Senior Incident Response Consultant 2

Sophos
Canada
Workplace: RemoteFull timeUSD 131,000 - 219,000Function: CybersecuritySkills: ["Communication","Written communication","Time management","Delegation","Prioritization","Working under pressure","Mentoring","Team collaboration","Adaptability","Analytical thinking"]

Lead customer-facing digital forensics and incident response engagements as part of Sophos’ DFIR service. Run kickoff and daily update calls, delegate investigations to analysts, and provide executive-quality written updates and reports mapped to MITRE ATT&CK. Conduct root-cause analysis, coordinate remediation guidance, and manage high-profile incidents across multiple environments, including ransomware, network breaches, and cloud forensics. Occasionally coordinate with legal counsel and cyber insurance carriers as needed.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Sophos
Sophos
2 weeks ago

Senior Incident Response Consultant 2

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 2 hours agoStatus: Live

Job Summary

Lead customer-facing digital forensics and incident response engagements as part of Sophos’ DFIR service. Run kickoff and daily update calls, delegate investigations to analysts, and provide executive-quality written updates and reports mapped to MITRE ATT&CK. Conduct root-cause analysis, coordinate remediation guidance, and manage high-profile incidents across multiple environments, including ransomware, network breaches, and cloud forensics. Occasionally coordinate with legal counsel and cyber insurance carriers as needed.
Location: Canada
Workplace: Remote
Employment Type: Full time · Permanent
Job Function: Cybersecurity
Seniority: Manager level

Key Responsibilities

  • •Lead customer incident response engagements, including kickoff calls to understand the situation and identify initial containment actions.
  • •Be a trusted advisor and provide ongoing forensic update calls and concise written email updates between calls.
  • •Direct forensic investigations: identify priorities, delegate tasks to analysts, and manage multiple incidents concurrently.
  • •Determine tactics, techniques, and procedures identified by analysts and add them to the threat intel platform.
  • •Produce executive summary-style reports with timelines mapped to MITRE ATT&CK, including root-cause analysis and remediation guidance.

Pay and Benefits

Salary: USD 131,000 - 219,000

Key Requirements

  • •10+ years leading incident response investigations involving ransomware, network breaches, malicious insiders, and web applications or database services.
  • •Conduct in-depth digital forensic analysis of data from cloud environments such as AWS, Microsoft Azure, and GCP.
  • •Strong understanding of the incident response process and cyber risks, with the ability to qualify risks for customers.
  • •Working knowledge of MITRE ATT&CK and proven ability to neutralize and remediate ransomware threats.
  • •Excellent oral and written communication skills, with the ability to delegate and prioritize across multiple incidents under stressful conditions.
Experience:CybersecurityDigital forensicsIncident responseRansomwareCloud forensicsThreat huntingWeb application securityPenetration testing
Skills:CommunicationWritten communicationTime managementDelegationPrioritizationWorking under pressureMentoringTeam collaborationAdaptabilityAnalytical thinking
Certifications:CISSPGCFA
Tech Stack:AWSMicrosoft AzureGCPMITRE ATT&CKSIEMSplunkELKSQLPowerShellPythonBashOSINTMDRXDRITDR

Eligibility

Work Authorization:Authorization required. Sponsorship not provided.

Company Brief

Sophos
Provides enterprise cybersecurity software and services including endpoint protection, network security, cloud security, encryption, and managed threat response to protect organizations from advanced threats and ransomware.
Industry: Cybersecurity
Company Size: Enterprise (1,001+ employees)
Revenue: USD 500M to 1B
Growth: Established Company
Valuation: Unicorn (USD 1B+)
Funding: Private Equity Backed
Headquarters: Abingdon, United Kingdom
Founded: 1985
WebsiteLinkedIn