Search Remote Jobs

Threat Analyst, Level 2

🔥 1 hour ago

🇦🇺 Australia – Remote

⏰ Full Time

🟢 Junior

🟡 Mid-level

🧐 Analyst

Where this job comes from

Posted on Sophos's careers page, not through a job board

First seen by Remote Rocketship 1 hour ago

Logo of Sophos

Sophos

1001 - 5000 employees

Founded 1985

💼 Consulting

🏥 Healthcare

🏭 Manufacturing

💰 Post-IPO Equity on 2021-08

Consulting • Healthcare • Manufacturing

Sophos is a leading cybersecurity company that specializes in protecting businesses against advanced cyber threats. The company offers a comprehensive suite of security solutions, including endpoint protection, managed detection and response (MDR), network security, and cloud security. With a prevention-first approach, Sophos aims to stop ransomware and other cyber threats before they cause harm. Sophos provides services such as threat research, security training, and operational support to ensure robust defense against cyberattacks. Their solutions cater to various industries including finance, healthcare, government, manufacturing, and retail. The Sophos Central platform delivers centralized security management, integrating seamlessly with existing IT infrastructure to enhance security posture.

📋 Description

• Investigate, identify and neutralize cyber threats using enterprise systems, log analysis systems and endpoint collection systems • Handle escalations from Level I Threat Analysts and guide or advise on investigations • Onboard and train new Threat Analysts • Participate in Security Operations process improvement and creation • Provide detection and response to security events and cyber threats • Conduct security log management and monitoring • Maintain information security metrics • Assist core security and threat response teams • Create MDR service-related reports • Create cases for clients • Track and follow up with clients through threat neutralization • Interact with clients through various mediums • Research recent indicators of compromise or attack, exploits and vulnerabilities • Obtain metrics for reporting on threat trends, intelligence analysis and situational awareness

🎯 Requirements

• 2-4 years of experience working in a SOC environment or computer security team in an IT environment • Endpoint and network security experience, including IDS, IPS, EDR, ATP, malware defenses and monitoring • Threat hunting experience preferred • Knowledge of common adversary tactics and techniques • Knowledge of the MITRE ATT&CK framework preferred • Working knowledge of incident response procedures • Experience with SQL query construction preferred • Experience with OSQuery is a plus • Experience administering and supporting Windows OS and either Apple or Linux-based operating systems • Fundamental understanding of network traffic analysis, including TCP/IP, routing, switching and protocols • Strong understanding of Windows event log analysis • Experience with enterprise information security data management; SIEM experience a plus • Experience with scripting languages such as KQL, PowerShell or Python • Advanced cybersecurity certifications preferred but not required • Bachelor’s degree in Information Technology, Computer Science or a related field, or relevant commensurate work experience • Willingness to work outside standard business hours, including weekends and holidays, for a 24x7x365 service • Ability to work effectively in a team and independently • Legal authorization to work in Australia without employer sponsorship

🏖️ Benefits

• Remote-first working model • Employee-led diversity and inclusion networks • Annual charity and fundraising initiatives • Volunteer days • Global employee sustainability initiatives • Global fitness and trivia competitions • Global wellbeing days • Monthly wellbeing webinars and training • Equal opportunity and recruitment-process adjustments for applicants with disabilities or other needs

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🕒 October 15

Fastly

501 - 1000

💼 Consulting

📦 Logistics

📣 Marketing

Threat Detection Analyst protecting Fastly’s edge cloud customers from DDoS, bot, and web application attacks. Monitoring threats, deploying mitigations, and advising managed security customers.

🕒 October 15

CrowdStrike

5001 - 10000

🔒 Cybersecurity

☁️ SaaS

🤖 Artificial Intelligence

Falcon Complete Associate Analyst conducting incident response and malware analysis for CrowdStrike’s global cybersecurity operations. Serving Japanese-speaking customers remotely from Japan or Australia.

🗣️🇯🇵 Japanese Required

🕒 July 13

Fastly

501 - 1000

💼 Consulting

📦 Logistics

📣 Marketing

🗣️🇯🇵 Japanese Required

🕒 March 18

Coinbase

1001 - 5000

💼 Consulting

₿ Crypto

💸 Finance

Complaints Analyst investigating and resolving customer, regulatory, and litigation-support complaints for Coinbase, a cryptocurrency financial platform. Managing cases from intake through resolution using Salesforce and SLA-driven quality controls.

Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok