Senior Threat Analyst, MDR | 24/7 Cyber Defense

Sophos; Canada; Remote; CAD 66,000 - 110,000; Full time

Benefits offered by this job

Bonus eligibility

Comprehensive benefits package

Job summary

Sophos is seeking a Threat Analyst for its MDR team in Canada. You will monitor, detect, and respond to cyber threats, working with threat hunters, IR analysts, and engineers to investigate incidents and neutralize threats using enterprise logs and endpoint data.

You will analyze events, communicate findings to technical and executive audiences, and drive continuous improvement through detailed recommendations. The role requires 3+ years in a SOC and a passion for cybersecurity.

Qualifications

• Minimum 3+ years in a SOC or security operations role.
• Experience with threat hunting and endpoint/network monitoring.
• Proficient in Windows admin (workstations/servers) and either macOS or Linux.
• Familiarity with MITRE ATT&CK framework and incident response.
• Knowledge of TCP/IP, logs, and network traffic analysis.

Responsibilities

• Investigate and analyze logs and security events using Sophos tooling.
• Identify and respond to threats within customer environments.
• Document findings for technical and executive audiences.
• Drive issue resolution and provide recommendations to minimize risk.
• Collaborate with security and threat response teams.

Skills

SOC experience

Threat hunting

Endpoint security

Network security monitoring

Windows OS admin

Scripting with PowerShell

Analytical thinking

Communication skills

MITRE ATT&CK knowledge

SQL and OSQuery

Tools

SIEM

OSQuery

Windows server administration

Job description

Sophos is seeking a Threat Analyst for its MDR team in Canada. You will monitor, detect, and respond to cyber threats, working with threat hunters, IR analysts, and engineers to investigate incidents and neutralize threats using enterprise logs and endpoint data.

You will analyze events, communicate findings to technical and executive audiences, and drive continuous improvement through detailed recommendations. The role requires 3+ years in a SOC and a passion for cybersecurity.