Senior Incident Response Consultant, Rapid Response

🔥 0 minutes ago

🇬🇧 United Kingdom – Remote

⏰ Full Time

🟠 Senior

💼 Consultant

🇬🇧 UK Skilled Worker Visa Sponsor

This company has sponsored UK Skilled Worker visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sophos

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1985

💼 Consulting

🏥 Healthcare

🏭 Manufacturing

💰 Post-IPO Equity on 2021-08

Consulting • Healthcare • Manufacturing

Sophos is a leading cybersecurity company that specializes in protecting businesses against advanced cyber threats. The company offers a comprehensive suite of security solutions, including endpoint protection, managed detection and response (MDR), network security, and cloud security. With a prevention-first approach, Sophos aims to stop ransomware and other cyber threats before they cause harm. Sophos provides services such as threat research, security training, and operational support to ensure robust defense against cyberattacks. Their solutions cater to various industries including finance, healthcare, government, manufacturing, and retail. The Sophos Central platform delivers centralized security management, integrating seamlessly with existing IT infrastructure to enhance security posture.

📋 Description

• The working week for this role will be Fri, Sat, Sun and Monday working with Tues, Wed and Thursdays off • Lead kick off calls with customers to understand their situation and identify initial response actions to contain the threat • Provide guidance to customers on best practices following an incident • Lead daily update calls for customers to deliver forensic findings • Deliver concise email updates to customers between update calls • Direct the forensic investigations, identify priorities, and delegate tasks to analysts • Conduct multiple Rapid Response incidents concurrently • Determine TTPs identified by analysts and add them to the threat intel platform • Write clear and concise Executive Summary style reports in a timely manner • Responsible for basic to moderate complexity projects that contribute to the development of the Sophos Rapid Response service • Provide daily handover notes to teams located in different time zones, or when incident responsibility is being transferred to another Incident Lead

🎯 Requirements

• 5+ years of experience leading incident response investigations involving ransomware • Experience leading BEC investigations • Continuously learning and staying informed of the changing threat landscape • Proven track record of successful neutralization and remediation of ransomware threats • Excellent understanding of the Incident Response process • Excellent understanding of cyber risks and able to qualify them to customers • Excellent oral communication skills • Strong written communication skills • Ability to manage time effectively • Able to delegate and prioritize tasks across multiple incidents • Able to excel under stressful circumstances • Occasionally willing to begin work early and/or stay late when warranted for customer engagements • Strong grasp of the MITRE ATT&CK framework • Enjoy mentoring and assisting in the development of junior analysts • A team-player attitude with a willingness to share knowledge • Ability to work some weekends and holidays • Post-secondary education in Cybersecurity, comparable • **Desirable:** • Cybersecurity certifications an asset (e.g. CISSP, GCFA, or similar) • Experience with SIEM technology (e.g. Splunk, ELK, etc.) • Willingness to work occasional overtime during peak times or holidays • Experience writing SQL queries • Experience writing PowerShell, Python, or Bash scripts

🏖️ Benefits

• Sophos operates a remote-first working model, making remote work the primary option for most employees • Our people – we innovate and create, all of which are accompanied by a great sense of fun and team spirit • Employee-led diversity and inclusion networks that build community and provide education and advocacy • Annual charity and fundraising initiatives and volunteer days for employees to support local communities • Global employee sustainability initiatives to reduce our environmental footprint • Global fitness and trivia competitions to keep our bodies and minds sharp • Global wellbeing days for employees to relax and recharge • Monthly wellbeing webinars and training to support employee health and wellbeing