An intermediate incident responder on Sophos's Critical Incident Response Team supporting MDR customers: performing forensic investigations across endpoints, network, and cloud telemetry, executing containment of active threats, documenting findings, and mentoring junior analysts. Core toolkit includes EDR, SIEM, forensic collection tools, OSQuery, SQL/KQL, and MITRE ATT&CK.
Sign in to see your match