Cyber Threat Analyst – Global Threat Operations

About the role

LevelBlue is seeking a Cyber Threat Analyst to join its Global Threat Operations team within Managed Security Services. The role works US day shift, may include weekends, and focuses on detecting, analyzing, and responding to security threats for customers in the Philippines.

Key responsibilities

• Perform network analysis using strong TCP/IP skills to understand detected threats.
• Analyze and respond to security events from firewalls, IDS, IPS, SIEM, WAF and other sources within SLA.
• Respond to customer tickets and incident notifications according to SLA standards.
• Tune security devices for blocking and reporting based on business needs.
• Communicate professionally with customers and internal teams, both verbally and in writing.
• Ensure customer satisfaction and success of managed services.
• Address customer questions about managed devices and detected threats.
• Follow policies, procedures, and security best practices.
• Resolve problems independently and follow proper escalation procedures.

Required profile

• Basic proficiency in information security best practices, network security architecture, and current cyber‑security events.
• Experience with Unix/Linux operating systems and networking concepts.
• Excellent customer service, analytical thinking, and problem‑solving abilities.
• Strong oral and written communication skills in English.
• High school diploma required; college degree is a plus.
• Legal authorization to work in the Philippines.

Required skills

• TCP/IP networking
• Firewalls, IDS, IPS, SIEM, Web Application Firewall (WAF)
• Sourcefire/Snort security products
• IP Tables / packet‑filter firewalls
• Log collection and analysis tools
• Scanning technologies
• Unix/Linux operating systems