Senior Incident Response Consultant, Rapid Response

This is a fully remote position, open to applicants in Canada.

📋 Description

• Oversee incident response initiatives for clients impacted by cybersecurity breaches

• Conduct kickoff meetings to assess customer situations and determine initial containment measures

• Advise clients on best practices following an incident

• Facilitate daily update calls with customers and present forensic findings

• Provide succinct email updates between calls

• Lead forensic investigations, set priorities, and assign tasks to analysts

• Manage multiple Rapid Response incidents simultaneously

• Identify TTPs recognized by analysts and integrate them into the threat intelligence platform

• Ensure that teams and clients undertake necessary actions to mitigate threats

• Perform root cause analyses, including assessments of data exfiltration

• Draft executive-summary reports that align event timelines with the MITRE ATT&CK framework

• Oversee projects of basic to moderate complexity that support the development of the Sophos Rapid Response service

• Provide daily handover notes to teams in various time zones or when transferring incident responsibilities

• Mentor and support junior analysts

⛳️ Requirements

• Over 5 years of experience leading incident response investigations related to ransomware

• Proven experience in leading BEC investigations

• Commitment to continuous learning and staying updated on the evolving threat landscape

• Established history of effectively neutralizing and remediating ransomware threats

• Strong comprehension of the Incident Response process

• In-depth understanding of cyber risks and the ability to communicate them to clients

• Exceptional oral communication abilities

• Proficient written communication skills

• Capacity to manage time efficiently

• Skill in delegating and prioritizing tasks across multiple incidents

• Ability to perform well under pressure

• Willingness to start work early and/or extend hours as needed for client engagements

• Solid understanding of the MITRE ATT&CK framework

• Passion for mentoring and aiding in the growth of junior analysts

• Collaborative team-player attitude and eagerness to share knowledge

• Availability to work some weekends and holidays

• Post-secondary education in Cybersecurity or a related field

• Legal authorization to work in Canada without requiring employer sponsorship

🏝️ Benefits

• Eligibility for bonuses

• Comprehensive benefits package

• Remote-first working environment

• Employee-led initiatives for diversity and inclusion

• Annual charity and fundraising events

• Designated volunteer days

• Global employee sustainability projects

• International fitness and trivia contests

• Global wellbeing days

• Monthly wellbeing webinars and training sessions

• Commitment to equality of opportunity and recruitment adjustments