Incident Response Analyst

📋 Description

• Utilize Sophos technologies to investigate, contain, and respond to cyber incidents
• Conduct analysis of cyber incidents for malware, ransomware, and other common attack types
• Maintain accurate and detailed documentation for analysis performed during cyber incidents
• Recognize and codify attacker tools, tactics, and procedures that can be applied to current and
• Provide clear and concise communication to MDR customers during cyber incidents
• Work closely with internal SophosLabs, Detection Engineering, and Threat Hunting teams to

🎯 Requirements

• 3+ years of experience conducting cyber security investigations in a methodical manner and
• Knowledge of incident response toolsets, methodologies, and techniques
• Experience creating technical documentation and technical reports
• Ability to work under high-pressure situations, when response time matters, to disrupt adversary
• Network and endpoint (macOS, Linux, Windows) investigation experience; IDS, IPS, EDR, and basic
• Basic understanding of at least one of the following: OSQuery, SQL, and KQL

🎁 Benefits

• Remote-first working model
• Employee-led diversity and inclusion networks
• Annual charity and fundraising initiatives and volunteer days
• Global employee sustainability initiatives
• Global fitness and trivia competitions
• Global wellbeing days