfessionalPalo Alto Networks Certified Detection and Remediation Analyst (PCDRA)SentinelOne Incident ResponseCrowdstrike Certified Falcon Responder (CCFR)

Education:

A high school diploma or equivalent is required; a college or university degree is a plus.

What We Offer:

contract of employmentsport card/ co-financing of vacationlife insurancemedical insurancelunch cardannual bonusemployee assistance program (EAP)the employee pension scheme (PPE)

This role is open to candidates legally authorized to work in Poland.

At LevelBlue, we support flexible work and bring people together in person for key moments based on role, team, and business needs.

LevelBlue is committed to a culture of respect, inclusion, and equal opportunity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other status protected under applicable law.