Senior Threat Analyst

• Monitor, investigate, and respond to alerts generated by the Sophos security stack, including EDR/XDR capabilities
• Lead and mentor Tier I Analysts through escalated cases
• Perform end-to-end analysis of suspicious activity to assess scope, impact, and risk
• Identify and respond to cyber threats across customer environments using approved playbooks and tooling
• Document findings, investigative steps, and outcomes in the MDR case management platform
• Conduct threat hunting across the MDR customer base
• Investigate phishing emails, suspicious binaries, and behavioral anomalies
• Support detection tuning by identifying recurring false positives and suggesting improvements
• Track threat actor behaviors, MITRE ATT&CK techniques, and Sophos threat research updates
• Research emerging IOCs, active exploits, and vulnerabilities
• Contribute to internal knowledge bases, documentation, and continuous improvement initiatives
• Participate in shift rotations and provide detailed handovers between global teams
• Provide detection and response support for active security incidents
• Manage case workflows and follow up with clients until resolution
• Engage with clients via chat, phone, and tickets
• Assist with developing and refining Security Operations processes, playbooks, and tooling feedback
• Provide monitoring, detection, and response services to defend customer environments using enterprise, log analysis, and endpoint collection systems

• 3+ years of hands-on experience in a Security Operations Center (SOC), Managed Detection and Response (MDR) environment, or cybersecurity-focused IT role
• Proficient in endpoint and network security tools, including EDR, IDS/IPS, and malware detection platforms
• Working knowledge of Windows workstations and servers, plus Linux or macOS environments
• Ability to interpret and analyze Windows event logs and telemetry data
• Understanding of TCP/IP, protocols, routing, and traffic analysis
• Experience contributing to real-time incident response and threat investigations
• Exposure to threat hunting methodologies and attacker behavior patterns
• Experience with containment, mitigation, and recovery during security incidents
• Familiarity with persistence, privilege escalation, lateral movement, and defense evasion techniques
• Familiarity with incident response workflows and security operations processes
• Strong analytical and troubleshooting skills with attention to investigative detail
• Excellent communication skills for technical and non-technical audiences
• Bachelor's degree in information technology, Computer Science, Cybersecurity, or related field, or equivalent practical experience
• Ability to communicate in English
• Willingness to participate in shift work including nights, weekends, and holidays
• Familiarity with MITRE ATT&CK, SIEM platforms, SQL, OSQuery, PowerShell, or relevant cybersecurity certifications is desirable

• Remote-first working model, with remote work as the primary option for most employees
• Employee-led diversity and inclusion networks
• Annual charity and fundraising initiatives and volunteer days
• Global employee sustainability initiatives
• Global fitness and trivia competitions
• Global wellbeing days
• Monthly wellbeing webinars and training
• Recruitment and selection process adjustments to support applicants with disabilities or other needs