Cyber Threat Analyst – Global Threat Operations

About the role

LevelBlue is seeking a Cyber Threat Analyst to join its Global Threat Operations (GTO) team within Managed Security Services. The analyst will work during US business hours, providing timely detection, analysis, and response to security events for customers worldwide.

Key responsibilities

• Perform network analysis using strong TCP/IP skills to identify and understand detected threats.
• Analyze and respond to security events from firewalls, IDS, IPS, SIEM, WAF and other data sources within documented SLA.
• Handle customer tickets and incident notifications, ensuring compliance with SLA standards.
• Tune security devices for blocking and reporting based on customer business needs.
• Communicate professionally with customers and internal teams, taking responsibility for satisfaction and service success.
• Provide guidance on managed services, device configurations, and detected threats.
• Follow policies, procedures, and security best practices, escalating issues when required.

Required profile

• Basic proficiency in information security best practices and network security architecture.
• Awareness of current cyber‑security events, patching and remediation efforts.
• Experience with Unix/Linux operating systems.
• Fluent English communication skills.
• High school diploma required; college degree is a plus.
• Legal authorization to work in the Philippines.

Required skills

• TCP/IP networking
• Sourcefire/Snort security products
• IPTables/packet‑filter firewalls
• Scanning technologies
• Log collection and analysis tools
• Firewalls, IDS, IPS, SIEM, Web Application Firewall (WAF)