Threat Analyst I - 24/7 MDR Security Operations (Remote)

Sophos; Oxford; Remote; CAD 56,000 - 93,000; Full time

Job summary

Sophos is a cybersecurity leader providing MDR services and a comprehensive portfolio of security technologies. As a Threat Analyst 1 on the MDR team, you will monitor, detect, and respond to threats across customer environments using enterprise tooling and threat intelligence.

You will collaborate with threat hunters, incident responders, and engineers to investigate events, craft detailed recommendations, and help prevent future incidents.

Qualifications

• Minimum 2+ years of experience working in a SOC environment or computer security team in an IT environment.
• Experience with threat hunting and endpoint/network security monitoring.
• Experience administering and supporting Windows OS and one of Apple or Linux operating systems.
• Knowledge of MITRE ATT&CK framework and incident response procedures.
• Basic understanding of network traffic analysis and Windows event log analysis.

Responsibilities

• Investigate and analyze logs and security-related events via Sophos tooling.
• Identify and respond to cyber threats occurring within customer environments.
• Communicate and document findings to technical and executive audiences.
• Follow up with customers through to issue resolution and provide actionable recommendations.
• Collaborate with core security and threat response teams.
• Actively research Indicators of Compromise/Attack to operationalize findings.

Skills

SOC experience

Threat hunting

Endpoint security monitoring

Network security monitoring

Windows OS administration

Mitre ATT&CK

Incident response

PowerShell

SQL query construction

Tools

OSQuery

SIEM

Job description

Sophos is a cybersecurity leader providing MDR services and a comprehensive portfolio of security technologies. As a Threat Analyst 1 on the MDR team, you will monitor, detect, and respond to threats across customer environments using enterprise tooling and threat intelligence.

You will collaborate with threat hunters, incident responders, and engineers to investigate events, craft detailed recommendations, and help prevent future incidents.