Sr. Security Analyst - SOC, German Speaking

Colonial Group; Polska; On-site; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Contract of employment

Sport card / vacation co-financing

Life Insurance

Medical Insurance

Lunch card

Annual bonus

Employee Assistance Program (EAP)

Pension scheme (PPE)

Job summary

LevelBlue in Poland seeks a Senior Security Analyst to analyze escalated security events, tune detection policies, and mentor junior analysts within the Threat Detection and Response team. The role includes on‑call duties and coordination with DFIR and client security teams to ensure effective incident response.

The ideal candidate has strong EDR, Unix/Linux and Windows administration, threat hunting, and incident handling experience, with English fluency and German or French as a plus; security

Qualifications

• Must have intermediate skills/knowledge in cyber investigation and incident handling best practices.
• Experience with Endpoint Detection and Response and incident handling.
• Unix/Linux and Windows system administration knowledge.

Responsibilities

• Analyze escalated, complex security events from EDR and related technologies.
• Resolve technical problems within managed security solutions as part of improvements.
• Create, improve, and document processes for management and monitoring of security solutions.
• Provide timely responses to DFIR and client security teams concerning incident investigation and response.
• Adhere to policies, procedures, and security best practices.

Skills

Cyber investigation

Endpoint Detection and Response

Unix/Linux administration

Windows administration

Threat Hunting

Log analysis

Web Services Administration

Education

High school diploma or equivalent

College or university degree (plus)

Tools

Palo Alto Cortex XDR

Cortex Associate

Cortex Professional

PCDRA

SentinelOne IR

CrowdStrike Falcon Responder

Job description

LevelBlue reduces risk and builds lasting resilience so organizations can innovate and advance their mission with confidence. As the world's most analyst-recognized and largest pure-play managed security services provider, LevelBlue elevates client outcomes that matter: stronger defense, faster response, and sustained business continuity. LevelBlue combines AI-powered security operations, advanced threat intelligence, and elite human expertise to provide the most comprehensive portfolio of strategic advisory, managed security, offensive security, and incident response services.

Shedule: The role follows a rotating schedule of either Tuesday-Saturday or Sunday-Thursday, including weekend coverage, with working hours of either 09:00-17:00 or 10:00-18:00 Poland time

POLAND-based required

Sr. Security Analyst perform the following duties:

• Analyze escalated, complex cases involving a pattern of security events from endpoint detection and response technologies.
• Resolve intractable technical problems within managed security solutions as part of a sustained improvement project.
• Create, improve, and document processes for the management and monitoring of security solutions.
• Tune devices for blocking and reporting based on customer business need.
• Baseline threat detection devices for complex and potentially breached customer environments.
• Test and improve endpoint detection, protection, and response policies.
• Take responsibility for customer satisfaction and overall success of managed services.
• Timely respond to questions and concerns of the DFIR and client security teams concerning incident investigation and response.
• Adhere to policies, procedures, and security best practices.
• Resolve problems independently and understand appropriate documentation and escalation procedures.
• Perform rotating on-call duties (nights/weekend rotations).
• Act as a mentor and escalation point for analysts within the Threat Detection and Response team.

Skills & Knowledge Requirements:

Must have intermediate skills/knowledge in some of the following:

• Cyber investigation and incident handling best practices
• Endpoint Detection and Response
• Unix/Linux and Windows system administration
• Current exploit and remediation techniques
• Threat Hunting and Investigation
• Web Services Administration
• Log collection and analysis tools

Desired experience:

• Advanced Palo Alto Cortex XDR
• Intrusion analysis experience
• Incident handling and documentation
• Excellent customer service skills
• Excellent analytical thinking and problem-solving skills
• Strong oral and written communication skills
• Self-managed and team oriented
• Deadline and detail oriented
• Highly motivated

Required:

• English: Demonstrated Fluency
• German language skills would be a very strong advantage for this position; French language skills would be nice to have

Preferred:

• Intermediate to advanced experience in Information Security related areas
• Certified in Security related Industry, Vendor or Professional Certification- GCIA, GCIH, Security+, OSCP, or CEH preferred.
• Certified in Vendor Specific Incident Handling and Investigation Certifications:
• Palo Alto Networks Systems Engineer: Cortex Associate
• Palo Alto Networks Systems Engineer: Cortex Professional
• Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA)
• SentinelOne Incident Response
• Crowdstrike Certified Falcon Responder (CCFR)

Education:

• A high school diploma or equivalent is required; a college or university degree is a plus.

What We Offer:

• contract of employment
• sport card/ co-financing of vacation
• life insurance
• medical insurance
• lunch card
• annual bonus
• employee assistance program (EAP)
• the employee pension scheme (PPE)

This role is open to candidates legally authorized to work in Poland. At LevelBlue, we support flexible work and bring people together in person for key moments based on role, team, and business needs.

LevelBlue is committed to a culture of respect, inclusion, and equal opportunity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other status protected under applicable law.

To all agencies: Please do not contact LevelBlue outside of the Talent Acquisition team. LevelBlue's policy is to only accept resumes from agencies through its approved agency process and with a valid agreement in place. Any resume submitted outside this process will be considered the property of LevelBlue, and no fee will be paid if a candidate is hired from such a submission.

#LI-KD1