Senior Incident Response Consultant

🔥 13 hours ago

🇨🇦 Canada – Remote

💵 $131k - $219k / year

⏰ Full Time

🟠 Senior

💼 Consultant

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sophos

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1985

💼 Consulting

🏥 Healthcare

🏭 Manufacturing

💰 Post-IPO Equity on 2021-08

Consulting • Healthcare • Manufacturing

Sophos is a leading cybersecurity company that specializes in protecting businesses against advanced cyber threats. The company offers a comprehensive suite of security solutions, including endpoint protection, managed detection and response (MDR), network security, and cloud security. With a prevention-first approach, Sophos aims to stop ransomware and other cyber threats before they cause harm. Sophos provides services such as threat research, security training, and operational support to ensure robust defense against cyberattacks. Their solutions cater to various industries including finance, healthcare, government, manufacturing, and retail. The Sophos Central platform delivers centralized security management, integrating seamlessly with existing IT infrastructure to enhance security posture.

📋 Description

• Lead kickoff calls with customers to understand their situation and identify initial response actions to contain threats • Advise customers on post-incident best practices • Lead daily customer update calls and deliver forensic findings • Deliver concise email updates between calls • Direct forensic investigations, identify priorities, and delegate tasks to analysts • Conduct multiple incidents concurrently • Determine analyst-identified TTPs and add them to the threat intelligence platform • Write timely Executive Summary-style reports • Contribute to basic to moderate complexity projects developing the Sophos DFIR service • Provide daily handover notes to teams in different time zones or when transferring incident responsibility • Lead incident response engagements and teams for customers experiencing cybersecurity attacks • Coordinate with legal counsel and cyber insurance carriers as needed • Ensure appropriate actions neutralize threats • Conduct root cause analysis, including determining whether data exfiltration occurred • Produce reports with key-event timelines mapped to the MITRE ATT&CK framework and remediation guidance

🎯 Requirements

• 10+ years of experience leading incident response investigations involving ransomware, network breaches, malicious insiders, and web applications and database services • Experience leading BEC investigations • In-depth digital forensic analysis of AWS, Microsoft Azure, and GCP data • Continuously learning and staying informed of the changing threat landscape • Proven track record of neutralization and remediation of ransomware threats • Excellent understanding of the Incident Response process and cyber risks • Excellent oral and strong written communication skills • Ability to manage time effectively • Ability to delegate and prioritize tasks across multiple incidents • Ability to excel under stressful circumstances • Willingness to begin work early and/or stay late when warranted • Strong grasp of the MITRE ATT&CK framework • Mentoring and knowledge-sharing ability • Ability to work some weekends and holidays • Cybersecurity certifications such as CISSP, GCFA, or similar are an asset • Experience with SIEM technology such as Splunk or ELK is desirable • Willingness to work occasional overtime during peak times or holidays is desirable • Experience writing SQL queries is desirable • Experience writing PowerShell, Python, or Bash scripts is desirable

🏖️ Benefits

• Bonus eligibility • Comprehensive benefits package • Remote-first working model • Employee-led diversity and inclusion networks • Annual charity and fundraising initiatives • Volunteer days • Global employee sustainability initiatives • Global fitness and trivia competitions • Global wellbeing days • Monthly wellbeing webinars and training