Teams at Sophos

Investigate escalated security alerts and incidents across endpoint, network, cloud, and identity environments. Analyze ransomware, malware, scripts, authentication activity, logs, and attacker behavior; conduct threat hunts; correlate EDR, SIEM, cloud, and identity data; document findings; recommend remediation; support detection tuning and response playbooks. Participate in a 24/7/365 rotational MDR schedule and collaborate with senior analysts on complex incidents.

Conduct application or network penetration testing, including manual exploitation and vulnerability assessments. Coordinate client readiness, schedules, documentation, and project communications; lead client calls throughout engagements; investigate emerging threats; and produce professional reports with evidence, reproduction steps, findings, and remediation recommendations.

Conduct application or network penetration testing, manually exploit vulnerabilities, research emerging threats, and document findings in professional security assessment reports. Lead client-facing engagement calls from kickoff through remediation reviews, explain critical findings, and provide reproduction steps and recommendations. Work independently and collaboratively using commercial and internally developed tools.