Senior Threat Analyst

🔥 0 minutes ago

🇨🇦 Canada – Remote

💵 $86k - $143k / year

⏰ Full Time

🟠 Senior

🧐 Analyst

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sophos

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1985

💼 Consulting

🏥 Healthcare

🏭 Manufacturing

💰 Post-IPO Equity on 2021-08

Consulting • Healthcare • Manufacturing

Sophos is a leading cybersecurity company that specializes in protecting businesses against advanced cyber threats. The company offers a comprehensive suite of security solutions, including endpoint protection, managed detection and response (MDR), network security, and cloud security. With a prevention-first approach, Sophos aims to stop ransomware and other cyber threats before they cause harm. Sophos provides services such as threat research, security training, and operational support to ensure robust defense against cyberattacks. Their solutions cater to various industries including finance, healthcare, government, manufacturing, and retail. The Sophos Central platform delivers centralized security management, integrating seamlessly with existing IT infrastructure to enhance security posture.

📋 Description

• Monitor, investigate, and respond to alerts generated by the Sophos security stack, including EDR/XDR capabilities • Lead and mentor Tier I Analysts through escalated cases • Perform end-to-end analysis of suspicious activity to assess scope, impact, and risk • Identify and respond to cyber threats across customer environments using approved playbooks and tooling • Document findings, investigative steps, and outcomes in the MDR case management platform • Conduct threat hunting across the MDR customer base • Investigate phishing emails, suspicious binaries, and behavioral anomalies • Support detection tuning by identifying recurring false positives and suggesting improvements • Stay informed on threat actor behaviors, MITRE ATT&CK techniques, and Sophos threat research • Research emerging IOCs, active exploits, and vulnerabilities • Contribute to internal knowledge bases, documentation, and continuous improvement initiatives • Participate in shift rotations and provide detailed handovers between global teams • Provide detection and response support for active security incidents • Manage case workflows and follow up with clients until resolution • Engage with clients via chat, phone, and tickets • Assist with developing and refining Security Operations processes, playbooks, and tooling

🎯 Requirements

• 5+ years of hands-on experience in a Security Operations Center (SOC), Managed Detection and Response (MDR) environment, or cybersecurity-focused IT role • Proficient in endpoint and network security tools, including EDR, IDS/IPS, and malware detection platforms • Working knowledge of Windows workstation and server operating systems, plus Linux or macOS • Ability to interpret and analyze Windows event logs and other telemetry data • Understanding of TCP/IP, protocols, routing, and traffic analysis • Experience contributing to real-time incident response efforts and threat investigations • Exposure to threat hunting methodologies and attacker behavior patterns • Experience handling active threats, including containment, mitigation, and recovery • Familiarity with persistence, privilege escalation, lateral movement, and defense evasion techniques • Familiarity with incident response workflows and security operations processes • Strong analytical thinking and troubleshooting skills • Excellent communication skills for technical and non-technical audiences • Customer-first mindset and professionalism • Ability to work both within a team and independently • Bachelor's degree in information technology, Computer Science, Cybersecurity or related field, or equivalent practical experience • Willingness to participate in shift work including nights, weekends and holidays • Legal authorization to work in Canada without employer sponsorship

🏖️ Benefits

• Bonus eligibility • Comprehensive benefits package • Remote-first working model • Employee-led diversity and inclusion networks • Annual charity and fundraising initiatives • Volunteer days • Global employee sustainability initiatives • Global fitness and trivia competitions • Global wellbeing days • Monthly wellbeing webinars and training