Senior Incident Response Consultant, Rapid Response

🕒 vor 6 Tagen

🇬🇧 Vereinigtes Königreich – Remote

⏰ Vollzeit

🟠 Senior

💼 Berater

🇬🇧 UK-Skilled-Worker-Visum-Sponsor

Dieses Unternehmen hat in der Vergangenheit UK-Skilled-Worker-Visa gesponsert.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Sophos

WebsiteLinkedInAlle Stellen

1001 - 5000 Mitarbeiter

Gegründet 1985

💼 Beratung

🏥 Gesundheitswesen

🏭 Fertigung

💰 Post-IPO Equity im 2021-08

Consulting • Healthcare • Manufacturing

Sophos ist ein führendes Cybersecurity-Unternehmen, das sich auf den Schutz von Unternehmen vor fortgeschrittenen Cyberbedrohungen spezialisiert hat. Das Unternehmen bietet eine umfassende Suite an Sicherheitslösungen, darunter Endpoint Protection, Managed Detection and Response (MDR), Network Security und Cloud Security. Mit einem präventionsorientierten Ansatz zielt Sophos darauf ab, Ransomware und andere Cyberbedrohungen zu stoppen, bevor sie Schaden anrichten. Sophos bietet Services wie Threat Research, Sicherheitsschulungen und operativen Support, um eine robuste Verteidigung gegen Cyberangriffe sicherzustellen. Die Lösungen richten sich an verschiedene Branchen, darunter Finanzwesen, Gesundheitswesen, öffentlicher Sektor, Fertigung und Einzelhandel. Die Plattform Sophos Central ermöglicht ein zentrales Sicherheitsmanagement und integriert sich nahtlos in bestehende IT-Infrastrukturen, um das Sicherheitsniveau zu erhöhen.

Beschreibung

• The working week for this role will be Fri, Sat, Sun and Monday working with Tues, Wed and Thursdays off • Lead kick off calls with customers to understand their situation and identify initial response actions to contain the threat • Provide guidance to customers on best practices following an incident • Lead daily update calls for customers to deliver forensic findings • Deliver concise email updates to customers between update calls • Direct the forensic investigations, identify priorities, and delegate tasks to analysts • Conduct multiple Rapid Response incidents concurrently • Determine TTPs identified by analysts and add them to the threat intel platform • Write clear and concise Executive Summary style reports in a timely manner • Responsible for basic to moderate complexity projects that contribute to the development of the Sophos Rapid Response service • Provide daily handover notes to teams located in different time zones, or when incident responsibility is being transferred to another Incident Lead

🎯 Anforderungen

• 5+ years of experience leading incident response investigations involving ransomware • Experience leading BEC investigations • Continuously learning and staying informed of the changing threat landscape • Proven track record of successful neutralization and remediation of ransomware threats • Excellent understanding of the Incident Response process • Excellent understanding of cyber risks and able to qualify them to customers • Excellent oral communication skills • Strong written communication skills • Ability to manage time effectively • Able to delegate and prioritize tasks across multiple incidents • Able to excel under stressful circumstances • Occasionally willing to begin work early and/or stay late when warranted for customer engagements • Strong grasp of the MITRE ATT&CK framework • Enjoy mentoring and assisting in the development of junior analysts • A team-player attitude with a willingness to share knowledge • Ability to work some weekends and holidays • Post-secondary education in Cybersecurity, comparable • **Desirable:** • Cybersecurity certifications an asset (e.g. CISSP, GCFA, or similar) • Experience with SIEM technology (e.g. Splunk, ELK, etc.) • Willingness to work occasional overtime during peak times or holidays • Experience writing SQL queries • Experience writing PowerShell, Python, or Bash scripts

🏖️ Vorteile

• Sophos operates a remote-first working model, making remote work the primary option for most employees • Our people – we innovate and create, all of which are accompanied by a great sense of fun and team spirit • Employee-led diversity and inclusion networks that build community and provide education and advocacy • Annual charity and fundraising initiatives and volunteer days for employees to support local communities • Global employee sustainability initiatives to reduce our environmental footprint • Global fitness and trivia competitions to keep our bodies and minds sharp • Global wellbeing days for employees to relax and recharge • Monthly wellbeing webinars and training to support employee health and wellbeing