LogoFresh Jobs Ahead
Sophos
Sophos
1,001 – 5,000 Employees
H1B Visa SponsorConsultingHealthcareManufacturing
Sophos develops cybersecurity solutions that help organizations defend against ransomware, advanced threats, and other cyberattacks. Its portfolio includes endpoint and network protection, cloud security, and managed detection and response, supported by threat research, security training, and operational expertise. Sophos Central brings these capabilities together in a centralized platform designed to work with existing IT environments. The company serves organizations across sectors including finance, healthcare, government, manufacturing, and retail.
LinkedIn
Company Jobs

Senior Threat Analyst Team Lead — Sophos, India Remote

Lead Sophos’s MDR security operations center and supervise threat analysts. Direct incident response and security operations for a global cybersecurity provider.

INIndiaRemoteFull-timeSeniorEnglish RequiredAnalyst
Cyber SecurityLinuxSQLSwitchingTCP/IP

Description

  • Manage Security Operations Center performance and personnel.
  • Oversee daily security operations for Sophos MDR customers.
  • Supervise operational tasks and provide daily direction to threat analysts.
  • Guide analysts through investigation and response activities.
  • Identify potential root causes and resolutions for security incidents.
  • Communicate effectively with stakeholders at all levels.
  • Lead incident scenarios and provide cybersecurity incident response expertise.
  • Carry out incident-handling procedures and respond directly to cybersecurity incidents.
  • Stay current on attacker tools, tactics, and procedures.
  • Develop indicators of compromise for active and future investigations.
  • Evaluate cyber threat intelligence and open-source intelligence, then operationalize findings.
  • Apply research to detect current and emerging threats.
  • Manage sophisticated malware and evolving cyber threat actors.

Requirements

  • At least five years of cybersecurity experience; leadership experience is preferred.
  • Bachelor’s degree in information technology, computer science, or a related field, or equivalent relevant work experience.
  • Experience working in a security operations center or comparable environment.
  • Experience detecting indicators of compromise or attack and responding to incidents.
  • Required experience with endpoint and network security.
  • Experience with IDS, IPS, EDR, ATP, malware defenses, and monitoring tools.
  • Threat hunting experience is preferred.
  • Knowledge of common adversary tactics and techniques, including obfuscation, persistence, and defense evasion.
  • Knowledge of the MITRE ATT&CK framework is preferred.
  • Working knowledge of incident response procedures.
  • Experience constructing SQL queries is preferred.
  • OSQuery experience is a plus.
  • Experience administering and supporting Windows and either Apple or Linux operating systems.
  • Fundamental understanding of network traffic analysis, including TCP/IP, routing, switching, and protocols.
  • Legal authorization to work in India without employer sponsorship.

Benefits

  • Remote-first work model, with remote work as the primary option for most employees.
  • Employee-led diversity and inclusion networks.
  • Annual charity and fundraising initiatives.
  • Employee volunteer days.
  • Global employee sustainability initiatives.
  • Global fitness and trivia competitions.
  • Global wellbeing days.
  • Monthly wellbeing webinars and training.
  • Equal employment opportunity and support for recruitment and selection adjustments.

Related Jobs