Team Lead- Threat Analyst

About this job

As a Team Lead- Threat Analyst at Sophos in India, your day involves guiding security professionals, overseeing investigations, and handling complex cyber incidents. You will manage operational tasks, direct responses to security threats, and communicate critical information to various stakeholders. Sophos is a global cybersecurity leader that defends organizations using an AI-driven platform and expert-led services, combining machine learning, automation, and frontline human expertise to deliver 24/7 threat monitoring, detection, and response. In this role, you will spend your time supervising daily operations, researching attacker tools and tactics, analyzing indicators of compromise, and providing subject matter expertise during active threat scenarios to protect organizational networks and data.

Responsibilities

• Maintain supervision over operational tasks and provide day-to-day oversight for threat analysts.
• Oversee analysts in their investigation and response during security incidents.
• Determine possible root causes and resolutions when security incidents arise.
• Communicate information effectively to stakeholders of all levels.
• Act as a lead throughout incident scenarios and provide subject matter expertise in cybersecurity incident response.
• Execute incident handling procedures and direct responses to cybersecurity incidents.
• Assess cyber threat intelligence and open-source intelligence to operationalize information.

Requirements

• 5+ years of experience within a cybersecurity environment.
• Bachelor's in information technology, Computer Science, or a related field, or relevant work experience.
• Experience in a security operations center or similar environment identifying compromise indicators and responding to incidents.
• Endpoint and network security experience including IDS, IPS, EDR, ATP, malware defenses, and monitoring.
• Working knowledge of incident response procedures.
• Experience administering and supporting Windows OS alongside Apple or Linux-based operating systems.
• Fundamental understanding of network traffic analysis including TCP/IP, routing, switching, and protocols.

Good to have

• Experience in a leadership role.
• Threat hunting experience.
• Knowledge of the Mitre ATT&CK framework.
• Experience with SQL query construction.
• Experience with OSQuery.

Who should apply

This role suits experienced cybersecurity professionals with a strong background in threat analysis, incident response, and security operations. Candidates with prior leadership experience or those ready to step into a supervisory capacity will find a great fit here. Sophos values diverse perspectives and encourages applicants to apply even if they do not meet every single checklist item, provided they possess legal authorization to work in India without sponsorship.

Frequently asked questions