Senior Incident Response Lead - Remote Rapid Response

Sophos; United Kingdom; On-site; GBP 90,000 - 120,000; Full time

Job summary

Sophos is seeking a Senior Incident Response Consultant to join our IR team. You will spearhead incident response engagements for customers worldwide, lead a team of consultants, and drive prioritization, then deliver executive-level updates and root cause analysis.

The role requires extensive ransomware and BEC incident experience, strong communication, and the ability to coordinate across time zones. Remote-first with flexible collaboration options is standard.

Qualifications

• 5+ years of experience leading incident response investigations involving ransomware.
• Experience leading BEC investigations.
• Continuously learning and staying informed of the changing threat landscape.
• Proven track record of successful neutralization and remediation of ransomware threats.
• Excellent understanding of the Incident Response process.
• Excellent understanding of cyber risks and able to qualify them to customers.
• Excellent oral communication skills.
• Strong written communication skills.
• Ability to manage time effectively.
• Able to delegate and prioritize tasks across multiple incidents.
• Able to excel under stressful circumstances.

Responsibilities

• Lead kick off calls with customers to understand their situation and identify initial response actions to contain the threat.
• Provide guidance to customers on best practices following an incident.
• Lead daily update calls for customers to deliver forensic findings.
• Deliver concise email updates to customers between update calls.
• Direct the forensic investigations, identify priorities, and delegate tasks to analysts.
• Conduct multiple Rapid Response incidents concurrently.
• Determine TTPs identified by analysts and add them to the threat intel platform.
• Write clear and concise Executive Summary style reports in a timely manner.
• Responsible for basic to moderate complexity projects that contribute to the development of the Sophos Rapid Response service.
• Provide daily handover notes to teams located in different time zones, or when incident responsibility is being transferred to another Incident Lead.

Skills

Incident response leadership

Ransomware investigations

BEC investigations

Threat intelligence

Executive communication

Mentoring juniors

MITRE ATT&CK framework

Remote collaboration

Education

Post-secondary education in Cybersecurity, comparable

Job description

Sophos is seeking a Senior Incident Response Consultant to join our IR team. You will spearhead incident response engagements for customers worldwide, lead a team of consultants, and drive prioritization, then deliver executive-level updates and root cause analysis.

The role requires extensive ransomware and BEC incident experience, strong communication, and the ability to coordinate across time zones. Remote-first with flexible collaboration options is standard.