Senior Incident Response Consultant, Rapid Response

🕒 il y a 7 jours

🇬🇧 Royaume-Uni – Télétravail

⏰ Temps Plein

🟠 Senior

💼 Consultant

🇬🇧 Parrain de Visa de Travailleur Qualifié UK

Cette entreprise a parrainé des visas de Travailleur Qualifié du Royaume-Uni par le passé.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Sophos

Site WebLinkedInTous les Emplois

1001 - 5000 employés

Fondée en 1985

💼 Conseil

🏥 Santé

🏭 Fabrication

💰 Post-IPO Equity en 2021-08

Consulting • Healthcare • Manufacturing

Sophos est une entreprise leader dans le domaine de la cybersécurité, spécialisée dans la protection des entreprises contre les menaces informatiques avancées. La société propose une suite complète de solutions de sécurité, incluant la protection des endpoints, la détection et réponse gérées (MDR), la sécurité des réseaux et la sécurité dans le cloud. Avec une approche axée sur la prévention, Sophos vise à stopper les ransomwares et autres menaces électroniques avant qu'ils ne causent des dommages. Sophos fournit des services tels que la recherche de menaces, la formation à la sécurité et le support opérationnel pour assurer une défense robuste contre les cyberattaques. Leurs solutions s'adressent à divers secteurs comme la finance, la santé, le gouvernement, la fabrication et la distribution. La plateforme Sophos Central offre une gestion centralisée de la sécurité, s'intégrant parfaitement à l'infrastructure informatique existante pour renforcer la posture de sécurité.

Description

• The working week for this role will be Fri, Sat, Sun and Monday working with Tues, Wed and Thursdays off • Lead kick off calls with customers to understand their situation and identify initial response actions to contain the threat • Provide guidance to customers on best practices following an incident • Lead daily update calls for customers to deliver forensic findings • Deliver concise email updates to customers between update calls • Direct the forensic investigations, identify priorities, and delegate tasks to analysts • Conduct multiple Rapid Response incidents concurrently • Determine TTPs identified by analysts and add them to the threat intel platform • Write clear and concise Executive Summary style reports in a timely manner • Responsible for basic to moderate complexity projects that contribute to the development of the Sophos Rapid Response service • Provide daily handover notes to teams located in different time zones, or when incident responsibility is being transferred to another Incident Lead

🎯 Exigences

• 5+ years of experience leading incident response investigations involving ransomware • Experience leading BEC investigations • Continuously learning and staying informed of the changing threat landscape • Proven track record of successful neutralization and remediation of ransomware threats • Excellent understanding of the Incident Response process • Excellent understanding of cyber risks and able to qualify them to customers • Excellent oral communication skills • Strong written communication skills • Ability to manage time effectively • Able to delegate and prioritize tasks across multiple incidents • Able to excel under stressful circumstances • Occasionally willing to begin work early and/or stay late when warranted for customer engagements • Strong grasp of the MITRE ATT&CK framework • Enjoy mentoring and assisting in the development of junior analysts • A team-player attitude with a willingness to share knowledge • Ability to work some weekends and holidays • Post-secondary education in Cybersecurity, comparable • **Desirable:** • Cybersecurity certifications an asset (e.g. CISSP, GCFA, or similar) • Experience with SIEM technology (e.g. Splunk, ELK, etc.) • Willingness to work occasional overtime during peak times or holidays • Experience writing SQL queries • Experience writing PowerShell, Python, or Bash scripts

🏖️ Avantages

• Sophos operates a remote-first working model, making remote work the primary option for most employees • Our people – we innovate and create, all of which are accompanied by a great sense of fun and team spirit • Employee-led diversity and inclusion networks that build community and provide education and advocacy • Annual charity and fundraising initiatives and volunteer days for employees to support local communities • Global employee sustainability initiatives to reduce our environmental footprint • Global fitness and trivia competitions to keep our bodies and minds sharp • Global wellbeing days for employees to relax and recharge • Monthly wellbeing webinars and training to support employee health and wellbeing