Incident Response Engineer 2

📋 Description

• Perform advanced investigative and forensic analysis across endpoints, network logs, and cloud
• Execute containment and response actions to neutralize active threats as directed by Incident
• Validate indicators of compromise (IOCs) and correlate alerts, artifacts, and telemetry to
• Maintain clear and accurate engagement documentation, including trailheads, timelines, and playbooks
• Provide guidance and mentorship to junior IR and SOC analysts to ensure adherence to CIRT
• Prepare technical findings and summaries for inclusion in customer updates and post-incident reports

🎯 Requirements

• 2+ years of experience in incident response, MDR, SOC, or security operations roles
• Solid technical understanding of endpoint forensics, log analysis, and common attack techniques
• Experience investigating malware, credential theft, ransomware, or similar threats
• Ability to correlate alerts and telemetry to determine incident scope and root cause
• Strong written and verbal communication skills for documenting findings and contributing to
• Experience mentoring or guiding junior analysts

🎁 Benefits

• Sophos operates a remote-first working model, making remote work the primary option for most
• Our people – we innovate and create, all of which are accompanied by a great sense of fun and team
• Employee-led diversity and inclusion networks that build community and provide education and
• Annual charity and fundraising initiatives and volunteer days for employees to support local
• Global employee sustainability initiatives to reduce our environmental footprint
• Global fitness and trivia competitions to keep our bodies and minds sharp