Team Lead – Threat Analyst

This is a fully remote position, open to applicants in India.

📋 Description

• Manage the operations and effectiveness of the Security Operations Center along with its personnel.

• Supervise daily security operations for Sophos MDR clients.

• Oversee operational tasks and provide daily guidance for threat analysts.

• Supervise analysts during investigation and response efforts.

• Identify potential root causes and solutions during security incidents.

• Effectively communicate information to stakeholders at all levels.

• Lead incident scenarios and offer subject matter expertise in cybersecurity incident response.

• Implement incident handling procedures and respond directly to cybersecurity incidents.

• Stay updated on attacker tools, tactics, and procedures.

• Generate indicators of compromise for ongoing and future investigations.

• Evaluate cyber threat intelligence and open-source intelligence to operationalize the information.

• Conduct research to identify current and emerging threats.

• Manage advanced malware and dynamic cyber threat actors.

⛳️ Requirements

• Minimum of 5 years of experience in a cybersecurity environment; leadership experience is preferred.

• Bachelor’s degree in Information Technology, Computer Science, or a related field; or equivalent relevant work experience.

• Experience in a security operations center or a similar setting.

• Proven experience in identifying indications of compromise or attacks and responding to incidents.

• Required experience in endpoint and network security.

• Familiarity with IDS, IPS, EDR, ATP, malware defenses, and monitoring tools.

• Threat hunting experience is preferred.

• Knowledge of common adversary tactics and techniques, including obfuscation, persistence, and defense evasion.

• Familiarity with the MITRE ATT&CK framework is preferred.

• Working knowledge of incident response procedures.

• Preferred experience with SQL query construction.

• Experience with OSQuery is a plus.

• Proficient in administering and supporting Windows OS and either Apple or Linux-based operating systems.

• Basic understanding of network traffic analysis, including TCP/IP, routing, switching, and protocols.

• Legal authorization to work in India without employer sponsorship.

🏝️ Benefits

• Remote-first working model, with remote work as the primary option for most employees.

• Employee-led diversity and inclusion networks.

• Annual charity and fundraising initiatives.

• Volunteer days available for employees.

• Global employee sustainability initiatives.

• Global fitness and trivia competitions.

• Global wellbeing days.

• Monthly wellbeing webinars and training sessions.

• Equal opportunity and support for adjustments during recruitment and selection.