Threat Analyst 2
Remote in CanadaSophos
3+ YOECandidates need at least 3 years of experience in a SOC or computer security team, including threat hunting and endpoint and network monitoring. They should know Windows administration, MITRE ATT&CK, incident response, and basic TCP/IP and Windows event log analysis.
SIEM, PowerShell, OSQuery, Windows event logs
Threat Analyst 1
Remote in CanadaSophos
2+ YOECandidates need at least 2 years working in a SOC or computer security team, with threat hunting, endpoint and network monitoring, and Windows administration experience. Knowledge of MITRE ATT&CK, incident response and TCP/IP is expected, and PowerShell and SIEM experience are assets.
SIEM, OSQuery, PowerShell, Windows Server, Windows event logs
Senior Threat Analyst
Remote in CanadaSophos
5+ YOESophos needs 5+ years of SOC, MDR or security experience, hands-on skill with endpoint and network security tools, and knowledge of Windows, Linux and network concepts. Candidates should also be able to analyze logs, handle live incidents and work in 24x7 shifts.
Sophos security stack, EDR, XDR, SIEM, OSQuery, PowerShell