Threat Analyst (2 Vacancies)

Role Summary

As a MDR Enhanced Threat Analyst, your primary role will be to perform security threat analysis of various malware and web attacks, tuning a customer wide event stream consisting of events from all major security platforms and working with customers to remediate security related issues based on operational needs.

Threat Analysis is focused on protecting our customers by providing exceptional information security services to include

Real-time threat analysisReference and apply Sophos internal and other Intelligence First point of contact for customer interactions; conducted in a professional manner with emphasis on customer satisfactionPoint of coordination and collaboration with Incident Response, Product Support and other roles within Sophos and the customer environmentProvide Advanced Intrusion Analysis

What You Will Do

• Review security-related events via cases and assess their risk and validity based on available telemetry from network, endpoint, and global threat intelligence information to provide customers with concise, detailed, and well-written incident reports, root causes identification, and remediation recommendations
• Provide customers with understandable context around their security environment and threats
• Interface with customers to address their issues, concerns, and questions, and drive to satisfactory closure any issues that impact the service and its value
• Work with customer and internal Sophos incident response teams to resolve ongoing intrusions, malware outbreaks, and other security incidents
• Use the Sophos platform to proactivity hunt for and investigate activity within the customer environment
• Review security-related events via investigations and assess their risk and validity based on available telemetry from network, endpoint, and global threat intelligence information to provide customers with concise, detailed, and well-written incident reports, root causes identification, and remediation recommendations
• Provide customers with understandable context around their security environment and threats
• Interface with customers to address their issues, concerns, and questions, and drive to satisfactory closure any issues that impact the service and its value
• Work with customer and internal Sophos incident response teams to resolve ongoing intrusions, malware outbreaks, and other security incidents
• Act as technical lead for the local Enhanced team :
• (A) participate in specific governance sessions
• (B) coordinate rollout of Enhanced level initiatives
• (C) prepare and maintain the roaster for the Enhanced team

What You Will Bring

Desirable

Ready to Join Us? At Sophos, we believe in the power of diverse perspectives to fuel innovation. Research shows that candidates sometimes hesitate to apply if they don't check every box in a job description. We challenge that notion. Your unique experiences and skills might be exactly what we need to enhance our team. Don't let a checklist hold you back – we encourage you to apply. What's Great About Sophos?