Search jobs right inside Claude, ChatGPT or Cursor. Connect freehire over MCP — free, no account needed to search.
About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows…
Incident Response Analyst 3 on Sophos' Critical Incident Response Unit, leading the investigative stream of active cyber incidents for MDR customers. Day to day: forensic analysis, containment of malware/ransomware attacks, documentation, and technical reporting using EDR, IDS/IPS, and query tools like OSQuery, SQL, and KQL.
A senior member of Sophos' Critical Incident Response Team who leads investigations of active cyberattacks (malware, ransomware, lateral movement) for MDR customers and MSPs, using Sophos EDR/XDR tooling to contain and remediate threats, mentor junior analysts, and write technical incident reports. Core tech: EDR/IDS/IPS, macOS/Linux/Windows forensics, OSQuery/SQL/KQL, MITRE ATT&CK.
Senior threat analyst on Sophos's Managed Detection and Response team: monitors, investigates, and responds to customer security alerts using EDR/XDR and SIEM tooling, performs threat hunting and phishing/malware analysis, mentors junior analysts, and works 24x7 shifts. Core tech: Windows/Linux, log analysis, MITRE ATT&CK, SQL, PowerShell.
An intermediate incident responder on Sophos's Critical Incident Response Team supporting MDR customers: performing forensic investigations across endpoints, network, and cloud telemetry, executing containment of active threats, documenting findings, and mentoring junior analysts. Core toolkit includes EDR, SIEM, forensic collection tools, OSQuery, SQL/KQL, and MITRE ATT&CK.
Entry-level Threat Analyst on Sophos' Managed Detection and Response (MDR) team, monitoring customer environments and investigating logs and security events to detect, respond to, and neutralize cyber threats. Core work involves Sophos security tooling, endpoint and network monitoring, threat hunting, and MITRE ATT&CK-based analysis on an 8-5pm ET shift.
Senior penetration tester on Sophos's Red Team (remote, India): coordinates test readiness and client-facing communication for engagements, then performs manual application-security (web, mobile, API) or network penetration testing using tools like Nmap, Metasploit, Kali Linux, and Burp Suite, producing professional security assessment reports.
The Incident Response Manager leads the Critical Incident Response Team (CIRT) to support Managed Detection and Response (MDR) customers. This role involves managing analyst squads, acting as an incident commander for high-severity security events, and driving operational improvements using cybersecurity tools and metrics.
Senior Incident Response Consultant leads cybersecurity attack investigations for global clients, directing forensic analysis, containment, and remediation using Sophos tools and MITRE ATT&CK framework.
Analyzes security logs and events to detect, investigate, and respond to cyber threats for customers using Sophos tools, communicating findings to technical and executive teams.