Sophos Threat Response Security Engineer

Boost your career with Sophos as a Security Engineer specialized in Threat Response. This role blends investigative skills with engineering to tackle cyber threats, all within a remote-first framework. At Sophos, we are looking for a proactive engineer to manage the entire cyber incident lifecycle. You will independently detect and investigate threats while engineering advanced automated workflows that enhance our Internal Detection and Response capabilities. Strong expertise in DFIR, endpoint forensics, and AI automation safety controls is essential for this role. Key Responsibilities:

• Detect and respond to cyber threats across Sophos products
• Own complex investigations from triage to lessons learned
• Perform DFIR, network analysis, and malware investigations
• Design reusable skills and workflows for scalable automation
• Communicate clearly with engineering and leadership teams

• Hands-on experience with Claude and similar coding agents
• Proficient in Python or comparable scripting languages
• Knowledge of Git, GitHub practices, and CI/CD concepts
• Strong background in threat hunting and detection engineering
• Familiarity with APIs and SQL for data queries