Team Lead- Threat Analyst

Overview

Sophos is seeking an experienced and motivated Security Operations Manager to support its Managed Detection and Response (MDR) customers. The role is responsible for the operational management and effectiveness of the Security Operations Center and its personnel.

What you'll do

• Maintain supervision over operational tasks and provide day-to-day oversight for threat analysts
• Oversee analysts in their investigation and response activities when security incidents arise to determine possible root cause and resolution
• Effectively communicate information to stakeholders of all levels
• Act as a lead throughout incident scenarios and provide subject matter expertise in cybersecurity incident response
• Successfully execute incident handling procedures and direct response to cyber security incidents
• Maintain current knowledge and recognition of attacker tools, tactics, and procedures to produce indicators of compromise (IOCs) for active and future investigations
• Assess cyber threat intelligence/open source intelligence and operationalize that information
• Apply hands-on experience dealing with sophisticated malware and dynamic cyber threat actors
• Identify current and emerging threats and apply such research

What you'll need

• 5+ years of experience within a cybersecurity environment
• Bachelor's in information technology, Computer Science, or a related field; or relevant, commensurate work experience
• Experience in a security operations center, or similar environment, identifying indications of compromise or attack and responding to incidents
• Endpoint and network security experience: IDS, IPS, EDR, ATP, malware defenses and monitoring
• Experience in network and host-based intrusion analysis, incident response processes and procedures, digital forensics and/or handling malware
• Knowledge of common adversary tactics and techniques, e.g., obfuscation, persistence, defense evasion
• Working knowledge of incident response procedures
• Experience administering and supporting Windows OS (workstations and server) and one of the following: Apple or Linux-based operating systems
• Fundamental understanding of network traffic analysis including TCP/IP, routing, switching, protocols

Nice to have

• Experience in a leadership role
• Threat hunting experience
• Knowledge of MITRE ATT&CK framework
• Experience with SQL query construction
• Experience with OSQuery

Details

• Location: India
• Flexible ways of working: many roles offered remotely, others hybrid; for remote roles, work within the location specified in the posting, and candidates must reside in and be authorized to work in that location