Threat Analyst
About this job
As a Threat Analyst at Sophos, you will investigate, identify, and neutralize cyber threats using enterprise systems, log analysis tools, and endpoint collections. You will join an expert team providing continuous monitoring, detection, and response services to defend global organizations from cyberattacks. A typical day involves handling escalations, monitoring security logs, creating client cases, guiding analysts, tracking threat neutralization, and researching recent vulnerabilities. Sophos is a cybersecurity leader providing advanced platform solutions, managed detection and response, and frontline human expertise to help organizations proactively reduce security risks.
Responsibilities
- Handle and guide level I Threat Analysts on investigation escalations
- On-board and train new Threat Analysts on security operations
- Provide detection and response to security events and cyber threats
- Conduct security log management, monitoring, and metric tracking
- Create client cases and follow up through threat neutralization
- Research recent Indicators of Compromise, exploits, and vulnerabilities
- Participate in Security Operations process improvement and creation
Requirements
- 5+ years of experience in a SOC environment or IT computer security team
- Bachelors in IT, Computer Science or related field, or commensurate experience
- Endpoint and network security experience including IDS, IPS, EDR, and ATP
- Knowledge of incident response procedures and adversary tactics
- Understanding of Windows event logs and network traffic analysis
- Experience with enterprise information security data management and SIEM
- Willingness to work outside standard business hours including weekends and holidays
Good to have
- Knowledge of Mitre ATT&CK framework
- Experience with SQL query construction and OSQuery
- Proficient knowledge of Powershell and scripting
- Advanced Cyber Security certifications
- Threat hunting experience
Who should apply
This role suits experienced cybersecurity professionals with a strong background in SOC environments and endpoint security who thrive in collaborative team settings. Candidates must be comfortable working non-traditional hours for 24x7x365 operations and possess a natural curiosity for threat analysis. Freshers are not suited for this position as it explicitly requires over 5 years of relevant security experience.
Frequently asked questions
What is the primary role of a Threat Analyst at Sophos?
A Threat Analyst at Sophos investigates, identifies, and neutralizes cyber threats using enterprise and log analysis systems.
What qualifications are needed to apply for the Threat Analyst position at Sophos?
Applicants need 5+ years of SOC or computer security experience, along with a relevant bachelor's degree or equivalent work experience.
Does Sophos require working non-standard hours for this Threat Analyst role?
Yes, because Sophos operates a 24x7x365 managed detection service, analysts must be willing to work outside standard business hours including weekends and holidays.
Is remote work available for the Threat Analyst at Sophos?
Yes, Sophos operates a remote-first working model, though applicants must have legal authorization to work where the position is posted.
Rojgar Point lists this job for information. Always apply on the official company page and never pay anyone for a job.