Senior Incident Response Analyst

Investigate, contain, and respond to cyber incidents using Sophos technologies, focusing on malware, ransomware, and advanced threats.

Mentor junior incident response and MDR analysts by providing technical guidance, reviews, and escalation support.

Collaborate with internal teams (SophosLabs, Detection Engineering, Threat Hunting) to improve detection logic and contribute to incident reporting and customer communications.

Minimum 4 years of cyber security investigation experience or 2 years incident response engagements.

Experience with network architecture, IT infrastructure, and endpoint investigation (macOS, Linux, Windows).

Familiarity with IDS, IPS, EDR, and malware analysis tools; knowledge of OSQuery, SQL, or KQL.

Ability to work under pressure, including some weekends and holidays; ability to create detailed technical documentation and reports.

Experienced with frameworks like MITRE ATT&CK and Cyber Kill Chain, indicating strong analytical incident response skills.

Capable of customer interaction through calls and meetings, providing clear priority recommendations and excellent support.

Holds advanced cybersecurity certifications (e.g., GCFE/GCFA, CompTIA CySA+, OSCP) or published recognized work in the cybersecurity field.