Cyber Risk Analyst

Job not on LinkedIn

🕒 April 23

🇮🇳 India – Remote

⏰ Full Time

🟢 Junior

🔐 Security Analyst

👻 Ghost score 41%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sophos

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1985

💼 Consulting

🏥 Healthcare

🏭 Manufacturing

💰 Post-IPO Equity on 2021-08

Consulting • Healthcare • Manufacturing

Sophos is a leading cybersecurity company that specializes in protecting businesses against advanced cyber threats. The company offers a comprehensive suite of security solutions, including endpoint protection, managed detection and response (MDR), network security, and cloud security. With a prevention-first approach, Sophos aims to stop ransomware and other cyber threats before they cause harm. Sophos provides services such as threat research, security training, and operational support to ensure robust defense against cyberattacks. Their solutions cater to various industries including finance, healthcare, government, manufacturing, and retail. The Sophos Central platform delivers centralized security management, integrating seamlessly with existing IT infrastructure to enhance security posture.

📋 Description

• Assess vulnerabilities identified within Sophos customers’ environments and prescribe remediation actions • Analyze data and conduct cyber risk assessments • Develop strategies to enhance customers’ security posture • Conduct recurring vulnerability scans on enterprise assets and report discovered vulnerabilities • Monitor and review vulnerability and compliance scan results • Track remediation against service objectives • Assist senior team members in developing risk-based remediation plans • Stay informed about the threat landscape to prioritize vulnerabilities and adapt security measures • Pursue continuous, self-driven learning in Vulnerability Management • Maintain strong working relationships within the Sophos Managed Services organization • Identify, prioritize, and remediate vulnerabilities across internal and external attack surfaces • Use Tenable-powered exposure management technology to uncover assets and monitor security weaknesses • Evaluate vulnerabilities based on exploitability, emerging threats, and business impact • Deliver risk insights, remediation guidance, and expert analysis • Track newly disclosed and critical vulnerabilities • Collaborate closely with customers, senior analysts, and advisors

🎯 Requirements

• 1+ years of experience conducting vulnerability assessments and attack surface management, preferably in IT and OT environments • Ability to work both within a team and independently • Entry-level understanding of Vulnerability Management practices and risk analytics/modeling • Proficiency with vulnerability scanning tools such as Nessus/Tenable • Experience tracking trends and configuring systems to minimize false positives and focus on true events • Exceptional writing, documentation, and presentation skills • Ability to prioritize impactful vulnerabilities and minimize tool-generated noise • Understanding of network-based, system-level, cloud, and application-layer attacks and mitigation methods • Understanding of vulnerability classification and scoring methodologies, including CVSS, CVE, and CWE • Fundamental understanding of risk versus severity • Willingness to work outside standard business hours, including weekends and holidays • Ability to manage time independently while juggling multiple projects • Excellent customer service skills • Degree in Cybersecurity, Information Technology, Computer Science, or a related field • Legal authorization to work in India without employer sponsorship

🏖️ Benefits

• Remote-first working model • Employee-led diversity and inclusion networks • Annual charity and fundraising initiatives • Volunteer days • Global employee sustainability initiatives • Global fitness and trivia competitions • Global wellbeing days • Monthly wellbeing webinars and training • Recruitment and selection process adjustments for applicants with disabilities or other needs