LogoFresh Jobs Ahead
Sophos
Sophos
1001 – 5000 Zaposleni
Sponzor vizuma H1BProizvodnjaSvetovanjeZdravstveno varstvo
Sophos razvija rešitve za kibernetsko varnost, ki organizacijam pomagajo pri zaščiti pred izsiljevalskim programjem, naprednimi grožnjami in drugimi kibernetskimi napadi. Njegov portfelj vključuje zaščito končnih naprav in omrežij, varnost v oblaku ter upravljano zaznavanje in odzivanje na grožnje, podpirajo pa ga raziskave groženj, usposabljanje na področju varnosti in operativno strokovno znanje. Sophos Central združuje te zmogljivosti v centralizirani platformi, zasnovani za delo z obstoječimi IT-okolji. Podjetje oskrbuje organizacije iz različnih sektorjev, vključno s finančnim sektorjem, zdravstvom, javno upravo, proizvodnjo in maloprodajo.
LinkedIn
Delovna mesta v podjetju

Threat Analyst Team Lead – India (Remote)

Lead threat analysts and incident response activities for Sophos’s security operations. Support global managed detection and response through cybersecurity expertise and operational leadership.

INIndijaNa daljavoPolni delovni časSeniorZahtevani Jezik: angleščinaAnalitik
Kibernetska varnostLinuxOdprta kodaPreklapljanjeSQLTCP/IP

Opis

  • Supervise operational work and provide daily direction to threat analysts
  • Lead analysts through security investigations and response activities
  • Determine likely root causes and resolutions for security incidents
  • Communicate clearly with stakeholders across organizational levels
  • Use network and host intrusion analysis, incident response, digital forensics, and malware-handling expertise
  • Lead incident scenarios as a cybersecurity incident response subject matter expert
  • Carry out incident-handling procedures and respond directly to cybersecurity incidents
  • Keep current with attacker tools, tactics, and procedures
  • Develop indicators of compromise for ongoing and future investigations
  • Evaluate cyber threat intelligence and open source intelligence and apply relevant findings operationally
  • Analyze sophisticated malware and activity from evolving cyber threat actors
  • Identify emerging and active threats and apply relevant research
  • Oversee the operational performance of the Security Operations Center and its personnel
  • Deliver the strategic and operational objectives of the MDR team

Zahteve

  • At least five years of experience in a cybersecurity environment
  • Bachelor’s degree in information technology, computer science, or a related discipline, or equivalent relevant work experience
  • Experience working in a security operations center or comparable environment
  • Experience detecting indicators of compromise or attack and responding to incidents
  • Experience with endpoint and network security technologies, including IDS, IPS, EDR, ATP, malware defenses, and monitoring
  • Understanding of common adversary tactics and techniques, including obfuscation, persistence, and defense evasion
  • Working knowledge of incident response procedures
  • Experience administering and supporting Windows workstations and servers, plus either Apple or Linux-based operating systems
  • Foundational knowledge of network traffic analysis, including TCP/IP, routing, switching, and network protocols
  • Threat hunting experience preferred
  • Knowledge of the MITRE ATT&CK framework preferred
  • Experience writing SQL queries preferred
  • Experience with OSQuery is a plus
  • Leadership experience preferred

Ugodnosti

  • Remote-first work model, with remote work as the primary arrangement for most employees
  • Employee-led diversity and inclusion networks
  • Annual charitable giving and fundraising programs
  • Employee volunteer days
  • Global sustainability initiatives for employees
  • Global fitness and trivia competitions
  • Global wellbeing days
  • Monthly wellbeing webinars and training
  • Accessibility adjustments available during recruitment and selection when needed

Sorodna delovna mesta