LogoFresh Jobs Ahead
Sophos
Sophos
1 001 – 5 000 Xodimlar
H1B vizasi homiysiIshlab chiqarishKonsaltingSog‘liqni saqlash
Sophos tashkilotlarga tovlamachi dasturlar, ilg‘or tahdidlar va boshqa kiberhujumlardan himoyalanishda yordam beradigan kiberxavfsizlik yechimlarini ishlab chiqadi. Uning mahsulot portfeliga qurilmalar va tarmoqlarni himoyalash, bulut xavfsizligi, shuningdek tahdidlarni boshqariladigan aniqlash va ularga javob berish xizmatlari kiradi. Bu yechimlar tahdidlarni tadqiq qilish, xavfsizlik bo‘yicha treninglar va operatsion tajriba bilan qo‘llab-quvvatlanadi. Sophos Central ushbu imkoniyatlarni mavjud IT muhitlari bilan birgalikda ishlashga mo‘ljallangan markazlashtirilgan platformada birlashtiradi. Kompaniya moliya, sog‘liqni saqlash, davlat boshqaruvi, ishlab chiqarish va chakana savdo kabi turli sohalardagi tashkilotlarga xizmat ko‘rsatadi.
LinkedIn
Kompaniyadagi ish o‘rinlari

OT Incident Response Consultant - Romania (Remote)

Investigate industrial control system threats and high-severity OT incidents for Sophos in a remote Romania role. Strengthen threat detection, monitoring, and customer operational resilience.

RORuminiyaMasofaviyTo‘liq stavkaJuniorO‘rta darajaDiplom talab qilinmaydiTalab Qilinadigan Til: inglizchaKonsultant
KiberxavfsizlikTCP/IP

Tavsif

  • Investigate and handle high-severity OT security incidents
  • Determine threat origins, attack scope, and affected assets through root cause analysis
  • Assess threats across industrial and operational technology environments
  • Examine network traffic, system logs, and security events for malicious activity and attack patterns
  • Track emerging threat actors, campaigns, and OT-focused tactics, techniques, and procedures
  • Create and improve OT detection use cases and threat detection procedures
  • Refine and optimize alerts produced by OT security controls
  • Combine data from security platforms, threat intelligence, network telemetry, and other sources
  • Assist with SIEM monitoring approaches, escalation processes, and alerting mechanisms
  • Act as an OT cybersecurity subject matter expert during incidents and security engagements
  • Recommend remediation, mitigation, and risk-reduction measures
  • Help customers improve OT cybersecurity programs, processes, and operational procedures
  • Assist in developing and deploying proactive OT security controls and monitoring capabilities
  • Contribute to security capabilities, tools, and automation projects
  • Maintain current knowledge of OT security trends, vulnerabilities, defensive technologies, and industry practices
  • Partner with customers to identify threats, lower risk, and improve operational resilience
  • Help protect the safety, reliability, and security of operational environments while advancing cyber defense

Talablar

  • Background in cybersecurity, incident response, security operations, or threat detection
  • At least 2 years of experience supporting industrial control systems such as PLCs, RTUs, DCS, SIS, SCADA, HMI, MES, or Historians is desirable
  • Knowledge of OT and ICS architectures and operational environments
  • Experience investigating security incidents and conducting root cause analysis
  • Practical experience with SIEM tools, event monitoring, detection use cases, alert tuning, escalation processes, and threat intelligence
  • Experience reviewing firewall logs, IDS/IPS events, system logs, network telemetry, and security events
  • Strong knowledge of TCP/IP and UDP networking protocols
  • Familiarity with industrial protocols including Modbus and DNP3
  • Knowledge of the Purdue Enterprise Reference Architecture model
  • Ability to analyze network traffic and detect indicators of compromise in OT environments
  • Knowledge of cyber threat actor tactics, techniques, and procedures
  • Experience in vulnerability analysis, threat research, and security investigations
  • English communication skills
  • Availability for shift work, including nights, weekends, and holidays
  • Legal authorization to work in Romania without employer sponsorship

Imtiyozlar

  • Remote-first arrangement with remote work as the primary option for most employees
  • Employee-led diversity and inclusion networks
  • Annual charity and fundraising activities
  • Volunteer days
  • Global employee sustainability programs
  • Global fitness and trivia competitions
  • Global wellbeing days
  • Monthly wellbeing webinars and training
  • Commitment to an inclusive, equal-opportunity workplace
  • Recruitment and selection adjustments for applicants with disabilities or other needs

O‘xshash ish o‘rinlari