Cyber Threat Analyst - Global Threat Operations

About the role

LevelBlue is seeking a Cyber Threat Analyst to join its Global Threat Operations (GTO) team within Managed Security Services. The analyst will work on the US shift (Fri‑Mon, 8 am‑7 pm Central) and will interact directly with customers and partners, providing professional, courteous support.

Key responsibilities

• Perform network analysis using strong TCP/IP knowledge to identify and understand threats.
• Analyze and respond to security events from firewalls, IDS, IPS, SIEM, WAF and other data sources within SLA.
• Handle customer tickets, incident notifications, and device tuning for blocking/reporting.
• Communicate effectively with customers and internal teams, ensuring satisfaction and service success.
• Follow policies, procedures, and security best practices; escalate when necessary.

Required profile

• Basic proficiency in information security best practices and network security architecture.
• Awareness of current cyber‑security events, patching, and remediation.
• Strong analytical, problem‑solving, and written/oral communication skills.
• Self‑managed, team‑oriented, detail‑focused and highly motivated.

Required skills

• Unix/Linux operating systems
• TCP/IP networking
• Sourcefire/Snort security products
• IPTables / packet‑filter firewalls
• Scanning technologies
• Log collection and analysis tools
• Experience with firewalls, IDS, IPS, SIEM, and Web Application Firewalls (WAF)