Senior Incident Response Lead — MDR & CIRT (Remote)

VulnU; Oxford; Hybrid; GBP 85,000 - 110,000; Full time

Job summary

Sophos is seeking a Senior Incident Response Analyst to lead investigations across MDR customers and MSPs within the Critical Incident Response Team. You will use Sophos technologies to contain and remediate incidents, mentor junior analysts, and contribute to detection improvements.

The role requires strong incident response, malware analysis basics, and excellent customer service during high-pressure incidents. Remote-first with some hybrid possibilities.

Qualifications

• 4+ years of methodical cyber security investigations or 2+ years in incident response.
• Experience investigating threats, malware and ransomware.
• Able to work under high-pressure situations with quick decisions.

Responsibilities

• Lead investigative execution of active cyber incidents for MDR customers.
• Contain, remediate threats and provide remediation guidance to MSPs.
• Create technical incident reports and maintain detailed documentation.
• Collaborate with SophosLabs, Detection Engineering and Threat Hunting teams.

Skills

Incident response

Threat hunting

MDR operations

Mentoring

Technical writing

Windows/Linux/macOS

Phone calls / meetings

Tools

OSQuery

SQL

KQL

Job description

Sophos is seeking a Senior Incident Response Analyst to lead investigations across MDR customers and MSPs within the Critical Incident Response Team. You will use Sophos technologies to contain and remediate incidents, mentor junior analysts, and contribute to detection improvements.

The role requires strong incident response, malware analysis basics, and excellent customer service during high-pressure incidents. Remote-first with some hybrid possibilities.