Senior Incident Response Consultant, Rapid Response
Remote in CanadaRemote
Sophos
5+ YOECandidates need 5+ years leading incident response investigations, especially ransomware, and experience with BEC cases. They need strong oral and written communication, a grasp of MITRE ATT&CK, and the ability to manage several incidents under stress.
SIEM, Splunk, ELK, SQL, PowerShell, Python
Threat Analyst 2
Remote in CanadaRemote
Sophos
3+ YOECandidates need at least 3 years in a SOC or computer security team, experience with threat hunting, endpoint and network monitoring, and Windows administration. Knowledge of MITRE ATT&CK, incident response and TCP/IP is required, and SQL, OSQuery, SIEM and PowerShell are an asset.
Sophos tooling, SIEM, OSQuery, PowerShell, Windows event logs