Principal Security Detection and Response Analyst (Tier 3 Analyst)

LevelBlue reduces risk and builds lasting resilience so organizations can innovate and advance their mission with confidence. As the world's most analyst-recognized and largest pure-play managed security services provider, LevelBlue elevates client outcomes that matter: stronger defense, faster response, and sustained business continuity. LevelBlue combines AI-powered security operations, advanced threat intelligence, and elite human expertise to provide the most comprehensive portfolio of strategic advisory, managed security, offensive security, and incident response services.

ONLY POLAND BASED - Employment Contract

We are looking for curious, diligent, technical people to be a part of our Global Security Operations team. As a member of this elite team, you'll take an integral role, providing Managed Detection and Response (MDR) and Managed Extended Detection and Response (MXDR) services to large organisations around the globe. You'll be working closely with some of the best minds in incident response, malware analysis, and security research, partnering with our customers and partners to defend against the most advanced adversaries.

We value our people and empower them to work remotely. As we operate a 'follow the sun' global model we don't ask our people to work unsociable hours.

We are currently requiring candidates with Fluent German or French, along with fluent English for this role.

What You'll Be Responsible For:
• Being the point of escalation and performing security analysis of the most critical endpoint alerts (MDR)
• Applying your expertise to piece together the attack chain across customers complex environments including cloud, identity, email, network, and endpoint (MXDR)
• Participating in various stages of incident investigations including taking decisive steps to respond to active breaches and protect our customers
• Threat hunting across customers environments searching for attackers or remnants of their activity
• Analysis and research into new, emerging, or trending attacks, actors, malware samples, and TTPs
• Ability to collect, process, and exploit OSINT to facilitate the creation of better hunting queries and contribute the creation of Threat Alerts.
• Engaging in customer-facing interactions at all levels from SOC analysts to c-suite executives

What We Are Looking For:
• 6+ years of relevant cybersecurity experience with a strong knowledge working in security operations
• 3+ years of relevant cybersecurity experience in at least two of the following is a must:
• Endpoint security, malware analysis, threat hunting, penetration testing, incident response, reverse engineering, or digital forensics
• Strong knowledge of modern operating systems
• Windows - a must
• OS X and Linux - advantage
• Solid foundation in networking protocols and architectures
• Experience with a scripting language (Python, Bash, PowerShell, etc.)
• Self-motivated and results-oriented; capable of leading and completing assignments without supervision
• Strong organisational skills and ability to handle a wide range of tasks and re-prioritize them on short notice
• Motivation to constantly improve processes and methodologies
• Able both independently as well collaborate within a team in a remote work setting
• Excellent interpersonal, verbal and written communication skills, ability to elucidate technical content to non-technical personnel
• Must have excellent English reading, writing, and speaking skills

Strong advantage to candidates with multiple EU languages

What We Offer:

• Contract of employment
• Sport card/ co-financing of vacation
• Life insurance
• Medical insurance
• Lunch card
• Annual bonus
• Employee assistance program (EAP)
• The employee pension scheme (PPE)

This role is open to candidates legally authorized to work in Poland. At LevelBlue, we support flexible work and bring people together in person for key moments based on role, team, and business needs.

LevelBlue is committed to a culture of respect, inclusion, and equal opportunity. All qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other status protected under applicable law.

To all agencies: Please do not contact LevelBlue outside of the Talent Acquisition team. LevelBlue's policy is to only accept resumes from agencies through its approved agency process and with a valid agreement in place. Any resume submitted outside this process will be considered the property of LevelBlue, and no fee will be paid if a candidate is hired from such a submission.

#LI-SD1