Sophos tashkilotlarga tovlamachi dasturlar, ilg‘or tahdidlar va boshqa kiberhujumlardan himoyalanishda yordam beradigan kiberxavfsizlik yechimlarini ishlab chiqadi. Uning mahsulot portfeliga qurilmalar va tarmoqlarni himoyalash, bulut xavfsizligi, shuningdek tahdidlarni boshqariladigan aniqlash va ularga javob berish xizmatlari kiradi. Bu yechimlar tahdidlarni tadqiq qilish, xavfsizlik bo‘yicha treninglar va operatsion tajriba bilan qo‘llab-quvvatlanadi. Sophos Central ushbu imkoniyatlarni mavjud IT muhitlari bilan birgalikda ishlashga mo‘ljallangan markazlashtirilgan platformada birlashtiradi. Kompaniya moliya, sog‘liqni saqlash, davlat boshqaruvi, ishlab chiqarish va chakana savdo kabi turli sohalardagi tashkilotlarga xizmat ko‘rsatadi.
Senior Incident Response Consultant, Rapid Response
Lead ransomware and other cyber incident investigations for Sophos customers in Canada, coordinating forensic response, containment, and remediation. Guide customer communications and root-cause analysis, and deliver executive reports mapped to MITRE ATT&CK.
Kanada109 000 $ – 181 000 $ / yil
MasofaviyTo‘liq stavkaSeniorTalab Qilinadigan Til: inglizchaKonsultantTavsif
- Lead customer incident response engagements following cyberattacks
- Run kickoff calls to understand the incident and identify initial containment steps
- Advise customers on post-incident best practices
- Lead daily customer updates and present forensic findings
- Send concise email updates between calls
- Direct forensic investigations, set priorities, and delegate work to analysts
- Manage multiple Rapid Response incidents at the same time
- Review analyst-identified tactics, techniques, and procedures (TTPs) and add them to the threat intelligence platform
- Coordinate actions by teams and customers to neutralize threats
- Investigate root causes, including whether data was exfiltrated
- Prepare executive summaries with event timelines mapped to the MITRE ATT&CK framework
- Manage basic to moderately complex projects supporting development of the Sophos Rapid Response service
- Provide daily handover notes across time zones or when transferring incident responsibility
- Mentor and support junior analysts
Talablar
- At least five years leading incident response investigations involving ransomware
- Experience leading business email compromise (BEC) investigations
- Commitment to continued learning and staying current with the changing threat landscape
- Demonstrated success neutralizing and remediating ransomware threats
- Strong understanding of incident response processes
- Strong understanding of cyber risks and ability to explain and qualify them for customers
- Excellent verbal communication skills
- Strong written communication skills
- Effective time management
- Ability to delegate and prioritize work across multiple incidents
- Ability to perform effectively under pressure
- Willingness to start early or work late when customer engagements require it
- Strong knowledge of the MITRE ATT&CK framework
- Interest in mentoring and developing junior analysts
- Collaborative approach and willingness to share knowledge
- Availability to work some weekends and holidays
- Post-secondary education in cybersecurity or a comparable field
- Legal authorization to work in Canada without employer sponsorship
Imtiyozlar
- Bonus eligibility
- Comprehensive benefits package
- Remote-first working model
- Employee-led diversity and inclusion networks
- Annual charity and fundraising initiatives
- Volunteer days
- Global employee sustainability initiatives
- Global fitness and trivia competitions
- Global wellbeing days
- Monthly wellbeing webinars and training
- Equal opportunity and recruitment adjustments