Job Description

LevelBlue reduces risk and builds lasting resilience so organizations can innovate and advance their mission with confidence. As the world’s most analyst-recognized and largest pure-play managed security services provider, LevelBlue elevates client outcomes that matter: stronger defense, faster response, and sustained business continuity. LevelBlue combines AI-powered security operations, advanced threat intelligence, and elite human expertise to provide the most comprehensive portfolio of strategic advisory, managed security, offensive security, and incident response services.

ONLY UK BASED - Employment Contract

Working Schedule: The working hours are 08:00–16:00 or 9:00–17:00 local time in the UK, depending on daylight saving time. The position follows a rotating working-day schedule that includes weekend coverage. Working days may rotate between Tuesday–Saturday and Sunday–Thursday, according to the team rotation.

We are looking for curious, diligent, technical people to be a part of our Global Security Operations team. As a member of this elite team, you’ll take an integral role, providing Managed Detection and Response (MDR) and Managed Extended Detection and Response (MXDR) services to large organisations around the globe. You’ll be working closely with some of the best minds in incident response, malware analysis, and security research, partnering with our customers and partners to defend against the most advanced adversaries.

We value our people and empower them to work remotely. As we operate a ‘follow the sun’ global model we don’t ask our people to work unsociable hours.

We are currently requiring candidates with Fluent German along with fluent English for this role. French language skills would be a plus.

What You'll Be Responsible For:

• Being the point of escalation and performing security analysis of the most critical endpoint alerts (MDR)
• Applying your expertise to piece together the attack chain across customers complex environments including cloud, identity, email, network, and endpoint (MXDR)
• Participating in various stages of incident investigations including taking decisive steps to respond to active breaches and protect our customers
• Threat hunting across customers environments searching for attackers or remnants of their activity
• Analysis and research into new, emerging, or trending attacks, actors, malware samples, and TTPs
• Ability to collect, process, and exploit OSINT to facilitate the creation of better hunting queries and contribute the creation of Threat Alerts.
• Engaging in customer-facing interactions at all levels from SOC analysts to c-suite executives

What We Are Looking For

• 6+ years of relevant cybersecurity experience with a strong knowledge working in security operations
• 3+ years of relevant cybersecurity experience in at least two of the following is a must:

○ Endpoint security, malware analysis, threat hunting, penetration testing, incident response, reverse engineering, or digital forensics

• Strong knowledge of modern operating systems

○ Windows – a must

○ OS X and Linux – advantage

• Solid foundation in networking protocols and architectures
• Experience with a scripting language (Python, Bash, PowerShell, etc.)
• Self-motivated and results-oriented; capable of leading and completing assignments without supervision
• Strong organisational skills and ability to handle a wide range of tasks and re-prioritize them on short notice
• Motivation to constantly improve processes and methodologies
• Able both independently as well collaborate within a team in a remote work setting
• Excellent interpersonal, verbal and written communication skills, ability to elucidate technical content to non-technical personnel
• Must have excellent English reading, writing, and speaking skills

Strong advantage to candidates with multiple EU languages

Education

• A high school diploma or equivalent is required; a college or university degree is a plus.

Why Join LevelBlue?

At LevelBlue, you’re not just an employee—you’re part of a team making a real difference in the world of cybersecurity. We foster a culture of innovation and creativity where your contributions are valued, and you’ll have the support and resources to grow and thrive.

This role is open to candidates legally authorized to work in the UK. At LevelBlue, we support flexible work and bring people together in person for key moments based on role, team, and business needs.

LevelBlue is committed to a culture of respect, inclusion, and equal opportunity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other status protected under applicable law.

To all agencies: Please do not contact LevelBlue employees outside of the Talent Acquisition team. LevelBlue’s policy is to only accept resumes from agencies through its approved agency process and with a valid agreement in place. Any resume submitted outside this process will be considered the property of LevelBlue, and no fee will be paid if a candidate is hired from such a submission.

#LI-KD1