LogoFresh Jobs Ahead
Sophos
Sophos
1,001 – 5,000 Employees
H1B Visa SponsorConsultingHealthcareManufacturing
Sophos develops cybersecurity solutions that help organizations defend against ransomware, advanced threats, and other cyberattacks. Its portfolio includes endpoint and network protection, cloud security, and managed detection and response, supported by threat research, security training, and operational expertise. Sophos Central brings these capabilities together in a centralized platform designed to work with existing IT environments. The company serves organizations across sectors including finance, healthcare, government, manufacturing, and retail.
LinkedIn
Company Jobs

Threat Analyst Team Lead – India (Remote)

Lead threat analysts and incident response activities for Sophos’s security operations. Support global managed detection and response through cybersecurity expertise and operational leadership.

INIndiaRemoteFull-timeSeniorEnglish RequiredAnalyst
Cyber SecurityLinuxOpen SourceSQLSwitchingTCP/IP

Description

  • Supervise operational work and provide daily direction to threat analysts
  • Lead analysts through security investigations and response activities
  • Determine likely root causes and resolutions for security incidents
  • Communicate clearly with stakeholders across organizational levels
  • Use network and host intrusion analysis, incident response, digital forensics, and malware-handling expertise
  • Lead incident scenarios as a cybersecurity incident response subject matter expert
  • Carry out incident-handling procedures and respond directly to cybersecurity incidents
  • Keep current with attacker tools, tactics, and procedures
  • Develop indicators of compromise for ongoing and future investigations
  • Evaluate cyber threat intelligence and open source intelligence and apply relevant findings operationally
  • Analyze sophisticated malware and activity from evolving cyber threat actors
  • Identify emerging and active threats and apply relevant research
  • Oversee the operational performance of the Security Operations Center and its personnel
  • Deliver the strategic and operational objectives of the MDR team

Requirements

  • At least five years of experience in a cybersecurity environment
  • Bachelor’s degree in information technology, computer science, or a related discipline, or equivalent relevant work experience
  • Experience working in a security operations center or comparable environment
  • Experience detecting indicators of compromise or attack and responding to incidents
  • Experience with endpoint and network security technologies, including IDS, IPS, EDR, ATP, malware defenses, and monitoring
  • Understanding of common adversary tactics and techniques, including obfuscation, persistence, and defense evasion
  • Working knowledge of incident response procedures
  • Experience administering and supporting Windows workstations and servers, plus either Apple or Linux-based operating systems
  • Foundational knowledge of network traffic analysis, including TCP/IP, routing, switching, and network protocols
  • Threat hunting experience preferred
  • Knowledge of the MITRE ATT&CK framework preferred
  • Experience writing SQL queries preferred
  • Experience with OSQuery is a plus
  • Leadership experience preferred

Benefits

  • Remote-first work model, with remote work as the primary arrangement for most employees
  • Employee-led diversity and inclusion networks
  • Annual charitable giving and fundraising programs
  • Employee volunteer days
  • Global sustainability initiatives for employees
  • Global fitness and trivia competitions
  • Global wellbeing days
  • Monthly wellbeing webinars and training
  • Accessibility adjustments available during recruitment and selection when needed

Related Jobs