Security Engineer (Threat Response), Sophos Security Team (IDR)

📋 Description

• Lead complex investigations throughout the incident lifecycle, from triage and evidence collection
• Act as a trusted point of contact for security issues, coordinating response across incident
• Conduct DFIR and endpoint forensics, including log, network, and packet analysis, malware analysis
• Develop and improve detections, playbooks, orchestrations, and prevention mechanisms using evidence
• Build production-quality automation that reduces repetitive work, improves consistency, and enables
• Design reusable, model-agnostic skills and workflows that can operate across approved AI and agent

🎯 Requirements

• Strong enterprise incident response experience across endpoint, identity, cloud, network, and
• Practical experience with DFIR, endpoint and firewall forensics, threat hunting, detection
• Ability to develop reliable automation using Python or a comparable programming language.
• Experience working with APIs and querying data using SQL.
• Working knowledge of Git and GitHub engineering practices, including pull requests, code reviews
• Hands-on familiarity with Claude, Codex, Copilot, or comparable coding-agent technologies.

🎁 Benefits

• Base salary ranging from $86,000 to $143,000 CAD.
• Additional compensation, including bonus eligibility.
• Comprehensive employee benefits package.
• Remote-first working model, with remote work serving as the primary option for most employees.
• Employee-led diversity and inclusion networks focused on community, education, and advocacy.
• Annual charity, fundraising, and employee volunteer initiatives.