Teams at LevelBlue

Conduct client-facing digital forensics and incident response investigations, including incident identification, containment, eradication, recovery, evidence preservation, root-cause analysis, log analysis, and report writing. Collaborate with internal security teams and client IT, legal, compliance, and vendor stakeholders. Manage multiple engagements independently, communicate findings to technical and non-technical audiences, support on-call operations, and occasionally travel or work outside standard hours.

Lead client-facing cybersecurity consulting engagements focused on Microsoft Sentinel SIEM engineering, detection content, Microsoft Defender XDR, Purview, Azure security, and SOC optimization. Design and implement analytics, integrations, automation, playbooks, and operational processes; conduct workshops; produce client-ready technical artifacts; advise stakeholders; support pre-sales; and independently manage concurrent engagements.

Own the strategy, roadmap, and commercial success of an AI SOC platform supporting MDR, MXDR, managed network security, and managed cloud security. Drive AI-assisted triage, automation, integrations, APIs, multi-tenancy, partner enablement, and MSSP-scale service packaging. Define network and cloud security capabilities, governance requirements, competitive positioning, pricing, and business cases while presenting to customers, partners, sales teams, and executives. Measure automation, workload reduction, cost-to-serve, adoption, retention, and partner revenue.