Incident Response Analyst 1

This is a fully remote position, open to applicants in Australia.

📋 Description

• Assist in conducting investigative and forensic analysis across endpoints, network logs, and cloud telemetry under the supervision of senior analysts.

• Aid in containment and response actions to mitigate active threats as instructed by Incident Advisors or Senior Analysts.

• Assess and review alerts, indicators of compromise (IOCs), artifacts, and telemetry, escalating discoveries to senior analysts to aid in determining the scope and root cause.

• Maintain clear and precise engagement documentation, including trailheads, timelines, and playbooks.

• Enhance incident response capabilities through hands-on involvement while adhering to CIRT investigative and documentation standards.

• Provide technical insights and summaries to support customer communications and post-incident reports.

• Identify and communicate detection or response deficiencies observed during investigations.

• Engage in shift handovers, debriefs, and post-incident reviews to ensure continuity of engagement.

• Keep accurate records of time and activities to support operational visibility and service enhancement.

⛳️ Requirements

• 1-2 years of experience in a SOC, MDR, or a security operations role is preferred.

• Basic technical knowledge of endpoint security, log analysis, and common attack methodologies.

• Awareness of prevalent threats such as malware, credential theft, and ransomware.

• Capability to review and triage alerts and telemetry, escalating to senior analysts when necessary.

• Excellent written and verbal communication skills for documenting findings and contributing to customer updates.

• Enthusiasm for learning and developing technical skills under the mentorship of senior analysts.

• Ability to perform effectively in high-pressure, time-sensitive incident situations.

• Openness to work some weekends and holidays as part of a rotational schedule.

🏝️ Benefits

• Sophos operates under a remote-first working model.

• Employee-led networks focused on diversity and inclusion.

• Annual charity and fundraising activities.

• Global initiatives for employee sustainability.

• Global fitness and trivia competitions.

• Global wellbeing days.

• Monthly wellbeing webinars and training sessions.