jobapplier

Threat Analyst

Sophos

Join our Managed Detection and Response (MDR) team as a Threat Analyst. You will be responsible for monitoring, detecting, and responding to cyber threats, investigating logs and security-related events, and communicating findings to various customer audiences. You will also collaborate with core security and threat response teams and actively research emerging threats. This is a remote-first position with flexible hours and a range of benefits.

Knowledge of common adversary tactics and techniques, e.g., obfuscation, persistence, defense evasion, etc

Responsibilities

  • Investigate and analyze logs and security-related events to identify and respond to cyber threats.
  • Collaborate with a team of cyber threat hunters, incident response analysts, engineers, and ethical hackers to facilitate investigations.
  • Communicate and document findings to various customer audiences, and follow up with customers through to issue resolution.
  • Innovative mindset and driven to contribute to a team providing a best-in-class cybersecurity service

Requirements

  • Willingness to work outside of standard business hours, including weekends and holidays – our MTR service is 24x7x365
  • Knowledge of Mitre ATT&CK framework
  • Customer service-oriented with strong written and verbal communication skills

Basic understanding of Windows event log analysis

  • Must thrive within a team environment as well as on an individual basis
  • Experience administering and supporting Windows OS (both workstations and server) and one of the following: Apple or Linux-based operating systems (e.g. XP, Windows 7, 2003, 2008, OS X)
  • Knowledge of incident response procedures
  • Experience with threat hunting
  • Minimum 3+ years of experience working in a SOC environment or computer security team in an IT environment

Experience with endpoint and network security monitoring

  • Natural curiosity and ability to learn new skills quickly
  • Basic understanding of network traffic analysis including TCP/IP, routing, switching, protocols, etc
  • Excellent troubleshooting and analytical skills, with proven ability to think outside the box
  • Research shows that candidates sometimes hesitate to apply if they don't check every box in a job description. We challenge that notion. Your unique experiences and skills might be exactly what we need to enhance our team. Don't let a checklist hold you back – we encourage you to apply

Experience with SQL query construction

  • Experience with enterprise information security data management - SIEM experience
  • Programming and scripting skills - proficient knowledge of Powershell

Preferred

  • Passion for all things related to information technology and cybersecurity
  • Experience with OSQuery

Every job at Sophos