Sophos dezvoltă soluții de securitate cibernetică care ajută organizațiile să se apere împotriva ransomware-ului, a amenințărilor avansate și a altor atacuri informatice. Portofoliul său include protecția dispozitivelor endpoint și a rețelelor, securitatea cloud și servicii gestionate de detectare și răspuns, susținute de cercetarea amenințărilor, instruire în domeniul securității și expertiză operațională. Sophos Central reunește aceste capabilități într-o platformă centralizată, concepută să funcționeze cu mediile IT existente. Compania deservește organizații din sectoare precum finanțe, sănătate, administrație publică, producție și retail.
Senior Incident Response Consultant, Rapid Response
Lead ransomware and other cyber incident investigations for Sophos customers in Canada, coordinating forensic response, containment, and remediation. Guide customer communications and root-cause analysis, and deliver executive reports mapped to MITRE ATT&CK.
Descriere
- Lead customer incident response engagements following cyberattacks
- Run kickoff calls to understand the incident and identify initial containment steps
- Advise customers on post-incident best practices
- Lead daily customer updates and present forensic findings
- Send concise email updates between calls
- Direct forensic investigations, set priorities, and delegate work to analysts
- Manage multiple Rapid Response incidents at the same time
- Review analyst-identified tactics, techniques, and procedures (TTPs) and add them to the threat intelligence platform
- Coordinate actions by teams and customers to neutralize threats
- Investigate root causes, including whether data was exfiltrated
- Prepare executive summaries with event timelines mapped to the MITRE ATT&CK framework
- Manage basic to moderately complex projects supporting development of the Sophos Rapid Response service
- Provide daily handover notes across time zones or when transferring incident responsibility
- Mentor and support junior analysts
Cerințe
- At least five years leading incident response investigations involving ransomware
- Experience leading business email compromise (BEC) investigations
- Commitment to continued learning and staying current with the changing threat landscape
- Demonstrated success neutralizing and remediating ransomware threats
- Strong understanding of incident response processes
- Strong understanding of cyber risks and ability to explain and qualify them for customers
- Excellent verbal communication skills
- Strong written communication skills
- Effective time management
- Ability to delegate and prioritize work across multiple incidents
- Ability to perform effectively under pressure
- Willingness to start early or work late when customer engagements require it
- Strong knowledge of the MITRE ATT&CK framework
- Interest in mentoring and developing junior analysts
- Collaborative approach and willingness to share knowledge
- Availability to work some weekends and holidays
- Post-secondary education in cybersecurity or a comparable field
- Legal authorization to work in Canada without employer sponsorship
Beneficii
- Bonus eligibility
- Comprehensive benefits package
- Remote-first working model
- Employee-led diversity and inclusion networks
- Annual charity and fundraising initiatives
- Volunteer days
- Global employee sustainability initiatives
- Global fitness and trivia competitions
- Global wellbeing days
- Monthly wellbeing webinars and training
- Equal opportunity and recruitment adjustments