LevelBlue LLC
Principal Security Detection and Response Analyst (Tier 3 Analyst), German Speaking
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
About LevelBlue
LevelBlue reduces risk and builds lasting resilience so organizations can innovate and advance their mission with confidence. As the world’s most analyst-recognized and largest pure-play managed security services provider, LevelBlue elevates client outcomes that matter: stronger defense, faster response, and sustained business continuity. LevelBlue combines AI-powered security operations, advanced threat intelligence, and elite human expertise to provide the most comprehensive portfolio of strategic advisory, managed security, offensive security, and incident response services.
ONLY UK BASED - Employment Contract
Working Schedule
The working hours are 08:00–16:00 or 9:00–17:00 local time in the UK, depending on daylight saving time. The position follows a rotating working-day schedule that includes weekend coverage. Working days may rotate between Tuesday–Saturday and Sunday–Thursday, according to the team rotation.
About the Role
We are looking for curious, diligent, technical people to be a part of our Global Security Operations team. As a member of this elite team, you’ll take an integral role, providing Managed Detection and Response (MDR) and Managed Extended Detection and Response (MXDR) services to large organizations around the globe. You’ll be working closely with some of the best minds in incident response, malware analysis, and security research, partnering with our customers and partners to defend against the most advanced adversaries.
We value our people and empower them to work remotely. As we operate a ‘follow the sun’ global model we don’t ask our people to work unsociable hours.
Responsibilities
- Being the point of escalation and performing security analysis of the most critical endpoint alerts (MDR)
- Applying your expertise to piece together the attack chain across customers complex environments including cloud, identity, email, network, and endpoint (MXDR)
- Participating in various stages of incident investigations including taking decisive steps to respond to active breaches and protect our customers
- Threat hunting across customers environments searching for attackers or remnants of their activity
- Analysis and research into new, emerging, or trending attacks, actors, malware samples, and TTPs
- Ability to collect, process, and exploit OSINT to facilitate the creation of better hunting queries and contribute the creation of Threat Alerts.
- Engaging in customer-facing interactions at all levels from SOC analysts to c-suite executives
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Requirements
- 6+ years of relevant cybersecurity experience with a strong knowledge working in security operations
- 3+ years of relevant cybersecurity experience in at least two of the following is a must:
- Endpoint security, malware analysis, threat hunting, penetration testing, incident response, reverse engineering, or digital forensics
- Strong knowledge of modern operating systems
- Windows – a must
- OS X and Linux – advantage
- Solid foundation in networking protocols and architectures
- Experience with a scripting language (Python, Bash, PowerShell, etc.)
- Self-motivated and results-oriented; capable of leading and completing assignments without supervision
- Strong organisational skills and ability to handle a wide range of tasks and re-prioritize them on short notice
- Motivation to constantly improve processes and methodologies
- Able both independently as well collaborate within a team in a remote work setting
- Excellent interpersonal, verbal and written communication skills, ability to elucidate technical content to non-technical personnel
- Must have excellent English reading, writing, and speaking skills
- Strong advantage to candidates with multiple EU languages
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Education
A high school diploma or equivalent is required; a college or university degree is a plus.
Why Join LevelBlue?
At LevelBlue, you’re not just an employee—you’re part of a team making a real difference in the world of cybersecurity. We foster a culture of innovation and creativity where your contributions are valued, and you’ll have the support and resources to grow and thrive.
This role is open to candidates legally authorized to work in the UK. At LevelBlue, we support flexible work and bring people together in person for key moments based on role, team, and business needs.
LevelBlue is committed to a culture of respect, inclusion, and equal opportunity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other status protected under applicable law.
To all agencies: Please do not contact LevelBlue employees outside of the Talent Acquisition team. LevelBlue’s policy is to only accept resumes from agencies through its approved agency process and with a valid agreement in place. Any resume submitted outside this process will be considered the property of LevelBlue, and no fee will be paid if a candidate is hired from such a submission.
#LI-KD1
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location