OT Incident Response Specialist — Remote

VulnU; Oxford; Hybrid; GBP 65,000 - 100,000; Full time

Job summary

Sophos is looking for an Operational Technology Incident Response Consultant to protect industrial environments from cyber threats. You will lead investigations, analyze logs and network data, and provide expert guidance to customers on remediation and risk reduction. The role spans threat hunting, monitoring, detection engineering and advisory work.

The position supports 24x7x365 MDR services, with a remote-first model. Occasional on-site presence may be required depending on client engagements.

Qualifications

• Experience in cybersecurity, incident response or security operations.
• 2+ years supporting OT/ICS environments preferred.
• Strong analysis of logs, network traffic and threat intel.

Responsibilities

• Lead OT incident investigations and response.
• Perform root cause analysis and scope assessment of OT incidents.
• Develop and tune OT-specific detection and monitoring use cases.

Skills

Incident response

Threat hunting

SIEM

Network traffic analysis

OT/ICS awareness

English communication

Tools

SIEM technologies

Firewalls

Job description

Sophos is looking for an Operational Technology Incident Response Consultant to protect industrial environments from cyber threats. You will lead investigations, analyze logs and network data, and provide expert guidance to customers on remediation and risk reduction. The role spans threat hunting, monitoring, detection engineering and advisory work.

The position supports 24x7x365 MDR services, with a remote-first model. Occasional on-site presence may be required depending on client engagements.