„Sophos“ kuria kibernetinio saugumo sprendimus, padedančius organizacijoms apsisaugoti nuo išpirkos reikalaujančių programų, pažangių grėsmių ir kitų kibernetinių atakų. Įmonės sprendimų portfelį sudaro galinių įrenginių ir tinklo apsauga, debesijos saugumas bei valdomas grėsmių aptikimas ir reagavimas. Šias galimybes papildo grėsmių tyrimai, saugumo mokymai ir veiklos ekspertizė. „Sophos Central“ sujungia šias galimybes vienoje centralizuotoje platformoje, sukurtoje veikti kartu su esamomis IT aplinkomis. Įmonė teikia paslaugas įvairių sektorių organizacijoms, įskaitant finansų, sveikatos priežiūros, viešojo sektoriaus, gamybos ir mažmeninės prekybos organizacijas.
Senior Incident Response Consultant, Rapid Response
Lead ransomware and other cyber incident investigations for Sophos customers in Canada, coordinating forensic response, containment, and remediation. Guide customer communications and root-cause analysis, and deliver executive reports mapped to MITRE ATT&CK.
Kanada109 000 $ – 181 000 $ / metai
NuotolinisVisas etatasVyresnysis specialistasPrivaloma Kalba: anglųKonsultantasAprašymas
- Lead customer incident response engagements following cyberattacks
- Run kickoff calls to understand the incident and identify initial containment steps
- Advise customers on post-incident best practices
- Lead daily customer updates and present forensic findings
- Send concise email updates between calls
- Direct forensic investigations, set priorities, and delegate work to analysts
- Manage multiple Rapid Response incidents at the same time
- Review analyst-identified tactics, techniques, and procedures (TTPs) and add them to the threat intelligence platform
- Coordinate actions by teams and customers to neutralize threats
- Investigate root causes, including whether data was exfiltrated
- Prepare executive summaries with event timelines mapped to the MITRE ATT&CK framework
- Manage basic to moderately complex projects supporting development of the Sophos Rapid Response service
- Provide daily handover notes across time zones or when transferring incident responsibility
- Mentor and support junior analysts
Reikalavimai
- At least five years leading incident response investigations involving ransomware
- Experience leading business email compromise (BEC) investigations
- Commitment to continued learning and staying current with the changing threat landscape
- Demonstrated success neutralizing and remediating ransomware threats
- Strong understanding of incident response processes
- Strong understanding of cyber risks and ability to explain and qualify them for customers
- Excellent verbal communication skills
- Strong written communication skills
- Effective time management
- Ability to delegate and prioritize work across multiple incidents
- Ability to perform effectively under pressure
- Willingness to start early or work late when customer engagements require it
- Strong knowledge of the MITRE ATT&CK framework
- Interest in mentoring and developing junior analysts
- Collaborative approach and willingness to share knowledge
- Availability to work some weekends and holidays
- Post-secondary education in cybersecurity or a comparable field
- Legal authorization to work in Canada without employer sponsorship
Privalumai
- Bonus eligibility
- Comprehensive benefits package
- Remote-first working model
- Employee-led diversity and inclusion networks
- Annual charity and fundraising initiatives
- Volunteer days
- Global employee sustainability initiatives
- Global fitness and trivia competitions
- Global wellbeing days
- Monthly wellbeing webinars and training
- Equal opportunity and recruitment adjustments