Senior Incident Response Consultant

Stack

Responsibilities

• ▹Conduct comprehensive reviews of incident response plans and develop tailored readiness strategies
• ▹Design and deliver customized incident response playbooks
• ▹Facilitate training sessions on incident response fundamentals
• ▹Lead workshops, tabletop exercises, drills and functional simulations
• ▹Provide strategic guidance on integrating readiness into broader security programs
• ▹Lead large-scale, complex investigations across host, network and cloud artifacts
• ▹Collaborate and coordinate with cross-functional incident response teams
• ▹Guide containment, remediation and recovery efforts post-incident
• ▹Brief senior leadership and technical teams on findings, risks and recommendations
• ▹Participate in a 24x7 emergency response rotation including weekends

Requirements

• ▹Comprehensive experience in both readiness and incident response
• ▹Strong analytical and problem-solving skills
• ▹Ability to lead and mentor cross-functional teams
• ▹Excellent communication skills, including executive briefings
• ▹Proven ability to manage high-stakes engagements
• ▹Experience with forensic tools and techniques such as EDR, log analysis, malware analysis
• ▹Familiarity with enterprise environments including Windows, Linux, Azure, AWS and M365
• ▹Strong understanding of attacker TTPs and modern detection and response strategies
• ▹Willingness to travel up to 20%, including on short notice
• ▹8-12 years of experience in cybersecurity or related fields

Nice to have

• ▹Relevant certifications such as GIAC, CISSP or CISM

Soft skills

About the company

Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services, spanning endpoint, network, email and cloud security along with XDR, ITDR and next-gen SIEM.