Remote Threat Analyst II - MDR Security Operations

Lever, Inc.; Oxford; Hybrid; GBP 45,000 - 65,000; Full time

Job summary

Sophos is seeking a Threat Analyst - Tier II to join our Managed Detection and Response team. You will provide monitoring, detection, and response to defend customer environments, collaborating with threat hunters, incident responders, engineers, and ethical hackers using enterprise logs and endpoint data.

You will analyze security events, guide escalations, onboard new analysts, and contribute to ongoing improvements while staying current on emerging threats and techniques.

Qualifications

• 2+ years in a SOC or cyber security team
• Experience with endpoint and network security, IDS/IPS/EDR
• Experience with threat hunting and incident response
• Proficient in Windows log analysis and basic network analysis
• Willingness to work 24x7x365 cycles

Responsibilities

• Investigate and analyze logs and security events using Sophos tooling
• Guide Tier I analysts and handle escalations
• Onboard and train new Threat Analysts
• Create cases and track clients through threat neutralization
• Document findings for technical and executive audiences
• Provide recommendations to minimize risk in customer environments
• Interact with customers via Email, Phone, or Tickets
• Collaborate with core security and threat response teams
• Research emerging Indicators of Compromise and exploits
• Conduct threat hunting across MDR customer base
• Contribute to Security Operations process improvements
• Gather metrics for reporting threat trends and intelligence

Skills

SOC experience

Threat hunting

Windows

Linux

Threat analysis

Incident response

Log analysis

Network security

Communication

Education

Bachelor's degree in IT/CS

Tools

PowerShell

SQL

OSQuery

SIEM

Job description

Sophos is seeking a Threat Analyst - Tier II to join our Managed Detection and Response team. You will provide monitoring, detection, and response to defend customer environments, collaborating with threat hunters, incident responders, engineers, and ethical hackers using enterprise logs and endpoint data.

You will analyze security events, guide escalations, onboard new analysts, and contribute to ongoing improvements while staying current on emerging threats and techniques.