Senior Threat Analyst - MDR & Threat Hunting Lead

Sophos Group; Canada; On-site; CAD 86,000 - 143,000; Full time

Benefits offered by this job

Bonus eligibility

Comprehensive benefits package

Remote-first culture

Job summary

Sophos is seeking a Senior Threat Analyst – Tier I for its Managed Detection and Response (MDR) team in Canada. You will provide monitoring, detection, and response services to protect customer environments and work with threat hunters, incident responders, engineers, and ethical hackers using enterprise logs and endpoint data to drive investigations and neutralize threats.

You will lead and mentor Tier I Analysts on escalated cases, document findings meticulously, and stay current on MITRE

Qualifications

• 5+ years in a SOC/MDR or cybersecurity-focused IT role.
• Proficient with endpoint and network security tools (EDR/IDS/IPS).
• Solid Windows, Linux or macOS telemetry and event log analysis.
• Strong incident response and threat hunting experience.
• Knowledge of MITRE ATT&CK framework is desirable.

Responsibilities

• Monitor, investigate, and respond to alerts from the Sophos stack.
• Mentor Tier I Analysts through escalated cases and ensure proper investigations.
• Perform end-to-end analysis of suspicious activity to define scope and risk.
• Identify threats across customer environments using approved playbooks.
• Document findings and outcomes in the MDR case management system.
• Conduct threat hunting to uncover potential threats in the MDR base.
• Investigate phishing, suspicious binaries, and behavioral anomalies.
• Assist with detection tuning and false-positive reduction.
• Stay informed on threat actor tactics and Sophos threat research.
• Research IOCs and active exploits to stay ahead of threats.
• Contribute to knowledge bases and process improvements.
• Handle case workflows and client handovers across global teams.
• Engage with clients via chat, phone, and tickets.
• Support development of SOC security workflows and tooling.

Skills

SOC experience

MDR expertise

EDR/IDS/IPS

Windows OS

Linux/macOS

Threat hunting

Incident response

Communication

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

EDR

SIEM

Job description

Sophos is seeking a Senior Threat Analyst – Tier I for its Managed Detection and Response (MDR) team in Canada. You will provide monitoring, detection, and response services to protect customer environments and work with threat hunters, incident responders, engineers, and ethical hackers using enterprise logs and endpoint data to drive investigations and neutralize threats.

You will lead and mentor Tier I Analysts on escalated cases, document findings meticulously, and stay current on MITRE