Cyber Threat Engineer

Cyber Threat Engineer - Global Threat Operations Join to apply for the Cyber Threat Engineer - Global Threat Operations role at Trustwave, A LevelBlue Company. About Trustwave Trustwave is a leading cybersecurity and managed security services provider focused on threat detection and response. We uncover threats that others can’t and respond quicker than others can to protect against the devastating impacts of cyberattacks. We’re a world-class team of cyber consultants, threat hunters and researchers serving clients in 96 countries. At Trustwave, you can learn alongside the best, make a personal impact on a global scale, and solve new challenges every day. Learn more about us at Role overview A Cyber Threat Engineer is a member of the Threat Detection and Response (TDR) team within Trustwave Managed Security Services (MSS). This team acts as the monitoring and response extension of a Digital Forensics and Incident Response Services (DFIR) team to provide 24/7 monitoring. In addition to possessing technical knowledge, a Threat Engineer interacts extensively with customers and partners using polite professional etiquette and serves as a technical point of escalation within TDR. Responsibilities Analyze escalated, complex cases involving a pattern of security events from endpoint detection and response technologies. Resolve intractable technical problems within managed security solutions as part of a sustained improvement project. Create, improve, and document processes for the management and monitoring of security solutions. Tune devices for blocking and reporting based on customer business need. Baseline threat detection devices for complex and potentially breached customer environments. Test and improve endpoint detection, protection, and response policies. Take responsibility for customer satisfaction and overall success of managed services. Timely respond to questions and concerns of the DFIR and client security teams concerning incident investigation and response. Adhere to policies, procedures, and security best practices. Resolve problems independently and understand appropriate documentation and escalation procedures. Perform rotating on-call duties (nights/weekend rotations). Act as a mentor and escalation point for analysts within the Threat Detection and Response team. Skills & Knowledge Intermediate skills/knowledge in Cyber investigation and incident handling best practices Endpoint Detection and Response Unix/Linux and Windows system administration Current exploit and remediation techniques Threat Hunting and Investigation Web Services Administration Log collection and analysis tools Experience & Qualifications Preferred: Advanced Palo Alto Cortex XDR, intrusion analysis experience, incident handling and documentation Excellent customer service, analytical thinking and problem-solving skills Strong oral and written communication skills Self-managed and team-oriented with attention to deadlines and detail Highly motivated Certifications (preferred) GCIA, GCIH, Security+, OSCP, or CEH Vendor-specific incident handling and investigation certifications such as Palo Alto Networks Cortex-related certifications, SentinelOne IR, CCFR, PC DRA Education A high school diploma or equivalent is required; a college or university degree is a plus. This is a remote opportunity open to anyone legally authorized to work in the Philippines. Flexible workplace policy applies; full-time remote employees may be asked to travel occasionally based on team and business needs. Trustwave is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other federally protected class. #J-18808-Ljbffr