Incident Response Analyst 1

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sophos

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1985

🔒 Cybersecurity

☁️ SaaS

💰 Post-IPO Equity on 2021-08

Cybersecurity • SaaS

Sophos is a leading cybersecurity company that specializes in protecting businesses against advanced cyber threats. The company offers a comprehensive suite of security solutions, including endpoint protection, managed detection and response (MDR), network security, and cloud security. With a prevention-first approach, Sophos aims to stop ransomware and other cyber threats before they cause harm. Sophos provides services such as threat research, security training, and operational support to ensure robust defense against cyberattacks. Their solutions cater to various industries including finance, healthcare, government, manufacturing, and retail. The Sophos Central platform delivers centralized security management, integrating seamlessly with existing IT infrastructure to enhance security posture.

📋 Description

• Assist with investigative and forensic analysis across endpoints, network logs, and cloud telemetry under the direction of senior analysts • Support containment and response actions to neutralize active threats as directed by Incident Advisors or Senior Analysts • Triage and review alerts, indicators of compromise (IOCs), artifacts, and telemetry, escalating findings to senior analysts to help determine scope and root cause • Maintain clear and accurate engagement documentation, including trailheads, timelines, and playbooks • Develop incident response skills through hands-on engagements while following CIRT investigative and documentation standards • Contribute technical findings and summaries to support customer updates and post-incident reports • Identify and communicate detection or response gaps observed during investigations • Participate in shift handovers, debriefs, and post-incident reviews to ensure engagement continuity • Maintain accurate time and activity tracking to support operational visibility and service improvement

🎯 Requirements

• 1-2 years of experience in a SOC, MDR, or security operations role preferred • Foundational technical understanding of endpoint security, log analysis, and common attack techniques • Familiarity with common threats such as malware, credential theft, and ransomware • Ability to review and triage alerts and telemetry, escalating to senior analysts as appropriate • Strong written and verbal communication skills for documenting findings and contributing to customer updates • Eagerness to learn and develop technical skills with guidance from senior analysts • Ability to work effectively in high-pressure, time-sensitive incident environments • Willingness to work some weekends and holidays as part of a rotation

🏖️ Benefits

• Sophos operates a remote-first working model • Employee-led diversity and inclusion networks • Annual charity and fundraising initiatives • Global employee sustainability initiatives • Global fitness and trivia competitions • Global wellbeing days • Monthly wellbeing webinars and training