Threat Analyst 2
Remote in CanadaSophos
3+ YOECandidates need at least 3 years of experience in a SOC or computer security team, including threat hunting and endpoint and network monitoring. They should know Windows administration, MITRE ATT&CK, incident response, and basic TCP/IP and Windows event log analysis.
SIEM, PowerShell, OSQuery, Windows event logs
Threat Analyst 1
Remote in CanadaSophos
2+ YOECandidates need at least 2 years working in a SOC or computer security team, with threat hunting, endpoint and network monitoring, and Windows administration experience. Knowledge of MITRE ATT&CK, incident response and TCP/IP is expected, and PowerShell and SIEM experience are assets.
SIEM, OSQuery, PowerShell, Windows Server, Windows event logs