Remote Incident Response Analyst – MDR & Threat Hunting

VulnU; Oxford; Hybrid; GBP 45,000 - 65,000; Full time

Job summary

Sophos in the United Kingdom is seeking an Incident Response Analyst to investigate, contain, and respond to cyber incidents across Windows, macOS, and Linux, leveraging MDR resources and SophosLabs. You will document analyses and communicate findings to customers.

The role requires 3+ years of experience in cyber investigations, knowledge of incident response toolsets, and the ability to work under pressure, including weekends/holidays. Remote-first with some hybrid flexibility is available.

Qualifications

• 3+ years of experience conducting cyber security investigations in a methodical manner.
• Knowledge of incident response toolsets, methodologies, and techniques.
• Ability to work under high-pressure situations where response time matters.

Responsibilities

• Investigate, contain, and respond to cyber incidents.
• Maintain accurate documentation for analyses performed during incidents.
• Provide clear communication to MDR customers during incidents.
• Collaborate with SophosLabs, Detection Engineering, and Threat Hunting teams to improve detection logic.
• Assist in creating detailed incident reports for MDR customers and MSPs.

Skills

Cyber security investigations

Incident response tools

Windows and Linux command scripting

Education

Cyber security certifications (GCIH/CompTIA Sec+/eJPT)

Job description

Sophos in the United Kingdom is seeking an Incident Response Analyst to investigate, contain, and respond to cyber incidents across Windows, macOS, and Linux, leveraging MDR resources and SophosLabs. You will document analyses and communicate findings to customers.

The role requires 3+ years of experience in cyber investigations, knowledge of incident response toolsets, and the ability to work under pressure, including weekends/holidays. Remote-first with some hybrid flexibility is available.