Senior Threat Analyst, Tier I (MDR)

Senior role on Sophos's Managed Detection and Response (MDR) team, monitoring and investigating threats across customer environments 24x7x365. Monitor, investigate, and respond to alerts from the Sophos security stack including EDR and XDR; lead and mentor Tier I analysts on escalated cases; assess scope, impact, and risk of suspicious activity; run threat hunting across the MDR customer base; investigate phishing emails, suspicious binaries, and behavioural anomalies; tune detections and document findings in the MDR case management platform; track MITRE ATT&CK techniques and Sophos threat research; handle handovers between global teams and client communication through chat, phone, and tickets.

• 3+ years in a SOC, MDR, or cybersecurity-focused IT role
• Hands-on use of EDR, IDS/IPS, and malware detection tools
• Working knowledge of Windows, with Linux or macOS experience an advantage
• Ability to analyse Windows event logs and telemetry, and understand TCP/IP and network traffic
• Experience with incident response, threat hunting, and identifying persistence, privilege escalation, and lateral movement
• Familiarity with MITRE ATT&CK, SIEM platforms, and SQL
• OSQuery and PowerShell scripting skills
• Excellent communication with technical and non-technical audiences
• Willingness to work shifts, including nights, weekends, and holidays
• Bachelor's degree in IT, computer science, cybersecurity, or equivalent experience
• Relevant certifications (e.g. GSEC, GCIA, GCIH, PEN-200, Security Blue Team L1, TCM SOC L1) are a plus

• Flexible working, with many roles remote or hybrid
• Remote work within the specified location, for candidates who live and are authorised to work there