Team Lead – Threat Analyst

• Manage the operations and effectiveness of the Security Operations Center and its personnel
• Oversee day-to-day security operations for Sophos MDR customers
• Maintain supervision over operational tasks and provide daily oversight for threat analysts
• Oversee analysts during investigation and response activities
• Determine possible root causes and resolutions during security incidents
• Communicate information effectively to stakeholders at all levels
• Lead incident scenarios and provide cybersecurity incident response subject matter expertise
• Execute incident handling procedures and respond directly to cybersecurity incidents
• Maintain current knowledge of attacker tools, tactics, and procedures
• Produce indicators of compromise for active and future investigations
• Assess cyber threat intelligence and open-source intelligence and operationalize that information
• Apply research to identify current and emerging threats
• Handle sophisticated malware and dynamic cyber threat actors

• 5+ years of experience within a cybersecurity environment; leadership experience preferred
• Bachelor's in Information Technology, Computer Science, or a related field; or relevant, commensurate work experience
• Experience in a security operations center or similar environment
• Experience identifying indications of compromise or attack and responding to incidents
• Endpoint and network security experience required
• Experience with IDS, IPS, EDR, ATP, malware defenses, and monitoring
• Threat hunting experience preferred
• Knowledge of common adversary tactics and techniques, including obfuscation, persistence, and defense evasion
• Knowledge of the MITRE ATT&CK framework preferred
• Working knowledge of incident response procedures
• Experience with SQL query construction preferred
• Experience with OSQuery is a plus
• Experience administering and supporting Windows OS and either Apple or Linux-based operating systems
• Fundamental understanding of network traffic analysis, including TCP/IP, routing, switching, and protocols
• Legal authorization to work in India without employer sponsorship

• Remote-first working model, with remote work as the primary option for most employees
• Employee-led diversity and inclusion networks
• Annual charity and fundraising initiatives
• Volunteer days for employees
• Global employee sustainability initiatives
• Global fitness and trivia competitions
• Global wellbeing days
• Monthly wellbeing webinars and training
• Equal opportunity and support for adjustments during recruitment and selection