Threat Analyst 3

🔥 3 minutes ago

🇨🇦 Canada – Remote

💵 $74k - $123k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🧐 Analyst

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sophos

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1985

💼 Consulting

🏥 Healthcare

🏭 Manufacturing

💰 Post-IPO Equity on 2021-08

Consulting • Healthcare • Manufacturing

Sophos is a leading cybersecurity company that specializes in protecting businesses against advanced cyber threats. The company offers a comprehensive suite of security solutions, including endpoint protection, managed detection and response (MDR), network security, and cloud security. With a prevention-first approach, Sophos aims to stop ransomware and other cyber threats before they cause harm. Sophos provides services such as threat research, security training, and operational support to ensure robust defense against cyberattacks. Their solutions cater to various industries including finance, healthcare, government, manufacturing, and retail. The Sophos Central platform delivers centralized security management, integrating seamlessly with existing IT infrastructure to enhance security posture.

📋 Description

• Monitor, investigate, and respond to alerts generated by the Sophos security stack, including EDR/XDR capabilities • Mentor junior analysts through escalated cases • Perform end-to-end analysis of suspicious activity to assess scope, impact, and risk • Identify and respond to cyber threats across customer environments using approved playbooks and tooling • Document findings, investigative steps, and outcomes in the MDR case management platform • Conduct threat hunting across the MDR customer base • Investigate phishing emails, suspicious binaries, and behavioral anomalies • Support detection tuning by identifying recurring false positives and suggesting improvements • Research threat actor behaviors, MITRE ATT&CK techniques, threat intelligence, emerging IOCs, active exploits, and vulnerabilities • Contribute to internal knowledge bases, documentation, and continuous improvement initiatives • Participate in shift rotations and provide detailed handovers between global teams • Support active security incidents • Create cases, track progress, and follow up with clients until resolution • Engage with clients via chat, phone, and tickets • Help develop and refine Security Operations processes, playbooks, and tooling

🎯 Requirements

• 3+ years of hands-on experience in a Security Operations Center (SOC), Managed Detection and Response (MDR) environment, or cybersecurity-focused IT role • Proficient in endpoint and network security tools, including EDR, IDS/IPS, and malware detection platforms • Working knowledge of Windows workstations and servers, plus Linux or macOS environments • Ability to interpret and analyze Windows event logs and other telemetry data • Understanding of TCP/IP, protocols, routing, and traffic analysis • Experience contributing to real-time incident response and threat investigations • Exposure to threat hunting methodologies and attacker behavior patterns • Experience with containment, mitigation, and recovery during security incidents • Familiarity with persistence, privilege escalation, lateral movement, and defense evasion techniques • Familiarity with incident response workflows and security operations processes • Strong analytical thinking, troubleshooting, and attention to detail • Excellent communication skills for technical and non-technical audiences • Customer-first mindset and professionalism • Bachelor's degree in information technology, Computer Science, Cybersecurity or related field, or equivalent practical experience • Willingness to participate in shift work including nights, weekends, and holidays • Legal authorization to work in Canada without employer sponsorship

🏖️ Benefits

• Bonus eligibility • Comprehensive benefits package • Remote-first working model • Employee-led diversity and inclusion networks • Annual charity and fundraising initiatives • Volunteer days • Global employee sustainability initiatives • Global fitness and trivia competitions • Global wellbeing days • Monthly wellbeing webinars and training