Senior Incident Response Lead — Rapid Response (Ransomware)

Sophos Group; Oxford; Hybrid; GBP 90,000 - 125,000; Full time

Job summary

Sophos is seeking an experienced Senior Incident Response Consultant to join our Incident Response (IR) team. You will lead incident response engagements for customers worldwide, guiding a team of consultants, conducting rapid responses, and delivering executive updates.

You will have 5+ years of IR leadership, ransomware/BEC experience, and strong communication. The role supports a remote-first model with occasional travel, and expects collaboration across time zones to produce thorough root

Qualifications

• 5+ years of incident response leadership including ransomware engagements.
• Experience guiding and coordinating cross-functional incident response teams.
• Strong knowledge of MITRE ATT&CK and threat intel.
• Excellent verbal and written communication to executives.
• Ability to handle high-stress, time-sensitive incidents.

Responsibilities

• Lead kickoff calls with customers to understand situation.
• Provide guidance on best practices after incidents.
• Lead daily update calls delivering forensic findings.
• Write executive summaries and reports.
• Direct investigations and delegate tasks to analysts.
• Handover notes across time zones.

Skills

Incident response leadership

Ransomware experience

BEC investigations

Oral communication

Written communication

Time management

Delegation across incidents

MITRE ATT&CK

Mentoring teammates

Education

Cybersecurity degree

Tools

Splunk

ELK

PowerShell

Python

SQL

Job description

Sophos is seeking an experienced Senior Incident Response Consultant to join our Incident Response (IR) team. You will lead incident response engagements for customers worldwide, guiding a team of consultants, conducting rapid responses, and delivering executive updates.

You will have 5+ years of IR leadership, ransomware/BEC experience, and strong communication. The role supports a remote-first model with occasional travel, and expects collaboration across time zones to produce thorough root