Incident Response & Threat Intelligence Lead​

About Us

Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response.

Sophos offers industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with the visibility and scalability needed to stay ahead of evolving threats.

Sophos goes to market with a global partner ecosystem, including Managed Service Providers (MSPs), Managed Security Service Providers (MSSPs), resellers and distributors, marketplace integrations, and cyber risk partners, giving organizations the flexibility to choose trusted relationships when securing their business. Sophos is headquartered in Oxford, U.K. More information is available at www.sophos.com .

Role Summary

インシデント対応および脅威インテリジェンスのリーダーは、日々高度化するセキュリティ脅威への対応において、お客様を支援します。インシデント発生時の対応を支援するだけでなく、効果的なインシデント対応に向けた事前準備も支援します。小規模なインシデントから複雑で大規模インシデントまで、技術的な調査を実施し、攻撃者の行動に基づいてインシデントの根本原因と範囲を特定し、推奨される対応戦略を提供することでお客様を支援します。

さらに、この役割はソフォスの脅威対策ユニット（ CTU ）との主要な連絡窓口として、調査結果に攻撃者の戦術、技術、インフラに関する最新のインテリジェンスを反映させます。また、運用上の知見を、お客様や社内チーム向けの実行可能なガイダンスに変換する役割も担います。

リーダーは技術レベルおよび経営層向けの質の高いプレゼンテーションやブリーフィングを行う責任も担います。これには、調査結果の提示、脅威インテリジェンスの動向の説明、多様な聴衆に対して対応策の推奨事項を明確に伝達し、情報に基づいた意思決定を支援することが含まれます。

Incident Response & Threat Intelligence Leads support clients in managing increasingly sophisticated security threats daily. They not only assist in responding to incidents as they occur but also help clients prepare in advance for effective incident response. Whether handling small ‑ scale or complex, large ‑ scale incidents, we assist clients by conducting technical investigations, identifying the root cause and scope of the incident based on attacker behavior, and providing recommended response strategies.

In addition, this role will act as a key liaison with the Sophos Counter Threat Unit, ensuring investigative findings are enriched with the latest intelligence on attacker tactics, techniques, and infrastructure. The role also translates operational intelligence into actionable guidance for clients and internal teams.

Leads are also responsible for delivering high ‑ quality presentations and briefings, both technical and executive ‑ level. This includes presenting investigation findings, explaining threat intelligence trends, and clearly communicating response recommendations to diverse audiences to support informed decision ‑ making.