Senior Threat Analyst monitoring, investigating, and responding to cyber threats for Sophos’s MDR cybersecurity services. Conducting threat hunting, incident response, and client case management.
Responsibilities
Monitor, investigate, and respond to alerts generated by the Sophos security stack, including EDR/XDR capabilities
Lead and mentor Tier I Analysts through escalated cases
Perform end-to-end analysis of suspicious activity to assess scope, impact, and risk
Identify and respond to cyber threats across customer environments using approved playbooks and tooling
Document findings, investigative steps, and outcomes in the MDR case management platform
Conduct threat hunting across the MDR customer base
Investigate phishing emails, suspicious binaries, and behavioral anomalies
Support detection tuning by identifying recurring false positives and suggesting improvements
Stay informed on threat actor behaviors, MITRE ATT&CK techniques, and Sophos threat research
Research emerging IOCs, active exploits, and vulnerabilities
Contribute to internal knowledge bases, documentation, and continuous improvement initiatives
Participate in shift rotations and provide detailed handovers between global teams
Provide detection and response support for active security incidents
Manage case workflows and follow up with clients until resolution
Engage with clients via chat, phone, and tickets
Assist with developing and refining Security Operations processes, playbooks, and tooling
Requirements
5+ years of hands-on experience in a Security Operations Center (SOC), Managed Detection and Response (MDR) environment, or cybersecurity-focused IT role
Proficient in endpoint and network security tools, including EDR, IDS/IPS, and malware detection platforms
Working knowledge of Windows workstation and server operating systems, plus Linux or macOS
Ability to interpret and analyze Windows event logs and other telemetry data
Understanding of TCP/IP, protocols, routing, and traffic analysis
Experience contributing to real-time incident response efforts and threat investigations
Exposure to threat hunting methodologies and attacker behavior patterns
Experience handling active threats, including containment, mitigation, and recovery
Familiarity with persistence, privilege escalation, lateral movement, and defense evasion techniques
Familiarity with incident response workflows and security operations processes
Strong analytical thinking and troubleshooting skills
Excellent communication skills for technical and non-technical audiences
Customer-first mindset and professionalism
Ability to work both within a team and independently
Bachelor's degree in information technology, Computer Science, Cybersecurity or related field, or equivalent practical experience
Willingness to participate in shift work including nights, weekends and holidays
Legal authorization to work in Canada without employer sponsorship
Policy Analyst developing regulatory policy for British Columbia’s energy resources regulator. Conducting research, stakeholder engagement, cost - benefit analysis, and recommendations for legislative and program changes.
Senior wind energy analyst assessing resources, production, performance, and risk for DNV's renewable energy consulting business. Supporting utility - scale projects across the U.S. and Canada.
Dealer Services Analyst evaluating consumer and commercial vehicle financing applications for Ford Credit Canada. Negotiating terms with dealers while balancing sales opportunities and lending risk.
KYC Analyst managing documentation and compliance for BDC loan applications. Supporting Canadian entrepreneurs through client review, risk analysis, and financing coordination.
Personalization Analyst building and optimizing Adobe Target experiments for Manulife’s digital financial - services experiences. Configuring A/B tests, targeting, QA, launches, and performance improvements.
Bilingual Disability Case Analyst/Case Manager guiding Canadian plan members through illness, injury, claims, and recovery. Assessing barriers and developing return - to - work strategies for Manulife, an international financial services provider.
Analyste chez Mila, institut de recherche en intelligence artificielle. Soutien aux startups Launchpad, à la sélection des fondateurs et aux workflows opérationnels utilisant les LLM.
Senior NOC Escalation Analyst supporting BMO’s network infrastructure and Check Point and Juniper firewall operations. Troubleshooting incidents, leading escalations, and maintaining critical banking systems.