Senior Threat Analyst – Threat Hunter

Posted 97ds ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Seeking a detail-oriented Threat Hunter to defend customer environments at Sophos. Collaborate with a dedicated threat hunting team using advanced tools and techniques.

Responsibilities:

  • Review telemetry and hunting leads from various sources and determine whether they are benign or warrant further investigation.
  • Propose new countermeasures or updates to detect advanced threats and reduce signal-to-noise ratio.
  • Conduct threat hunts across the MDR Elite customer base using a variety of tools and methodologies.
  • Communicate and document findings to various customer audiences including technical and executive teams.
  • Actively research emerging Indicators of Compromise/Attack, threat actor TTPs, exploits and vulnerabilities.
  • Assume ownership in problem resolution striving for customer satisfaction.
  • Proactively work to document and minimize operational and client impacting issues that arise during day-to-day operations. Develop innovative and creative recommendations that improve customer outcomes.
  • Provide mentorship to junior teammates, guiding their career development.
  • Actively contribute to internal projects per assignments received from the manager in alignment with own knowledge, skills, and workload.

Requirements:

  • 5-8 years of relevant experience or equivalent combination of education and work experience.
  • Thorough understanding of Threat Hunting methodologies.
  • Familiarity of Python, Python data science libraries and Jupyter Notebooks.
  • Knowledge of common and new adversarial attack methods, tactics and techniques.
  • Endpoint and network security experience required; IDS, IPS, EDR, ATP, Malware defenses and monitoring experience
  • Bachelor’s in information technology, Computer Science or a related field; or relevant commensurate work experience.
  • Excellent written and verbal communication skills with both technical and non-technical individuals.
  • Self-Initiative and ability to successfully manage your time to meet the various demands of the role with minimal leadership oversight.
  • Preferred certifications: GCIA, GCFE, GCFA, OSCP or equivalent.

Benefits:

  • Employee-led diversity and inclusion networks that build community and provide education and advocacy
  • Annual charity and fundraising initiatives and volunteer days for employees to support local communities
  • Global employee sustainability initiatives to reduce our environmental footprint
  • Global fitness and trivia competitions to keep our bodies and minds sharp
  • Global wellbeing days for employees to relax and recharge
  • Monthly wellbeing webinars and training to support employee health and wellbeing