Senior Incident Response Lead — Crisis IR Expert

Sophos; Oxford; Remoto; GBP 65.000 - 95.000; Tempo pieno

Descrizione del lavoro

Sophos is seeking a Senior Incident Response Consultant to join our IR services. You will spearhead incident response engagements, lead a team of consultants, and coordinate customer communications to contain threats and deliver remediation guidance.

You will produce executive summary reports with MITRE ATT&CK mappings, and mentor junior analysts while coordinating across multiple incidents in a remote-first environment.

Competenze

• 5+ years leading incident response investigations (ransomware).
• Experience leading BEC investigations.
• Continual learning and threat landscape awareness.
• Proven remediation of ransomware threats.
• Strong knowledge of the Incident Response process.
• Excellent oral and written communication.
• Ability to manage time and delegate across incidents.
• Willingness to work weekends when required.
• Familiarity with MITRE ATT&CK.
• Mentoring junior analysts.
• Team-player with knowledge sharing.
• Post-secondary education in Cybersecurity.

Mansioni

• Lead incident response engagements and guide customer strategy.
• Run kickoff calls and daily update calls with customers.
• Direct investigations and delegate tasks to analysts.
• Produce executive summary reports mapped to MITRE ATT&CK.
• Ensure timely actions to neutralize threats and document root causes.

Conoscenze

Incident response leadership

Ransomware investigations

Executive communication

Team mentorship

Forensic coordination

MITRE ATT&CK proficiency

Formazione

Cybersecurity degree or equivalent

Strumenti

Splunk

ELK

SQL queries

PowerShell/Python/Bash scripting

Descrizione del lavoro

Sophos is seeking a Senior Incident Response Consultant to join our IR services. You will spearhead incident response engagements, lead a team of consultants, and coordinate customer communications to contain threats and deliver remediation guidance.

You will produce executive summary reports with MITRE ATT&CK mappings, and mentor junior analysts while coordinating across multiple incidents in a remote-first environment.