Senior MDR Incident Responder - Lead Critical IR (Remote)

Openkrill; United States; Remote; USD 130,000 - 190,000; Full time

Benefits offered by this job

Remote-first working model

Hybrid/onsite options (where needed)

Wellbeing programs

Volunteer and charity initiatives

Sustainability initiatives

Global fitness and trivia competitions

Job summary

Sophos is seeking a highly skilled Senior Incident Response Analyst to support MDR customers within the Critical Incident Response Team (CIRT). You will lead complex engagements, guiding containment decisions and providing advanced technical leadership to ensure top-tier customer outcomes.

As a Senior Incident Response Analyst 2, you will serve as a primary Advisor or Commander for high-severity incidents, coordinating across analysts and collaborating with SOC, Threat Intelligence, and

Qualifications

• 5+ years of incident response, MDR, or cyber security investigations with leadership of complex incidents
• Advanced expertise in endpoint and network forensics, log analysis, and adversary tradecraft
• Strong ability to communicate technical findings to executive stakeholders

Responsibilities

• Lead complex investigations involving advanced adversaries and multi-vector intrusions
• Act as Incident Advisor or Commander for high-severity engagements
• Direct and coordinate investigative, forensic, and containment activities across analysts
• Define engagement strategy, priorities, and containment approaches
• Synthesize technical findings into actionable guidance for customers and internal stakeholders
• Provide mentorship to IR and SOC analysts
• Collaborate with SOC, Threat Intelligence, and Detection Engineering teams
• Lead or contribute to post-incident reviews and improve playbooks and tools
• Maintain accurate time and activity tracking for visibility and capacity planning

Skills

Incident response leadership

Endpoint forensics

Network forensics

Log analysis

Customer communication

Mentorship

High-pressure handling

Adversary tradecraft

IR strategy & containment

Education

Advanced incident response certifications (GCFA, GCED, GCIH, OSCP)

Job description

Sophos is seeking a highly skilled Senior Incident Response Analyst to support MDR customers within the Critical Incident Response Team (CIRT). You will lead complex engagements, guiding containment decisions and providing advanced technical leadership to ensure top-tier customer outcomes.

As a Senior Incident Response Analyst 2, you will serve as a primary Advisor or Commander for high-severity incidents, coordinating across analysts and collaborating with SOC, Threat Intelligence, and