Jobs at LevelBlue

Own HubSpot administration, governance, workflows, data quality, integrations, imports, migrations, email deliverability, segmentation, and list management. Partner with Sales Operations, IT, regional teams, and web teams on Salesforce integration, marketing technology, CRM cleanup, and system improvements. Monitor email performance and recommend data-driven improvements to cadence, segmentation, and sending practices.

Provides Tier 3 escalation and advanced security analysis for MDR and MXDR customers. Responsibilities include investigating endpoint alerts, reconstructing attack chains across cloud, identity, email, network, and endpoint environments, responding to active breaches, threat hunting, researching emerging threats and malware, developing hunting queries and threat alerts, and engaging with customers from SOC analysts to executives. Requires strong security operations expertise, multilingual communication, scripting, operating systems, networking, and incident response capabilities.

Provides 24/7 threat detection and response for managed security clients. Analyzes complex endpoint security events, investigates incidents, tunes detection and blocking technologies, improves monitoring processes, supports DFIR teams, and handles escalations. The role includes customer interaction, analyst mentoring, documentation, rotating weekend and on-call coverage, and requires fluent German and English while being based and legally authorized to work in the UK.

Provides senior-level security operations support within a 24/7 Threat Detection and Response team. Analyzes complex endpoint security cases, investigates threats, tunes detection and blocking technologies, improves security processes, supports incident response, and mentors analysts. The role serves as a technical escalation point for customers, DFIR teams, and client security teams, with rotating weekend and on-call coverage. Fluency in German and English is required, and the position is UK-based.

Leads hands-on digital forensics and incident response engagements, investigating cybersecurity incidents across endpoints, servers, networks, and cloud platforms. Responsibilities include evidence collection, root-cause analysis, incident containment and recovery, report writing, client presentations, quality control, engagement planning, and mentoring junior staff. The role also manages senior stakeholder relationships, contributes to service procedures, supports on-call response, and may require occasional travel and work outside standard business hours.

Investigates and responds to cybersecurity incidents through digital forensics, evidence collection, breach analysis, root-cause determination, and recovery support. The specialist analyzes servers, workstations, networks, SaaS platforms, and logs; produces clear incident reports; maintains investigation documentation; and collaborates with DFIR, threat intelligence, legal, compliance, IT, and client teams. The role includes occasional travel, after-hours support, and participation in an on-call schedule.

Leads EU SOC operations while performing hands-on Tier 2/3 security analysis, incident response, threat hunting, malware and endpoint investigations, and customer escalations. Coaches analysts, coordinates workload, monitors service metrics, supports onboarding, and improves SOC processes. Requires strong cybersecurity experience, customer communication skills, fluent English and German, and expertise in at least two areas such as endpoint security, malware analysis, threat intelligence, incident response, penetration testing, reverse engineering, or digital forensics.

Leads hands-on digital forensics and incident response engagements, investigating cybersecurity incidents across endpoints, servers, networks, and cloud platforms. Responsibilities include evidence collection, forensic analysis, incident containment and recovery, reporting, client presentations, quality control, engagement planning, and mentoring junior staff. The role serves as a senior client contact and participates in on-call support, occasional travel, and work outside standard business hours.

Provides Tier 3 escalation and advanced MDR/MXDR security analysis for global customers. Responsibilities include investigating critical endpoint alerts, reconstructing attack chains across cloud, identity, email, network, and endpoint environments, responding to active breaches, threat hunting, researching malware and adversary tactics, developing hunting queries and threat alerts, and engaging with customers from SOC analysts through executives. The role requires fluent German and English and follows a rotating UK working-day schedule with weekend coverage.