Remote Threat Analyst 3 - MDR Defense & Threat Hunting

Sophos; Oxford; Remote; CAD 74,000 - 123,000; Full time

Benefits offered by this job

Remote-first workplace

Comprehensive benefits

Job summary

Sophos in Canada is seeking a Threat Analyst 3 to join our Managed Detection and Response (MDR) team. You will monitor, investigate, and respond to alerts using the Sophos security stack, working with threat hunters, incident responders, and engineers to neutralize cyber threats across customer environments.

The role requires 3+ years in a SOC/MDR or cybersecurity-focused IT role, strong incident response skills, and the ability to document investigations clearly.

Qualifications

• 3+ years in a SOC/MDR or cybersecurity-focused IT role.
• Experience validating and triaging complex alerts with endpoint and network tools.
• Strong understanding of Windows, Linux, or macOS environments and telemetry analysis.
• Familiarity with threat hunting methodologies and attacker behavior.

Responsibilities

• Monitor, investigate, and respond to alerts across the Sophos stack.
• Mentor junior analysts through escalated cases and ensure thorough investigations.
• Perform end-to-end analysis of suspicious activity to assess scope and risk.
• Identify and respond to threats across customer environments using playbooks.
• Document findings and outcomes in the MDR case management platform.
• Conduct threat hunting and contribute to knowledge bases.

Skills

SOC/MDR experience

Endpoint security tools

Network security tools

Windows/Linux/macOS

Incident response

Threat hunting

Communication skills

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

EDR

IDS/IPS

Malware detection

SIEM

PowerShell

OSQuery

Job description

Sophos in Canada is seeking a Threat Analyst 3 to join our Managed Detection and Response (MDR) team. You will monitor, investigate, and respond to alerts using the Sophos security stack, working with threat hunters, incident responders, and engineers to neutralize cyber threats across customer environments.

The role requires 3+ years in a SOC/MDR or cybersecurity-focused IT role, strong incident response skills, and the ability to document investigations clearly.