Senior Incident Response Consultant, Rapid Response
Key Skills for This Role
Full Job Posting
What You Will Do
- The working week for this role will be Fri, Sat, Sun and Monday working with Tues, Wed and Thursdays off
- Lead kick off calls with customers to understand their situation and identify initial response actions to contain the threat
- Provide guidance to customers on best practices following an incident
- Lead daily update calls for customers to deliver forensic findings
- Deliver concise email updates to customers between update calls
- Direct the forensic investigations, identify priorities, and delegate tasks to analysts
- Conduct multiple Rapid Response incidents concurrently
- Determine TTPs identified by analysts and add them to the threat intel platform
- Write clear and concise Executive Summary style reports in a timely manner
- Responsible for basic to moderate complexity projects that contribute to the development of the Sophos Rapid Response service
- Provide daily handover notes to teams located in different time zones, or when incident responsibility is being transferred to another Incident Lead
What You Will Bring
5+ years of experience leading incident response investigations involving ransomware
Experience leading BEC investigations
Continuously learning and staying informed of the changing threat landscape
Proven track record of successful neutralization and remediation of ransomware threats
Excellent understanding of the Incident Response process
Excellent understanding of cyber risks and able to qualify them to customers
Excellent oral communication skills
Strong written communication skills
Ability to manage time effectively
Able to delegate and prioritize tasks across multiple incidents
Able to excel under stressful circumstances
Occasionally willing to begin work early and/or stay late when warranted for customer engagements
Strong grasp of the MITRE ATT&CK framework
Enjoy mentoring and assisting in the development of junior analysts
A team-player attitude with a willingness to share knowledge
Ability to work some weekends and holidays
Post-secondary education in Cybersecurity, comparable
Desirable:
Cybersecurity certifications an asset (e.g. CISSP, GCFA, or similar)
Experience with SIEM technology (e.g. Splunk, ELK, etc.)
Willingness to work occasional overtime during peak times or holidays
Experience writing SQL queries
Experience writing PowerShell, Python, or Bash scripts
About Sophos
Sophos is a global cybersecurity company providing managed detection and response alongside endpoint, network, email, and cloud security technologies. Its AI-driven platform and expert-led services help organizations prevent, detect, and respond to cyberattacks.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Sophos
Senior Product Manager, AI-Native Products
, CAN
About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows wit
Senior Application Programming Developer
, USA
About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows wit
Manager, Sales Development (1 year FTC)
Manchester, GBR
Senior HRIS Analyst (India/Philippines)
, IND
Senior Product Manager, AI-Native Products
, CAN
Field Marketing Intern – 12 Month Fixed Term Placement
, GBR
Manager, Threat Operations
, AUS
Senior Application Programming Developer
, USA
Senior Enterprise Account Executive
, USA
Senior Channel Account Executive
, IND