Threat Analyst 2

🔥 0 minutes ago

🇬🇧 United Kingdom – Remote

⏰ Full Time

🟢 Junior

🟡 Mid-level

🧐 Analyst

🇬🇧 UK Skilled Worker Visa Sponsor

This company has sponsored UK Skilled Worker visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sophos

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1985

💼 Consulting

🏥 Healthcare

🏭 Manufacturing

💰 Post-IPO Equity on 2021-08

Consulting • Healthcare • Manufacturing

Sophos is a leading cybersecurity company that specializes in protecting businesses against advanced cyber threats. The company offers a comprehensive suite of security solutions, including endpoint protection, managed detection and response (MDR), network security, and cloud security. With a prevention-first approach, Sophos aims to stop ransomware and other cyber threats before they cause harm. Sophos provides services such as threat research, security training, and operational support to ensure robust defense against cyberattacks. Their solutions cater to various industries including finance, healthcare, government, manufacturing, and retail. The Sophos Central platform delivers centralized security management, integrating seamlessly with existing IT infrastructure to enhance security posture.

📋 Description

• Provide monitoring, detection and response services to proactively defend customer environments • Investigate and analyze logs and security-related events using Sophos tooling • Handle Tier I Threat Analyst escalations and advise on investigations • Onboard and train new Threat Analysts • Create cases and track customers through threat neutralization • Communicate and document findings for technical and executive audiences • Follow up with customers through issue resolution and provide recommendations to minimize risk • Respond to inbound customer requests via email, phone and tickets • Collaborate with security and threat response teams • Research emerging indicators of compromise or attack, exploits and vulnerabilities • Conduct threat hunting across the MDR customer base • Participate in Security Operations process improvement and creation • Obtain metrics for reporting on threat trends, intelligence analysis and situational awareness • Work with cyber threat hunters, incident response analysts, engineers and ethical hackers using enterprise, log analysis and endpoint collection systems

🎯 Requirements

• 2+ years of experience working in a SOC environment or computer security team in an IT environment • Endpoint and network security experience, including IDS, IPS, EDR, ATP, malware defenses and monitoring • Experience with threat hunting • Experience administering and supporting Windows workstations and servers, plus Apple or Linux-based operating systems • Knowledge of common adversary tactics and techniques, including obfuscation, persistence and defense evasion • Fundamental understanding of network traffic analysis, including TCP/IP, routing, switching and protocols • Strong understanding of Windows event log analysis • Working knowledge of incident response procedures • Passion for information technology and cybersecurity • Curiosity and ability to learn new skills quickly • Excellent troubleshooting and analytical skills • Strong written and verbal communication skills • Ability to work in a team and independently • Innovative mindset and contribution to a cybersecurity service • Bachelor’s in Information Technology, Computer Science or a related field, or relevant commensurate work experience • Willingness to work weekends and holidays as needed for a 24x7x365 MDR service • Knowledge of MITRE ATT&CK framework (desirable) • Experience with SQL query construction (desirable) • OSQuery programming and scripting skills, including PowerShell (desirable) • Experience with SIEM and enterprise information security data management (desirable) • Advanced cybersecurity certifications (desirable) • Legal authorization to work in the United Kingdom without employer sponsorship

🏖️ Benefits

• Remote-first working model • Employee-led diversity and inclusion networks • Annual charity and fundraising initiatives • Volunteer days • Global employee sustainability initiatives • Global fitness and trivia competitions • Global wellbeing days • Monthly wellbeing webinars and training • Equal opportunity and recruitment-process adjustment support