Jobs at Trustwave

Investigate and respond to cybersecurity incidents through digital forensics, evidence collection, log analysis, root-cause investigation, containment, eradication, and recovery. Prepare clear incident reports for technical and non-technical audiences, maintain investigation documentation, and collaborate with internal specialists and client IT, legal, compliance, and vendor teams. Participate in on-call support, occasional travel, and work outside standard hours when required.

Own HubSpot administration, governance, workflows, data quality, imports, migrations, and Salesforce integration support. Manage marketing technology integrations, email deliverability, segmentation, list hygiene, and campaign attribution. Troubleshoot HubSpot CMS functionality and partner with web, IT, Sales Operations, and regional teams. The role requires hands-on B2B marketing operations experience, CRM data cleanup expertise, and knowledge of email best practices.

Lead and perform Tier 2/3 security detection, incident response, threat hunting, malware and attack-chain investigations across customer environments. Escalate complex incidents, engage customers and senior stakeholders, and research emerging threats. Support EU SOC operations through analyst coaching, workload coordination, service-level monitoring, process improvement, onboarding, and technical leadership. The role requires fluent German and English, rotating weekend coverage, and UK-based employment authorization.

Lead hands-on digital forensics and incident response engagements, including incident containment, eradication, recovery, evidence preservation, forensic analysis, log analysis, reporting, and client presentations. Manage workstreams, supervise junior colleagues, quality-control deliverables, develop procedures, and advise senior stakeholders. The role requires occasional travel, after-hours support, and participation in an on-call schedule.

Provides Tier 3 escalation and advanced MDR/MXDR analysis across endpoint, cloud, identity, email, and network environments. Investigates active breaches, conducts threat hunting, researches emerging threats and malware, develops hunting queries and threat alerts using OSINT, and engages customers from SOC analysts through executives. Requires fluent German and English, rotating UK working-day coverage, and strong expertise in security operations, incident response, endpoint security, malware analysis, and related disciplines.

Lead hands-on digital forensics and incident response engagements, investigating cybersecurity incidents across endpoints, servers, networks, SaaS, and cloud environments. Responsibilities include evidence collection and analysis, incident containment and recovery, root-cause investigation, report writing, client presentations, quality control, engagement planning, and mentoring junior staff. The role requires client-facing communication with technical and executive stakeholders, occasional travel, after-hours support, and participation in an on-call schedule.

Provides senior-level 24/7 SOC monitoring and response for managed security services. Analyzes complex endpoint security events, investigates threats, tunes detection and blocking systems, improves security processes, and supports incident response. Acts as a customer-facing technical escalation point, mentors analysts, documents procedures, and participates in rotating weekend and on-call coverage. Fluent German and English are required, with Palo Alto Cortex XDR and relevant security certifications preferred.

Provides senior-level 24/7 security monitoring and response within a managed security services SOC. Responsibilities include analyzing complex endpoint security events, threat hunting, incident investigation, tuning and baselining detection tools, improving security processes, supporting DFIR teams, resolving technical issues, mentoring analysts, and serving as a customer-facing escalation point. Requires fluent English and German, UK work authorization, rotating weekend coverage, and strong incident response and endpoint security knowledge.

Provide Tier 3 escalation and advanced MDR/MXDR analysis for critical endpoint alerts and complex cloud, identity, email, network, and endpoint environments. Investigate active breaches, conduct threat hunting, research emerging threats and malware, develop hunting queries and threat alerts, and engage customers from SOC analysts through executives. The role requires fluent German and English, rotating weekend coverage, and remote work from the UK.