{"id":2180829,"url":"https://alion.io/job/sophos-threat-analyst-4","title":"Threat Analyst","company":{"id":1926,"name":"Sophos","domain":"sophos.com","url":"https://alion.io/company/sophos","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":77,"open_postings":7,"ghost_share":0,"stale_share":0.714,"repost_share":0,"time_to_fill_p50_days":82,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":18000,"max_usd":39000,"period":"year","method":"role_seniority_country_cell","sample_n":12},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"MITRE ATT&CK","optional":false},{"name":"osquery","optional":false},{"name":"SQL","optional":false},{"name":"Linux","optional":true},{"name":"PowerShell","optional":true},{"name":"SIEM","optional":true},{"name":"TCP/IP","optional":true},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-10-09T13:29:35Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-15T09:20:32Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Role Summary\nAs an MDR Threat Analyst, you will work with enterprise systems, log analysis systems, and endpoint collection systems to facilitate the investigation, identification and neutralization of cyber threats. You will work alongside and contribute to a team of analysts with the objective of providing best in class monitoring, detection and response services.\nWhat you will do\nHandle escalations from level I Threat Analysts - guide / advise on investigation handling \nOn-board and train new Threat Analysts\nParticipate in Security Operations process improvement and creation \nProvide detection and response to security events and cyber-threats \nConduct security log management and monitoring \nMaintain information security metrics \nProvide assistance to core security and threat response teams \nCreate MDR service-related reports \nCreate cases for clients \nTrack and follow up with client through threat neutralization \nInteract with clients via various mediums\nActively research recent Indicators or Compromise/Attack, exploits and vulnerabilities \nObtain metrics for reporting on threat trends, intelligence analysis and situational awareness\n\nRequired:\nBachelors in Information Technology, Computer Science or a related field; or relevant commensurate work experience \nWillingness to work outside of standard business hours including weekends and holidays - our Managed Detection and Response is a 24X7X365 service \nMust be able to thrive within a team environment as well as on an individual basis\nWhat you will bring\n5+ years of experience working in a SOC environment or computer security team in an IT environment \nEndpoint and network security experience required; IDS, IPS, EDR, ATP, Malware defenses and monitoring experience\nKnowledge of common adversary tactics and techniques, e.g., obfuscation, persistence, defense evasion, etc. \nKnowledge of Mitre ATT&CK framework preferred\nWorking knowledge of incident response procedures \nExperience with SQL query construction preferred \nExperience with OSQuery is a plus \nExperience administering and supporting Windows OS (both workstations and server) and one of the following: Apple or Linux-based operating systems (e.g. XP, Windows 7, 2003, 2008, OS X) \nFundamental understanding of network traffic analysis including TCP/IP, routing, switching, protocols, etc. \nStrong understanding of Windows event log analysis \nExperience with enterprise information security data management - SIEM experience a plus \nProgramming and scripting skills - proficient knowledge of Powershell is a plus \nExcellent troubleshooting and analytical thinking skills \nStrong documentation and communication skills \nAdvanced Cyber Security certifications preferred but not required \nExcellent customer service skills \nPassion for all things information technology and information security \nNatural curiosity and ability to learn new skills quickly \nAbility to think outside the box \nThreat hunting experience preferred \nInnovative mindset","description_format":"text","description_chars":2983,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Endpoint Security","Managed Security"],"lifecycle":[{"event":"open","at":"2026-10-09T14:56:58Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":5,"expected_fill_days":82,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/sophos-threat-analyst-4","json_url":"https://alion.io/job/sophos-threat-analyst-4.json","meta":{"generated_at":"2026-10-15T12:43:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19682,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1926},"rest":"https://alion.io/mcp/rest/get_company?id=1926"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsophos-threat-analyst-4"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsophos-threat-analyst-4"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsophos-threat-analyst-4"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sophos-threat-analyst-4\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsophos-threat-analyst-4"}]}