LogoFresh Jobs Ahead
Sophos
Sophos
1,001 – 5,000 Employees
H1B Visa SponsorConsultingHealthcareManufacturing
Sophos develops cybersecurity solutions that help organizations defend against ransomware, advanced threats, and other cyberattacks. Its portfolio includes endpoint and network protection, cloud security, and managed detection and response, supported by threat research, security training, and operational expertise. Sophos Central brings these capabilities together in a centralized platform designed to work with existing IT environments. The company serves organizations across sectors including finance, healthcare, government, manufacturing, and retail.
LinkedIn
Company Jobs

OT Incident Response Consultant - Romania (Remote)

Investigate industrial control system threats and high-severity OT incidents for Sophos in a remote Romania role. Strengthen threat detection, monitoring, and customer operational resilience.

RORomaniaRemoteFull-timeJuniorMiddleNo degree requiredEnglish RequiredConsultant
Cyber SecurityTCP/IP

Description

  • Investigate and handle high-severity OT security incidents
  • Determine threat origins, attack scope, and affected assets through root cause analysis
  • Assess threats across industrial and operational technology environments
  • Examine network traffic, system logs, and security events for malicious activity and attack patterns
  • Track emerging threat actors, campaigns, and OT-focused tactics, techniques, and procedures
  • Create and improve OT detection use cases and threat detection procedures
  • Refine and optimize alerts produced by OT security controls
  • Combine data from security platforms, threat intelligence, network telemetry, and other sources
  • Assist with SIEM monitoring approaches, escalation processes, and alerting mechanisms
  • Act as an OT cybersecurity subject matter expert during incidents and security engagements
  • Recommend remediation, mitigation, and risk-reduction measures
  • Help customers improve OT cybersecurity programs, processes, and operational procedures
  • Assist in developing and deploying proactive OT security controls and monitoring capabilities
  • Contribute to security capabilities, tools, and automation projects
  • Maintain current knowledge of OT security trends, vulnerabilities, defensive technologies, and industry practices
  • Partner with customers to identify threats, lower risk, and improve operational resilience
  • Help protect the safety, reliability, and security of operational environments while advancing cyber defense

Requirements

  • Background in cybersecurity, incident response, security operations, or threat detection
  • At least 2 years of experience supporting industrial control systems such as PLCs, RTUs, DCS, SIS, SCADA, HMI, MES, or Historians is desirable
  • Knowledge of OT and ICS architectures and operational environments
  • Experience investigating security incidents and conducting root cause analysis
  • Practical experience with SIEM tools, event monitoring, detection use cases, alert tuning, escalation processes, and threat intelligence
  • Experience reviewing firewall logs, IDS/IPS events, system logs, network telemetry, and security events
  • Strong knowledge of TCP/IP and UDP networking protocols
  • Familiarity with industrial protocols including Modbus and DNP3
  • Knowledge of the Purdue Enterprise Reference Architecture model
  • Ability to analyze network traffic and detect indicators of compromise in OT environments
  • Knowledge of cyber threat actor tactics, techniques, and procedures
  • Experience in vulnerability analysis, threat research, and security investigations
  • English communication skills
  • Availability for shift work, including nights, weekends, and holidays
  • Legal authorization to work in Romania without employer sponsorship

Benefits

  • Remote-first arrangement with remote work as the primary option for most employees
  • Employee-led diversity and inclusion networks
  • Annual charity and fundraising activities
  • Volunteer days
  • Global employee sustainability programs
  • Global fitness and trivia competitions
  • Global wellbeing days
  • Monthly wellbeing webinars and training
  • Commitment to an inclusive, equal-opportunity workplace
  • Recruitment and selection adjustments for applicants with disabilities or other needs

Related Jobs

BBVA

Security Architecture Engineer – Java and DevOps

BBVA
H1B Visa SponsorBankingConsultingMarketing
MXMexicoHybridFull-timeMiddleSeniorSpanish RequiredDevOps Engineer
DockerFirewallsJavaJenkinsLinuxMavenPythonSOAPSpringSQL

Join BBVA as a security architecture engineer deploying Java and DevOps components that protect authentication and authorization across Latin American applications. The role also supports incident resolution and technical coordination between teams in Spain and Latin America.

Open