Sophos
Sophos
Sophos develops cybersecurity solutions that help organizations defend against ransomware, advanced threats, and other cyberattacks. Its portfolio includes endpoint and network protection, cloud security, and managed detection and response, supported by threat research, security training, and operational expertise. Sophos Central brings these capabilities together in a centralized platform designed to work with existing IT environments. The company serves organizations across sectors including finance, healthcare, government, manufacturing, and retail.

Threat Analyst III, Canada (Remote)

Monitor, investigate, and respond to cyber threats for Sophos’s managed detection and response service. Conduct threat hunting, incident response, and customer case management across protected environments.

Description

  • Monitor and respond to alerts from the Sophos security stack, including EDR and XDR tools
  • Guide junior analysts through escalated investigations
  • Analyze suspicious activity end to end to determine scope, impact, and risk
  • Detect and address cyber threats in customer environments using approved playbooks and tools
  • Record investigative findings, actions, and outcomes in the MDR case management platform
  • Perform threat hunting across MDR customer environments
  • Investigate phishing messages, suspicious binaries, and unusual behavior
  • Identify recurring false positives and recommend detection improvements
  • Research threat actors, MITRE ATT&CK techniques, intelligence reports, emerging indicators of compromise, active exploits, and vulnerabilities
  • Maintain internal knowledge resources and contribute to continuous improvement
  • Work scheduled shifts and provide thorough handovers to global teams
  • Assist with active security incidents
  • Open cases, monitor progress, and follow up with customers through resolution
  • Communicate with customers through chat, phone, and ticketing systems
  • Help improve Security Operations processes, playbooks, and tools

Requirements

  • At least three years of hands-on experience in a Security Operations Center, managed detection and response environment, or cybersecurity-focused IT role
  • Proficiency with endpoint and network security technologies, including EDR, IDS/IPS, and malware detection platforms
  • Working knowledge of Windows workstations and servers, as well as Linux or macOS environments
  • Ability to interpret Windows event logs and other telemetry
  • Understanding of TCP/IP, networking protocols, routing, and traffic analysis
  • Experience supporting real-time incident response and threat investigations
  • Familiarity with threat hunting methods and attacker behavior
  • Experience containing, mitigating, and recovering from security incidents
  • Understanding of persistence, privilege escalation, lateral movement, and defense evasion techniques
  • Familiarity with incident response procedures and security operations practices
  • Strong analytical, troubleshooting, and detail-oriented skills
  • Clear communication skills for both technical and non-technical audiences
  • Professional, customer-focused approach
  • Bachelor’s degree in information technology, computer science, cybersecurity, or a related field, or equivalent practical experience
  • Availability for rotating shifts, including nights, weekends, and holidays
  • Authorization to work in Canada without employer sponsorship

Benefits

  • Eligibility for bonus compensation
  • Comprehensive benefits package
  • Remote-first work model
  • Employee-led diversity and inclusion networks
  • Annual charity and fundraising programs
  • Volunteer days
  • Global employee sustainability programs
  • Global fitness and trivia competitions
  • Global wellbeing days
  • Monthly wellbeing webinars and training

Related Jobs

Kreato Global | BPO and Language Solutions

Remote English-Spanish OPI/VRI Interpreter

Kreato Global | BPO and Language Solutions
201 – 500 Employees
HealthcareHospitalityLogistics

Interpret remotely between English- and Spanish-speaking people in medical, financial, social service, and customer care settings. Provide language support for Kreato Global across Latin America.

Open
SPERTON - Where Great People Meet

Sales Executive, Elevators and Car Parking Systems

SPERTON - Where Great People Meet
51 – 200 Employees

Drive elevator and car parking system sales across Mumbai’s Western Region. Build client and dealer relationships, and manage deals from initial enquiry through project execution.

Open