Specialist, Cybersecurity - Public Sector

LevelBlue reduces risk and builds lasting resilience so organizations can innovate and advance their mission with confidence. As the world’s most analyst-recognized and largest pure-play managed security services provider, LevelBlue elevates client outcomes that matter: stronger defense, faster response, and sustained business continuity. LevelBlue combines AI-powered security operations, advanced threat intelligence, and elite human expertise to provide the most comprehensive portfolio of strategic advisory, managed security, offensive security, and incident response services. Title: Specialist, Cybersecurity (SOC Analyst, Tier 1.5) Location: Remote (US-based only) Shift: 3rd shift; 4 days per week (Sunday-Wednesday; 10PM to 8AM Eastern) Date: Jan 2026 The SOC Analyst, Tier 1.5 will join the LevelBlue 24/7 Security Operations Center (SOC) providing cyber threat monitoring for federal customers. The candidate will demonstrate expertise in cybersecurity incident detection and response leveraging SIEM and EDR technologies. Skills and familiarity with Splunk or equivalent solutions a plus. This position also requires strong problem solving and communication skills, as well as the ability to work alone and as a member of the SOC team. Responsibilities:

• Monitor, analyze and report on cyber threats identified through leveraging Security Information and Event Management (SIEM), a variety of security tools, and proactive threat hunting.
• Investigate intrusion attempts and perform in-depth analysis of exploits.
• Develop and follow detailed operational processes and procedures to appropriately analyze, escalate and assist in the remediation of information security-related incidents.
• Analyze a variety of network and host-based security appliance logs (Firewalls, NIDS, HIDS, Sys Logs, etc.) to determine the correct remediation actions and escalation paths for each incident.
• Communicate technical investigation details with customers and other members of the team.

Qualifications:

• Ability and technical baseline skills to acquire in-depth knowledge of network and host security technologies and continuously improve these skills.
• Strong written and verbal communication skills.
• Sound problem resolution, judgment, negotiating and decision-making skills.
• Strong work ethic and commitment to accomplish assigned tasks.
• Strong knowledge of the incident response lifecycle and analysis techniques
• Direct experience in Security Operations Center work, Incident Response, Network Event Analysis, Threat Analysis, and/or Intelligence Analysis is required.
• Knowledge of IDS/IPS, firewalls, SIEM or other security platforms in large enterprise environments is required.
• Must be a US citizen living in the US.

Education:

• A high school diploma or equivalent is required; a college or university degree is a plus.

This is a remote opportunity open to anyone legally authorized to work in the United States. Guided by our flexible workplace philosophy, Moments That Matter, people gather in the office when in-person interaction is most impactful; full-time remote employees may be asked to travel occasionally based on the needs of the team and the business. LevelBlue is an Equal Opportunity Employer. We are committed to creating an inclusive environment for all employees and applicants. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected status under applicable laws. LevelBlue is also committed to providing reasonable accommodations to qualified individuals with disabilities. If you require assistance or accommodation due to a disability, please contact our Human Resources department at [email protected]. Per Federal government contracting requirements, candidate must (1) be a US citizen, (2) pass and maintain a National Agency Check with Local Agency and Credit Checks (NACLC), and (3) obtain all required security clearance(s). To All Agencies: Please, no phone calls or emails to any employee of LevelBlue outside of the Talent Acquisition team. LevelBlue’s policy is to only accept resumes from agencies via the LevelBlue Agency Portal. Agencies must have a valid fee agreement in place and they must have been assigned the specific requisition to which they submit resumes, by the Talent Acquisition team. Any resume submitted outside of this process will be deemed the sole property of Trustwave and in the event a candidate is submitted outside of this policy is hired, no fee or payment of any kind will be paid. #LI-KD1 Apply tot his job Apply To this Job