Senior Threat Analyst

🔥 8 minutes ago

🇷🇴 Romania – Remote

⏰ Full Time

🟠 Senior

🧐 Analyst

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Sophos

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1985

💼 Consulting

🏥 Healthcare

🏭 Manufacturing

💰 Post-IPO Equity on 2021-08

Consulting • Healthcare • Manufacturing

Sophos is a leading cybersecurity company that specializes in protecting businesses against advanced cyber threats. The company offers a comprehensive suite of security solutions, including endpoint protection, managed detection and response (MDR), network security, and cloud security. With a prevention-first approach, Sophos aims to stop ransomware and other cyber threats before they cause harm. Sophos provides services such as threat research, security training, and operational support to ensure robust defense against cyberattacks. Their solutions cater to various industries including finance, healthcare, government, manufacturing, and retail. The Sophos Central platform delivers centralized security management, integrating seamlessly with existing IT infrastructure to enhance security posture.

📋 Description

• Monitor, investigate, and respond to alerts generated by the Sophos security stack, including EDR/XDR capabilities • Lead and mentor Tier I Analysts through escalated cases • Perform end-to-end analysis of suspicious activity to assess scope, impact, and risk • Identify and respond to cyber threats across customer environments using approved playbooks and tooling • Document findings, investigative steps, and outcomes in the MDR case management platform • Conduct threat hunting across the MDR customer base • Investigate phishing emails, suspicious binaries, and behavioral anomalies • Support detection tuning by identifying recurring false positives and suggesting improvements • Track threat actor behaviors, MITRE ATT&CK techniques, and Sophos threat research updates • Research emerging IOCs, active exploits, and vulnerabilities • Contribute to internal knowledge bases, documentation, and continuous improvement initiatives • Participate in shift rotations and provide detailed handovers between global teams • Provide detection and response support for active security incidents • Manage case workflows and follow up with clients until resolution • Engage with clients via chat, phone, and tickets • Assist with developing and refining Security Operations processes, playbooks, and tooling feedback • Provide monitoring, detection, and response services to defend customer environments using enterprise, log analysis, and endpoint collection systems

🎯 Requirements

• 3+ years of hands-on experience in a Security Operations Center (SOC), Managed Detection and Response (MDR) environment, or cybersecurity-focused IT role • Proficient in endpoint and network security tools, including EDR, IDS/IPS, and malware detection platforms • Working knowledge of Windows workstations and servers, plus Linux or macOS environments • Ability to interpret and analyze Windows event logs and telemetry data • Understanding of TCP/IP, protocols, routing, and traffic analysis • Experience contributing to real-time incident response and threat investigations • Exposure to threat hunting methodologies and attacker behavior patterns • Experience with containment, mitigation, and recovery during security incidents • Familiarity with persistence, privilege escalation, lateral movement, and defense evasion techniques • Familiarity with incident response workflows and security operations processes • Strong analytical and troubleshooting skills with attention to investigative detail • Excellent communication skills for technical and non-technical audiences • Bachelor's degree in information technology, Computer Science, Cybersecurity, or related field, or equivalent practical experience • Ability to communicate in English • Willingness to participate in shift work including nights, weekends, and holidays • Familiarity with MITRE ATT&CK, SIEM platforms, SQL, OSQuery, PowerShell, or relevant cybersecurity certifications is desirable

🏖️ Benefits

• Remote-first working model, with remote work as the primary option for most employees • Employee-led diversity and inclusion networks • Annual charity and fundraising initiatives and volunteer days • Global employee sustainability initiatives • Global fitness and trivia competitions • Global wellbeing days • Monthly wellbeing webinars and training • Recruitment and selection process adjustments to support applicants with disabilities or other needs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume