Remote MDR Threat Analyst II – Incident Response Lead

Sophos; United States; A distancia; AUD 90.000 - 130.000; Jornada completa

Descripción de la vacante

Sophos is seeking an MDR Threat Analyst to monitor enterprise environments, analyze logs, and coordinate response activities. You will work with a team to detect, investigate, and neutralize cyber threats while supporting clients through case creation and reporting.

Ideal candidates have 2–4 years in a SOC, endpoint and network security experience, and familiarity with MITRE ATT&CK. The role is remote across Australia, with a 24x7x365 support window and strong emphasis on collaboration and

Formación

• 2–4 years of experience in a SOC environment or computer security team
• Endpoint and network security experience; IDS/IPS/EDR/ATP and malware defenses
• MITRE ATT&CK knowledge preferred
• Experience with incident response procedures
• Experience with SQL query construction preferred
• OSQuery experience is a plus
• Strong documentation and communication skills
• Willingness to work outside standard business hours (24x7x365)

Responsabilidades

• Handle escalations from level I Threat Analysts and guide investigations
• On-board and train new Threat Analysts
• Participate in security operations process improvement
• Provide detection and response to security events and threats
• Conduct security log management and monitoring
• Maintain information security metrics
• Create MDR service-related reports
• Create cases for clients
• Track client threat neutralization progress
• Interact with clients via multiple mediums
• Research recent Indicators or Compromise/Attack and vulnerabilities
• Provide metrics for threat trends and situational awareness

Conocimientos

SOC experience

Threat hunting

Incident response

MITRE ATT&CK knowledge

Windows event log analysis

Documentation and communication

Teamwork and collaboration

Educación

Bachelor's degree in IT / CS or related field

Herramientas

SQL query construction

OSQuery

PowerShell

Python

KQL

Windows OS administration

Linux/Unix knowledge

Descripción del empleo

Sophos is seeking an MDR Threat Analyst to monitor enterprise environments, analyze logs, and coordinate response activities. You will work with a team to detect, investigate, and neutralize cyber threats while supporting clients through case creation and reporting.

Ideal candidates have 2–4 years in a SOC, endpoint and network security experience, and familiarity with MITRE ATT&CK. The role is remote across Australia, with a 24x7x365 support window and strong emphasis on collaboration and