Threat Hunter, MDR SOC (Tier II) - Remote

Sophos; Greater London; Remote; GBP 55,000 - 90,000; Full time

Benefits offered by this job

Remote-first working model

Hybrid options

Flexible start times

Wellbeing program

Employee Assistance Program (EAP)

Job summary

Sophos is seeking a Threat Analyst - Tier II on the Managed Detection and Response (MDR) team to provide best-in-class monitoring, detection, and response services for customer environments. You will work with threat hunters, IR analysts, engineers, and ethical hackers to investigate threats using enterprise logging and endpoint collection systems.

You will onboard and train new Threat Analysts, create cases, and communicate findings to diverse audiences while driving continuous improvement and

Qualifications

• Bachelor's degree in Information Technology, Computer Science or related field or equivalent work experience.
• Fundamental understanding of network traffic analysis including TCP/IP, routing, switching, protocols, etc
• Experience administering Windows OS and one of Apple or Linux OS.

Responsibilities

• Provide monitoring, detection, and response services on the MDR team.
• Collaborate with threat hunters, IR analysts, engineers and ethical hackers to investigate and neutralize threats.
• Investigate and analyze logs and security events using Sophos tooling.
• Handle escalations from Tier I Threat Analysts and guide investigations.
• Onboard and train new Threat Analysts and create cases for clients.
• Communicate findings to technical and executive audiences and drive issue resolution.

Skills

Threat hunting

Incident response

Windows OS

PowerShell

SQL

MITRE ATT&CK

SIEM

EDR/IDS/IPS

Threat analysis

Team collaboration

Education

Bachelor's in IT/CS or related field

Tools

OSQuery

PowerShell

SQL

SIEM

EDR

Job description

Sophos is seeking a Threat Analyst - Tier II on the Managed Detection and Response (MDR) team to provide best-in-class monitoring, detection, and response services for customer environments. You will work with threat hunters, IR analysts, engineers, and ethical hackers to investigate threats using enterprise logging and endpoint collection systems.

You will onboard and train new Threat Analysts, create cases, and communicate findings to diverse audiences while driving continuous improvement and