Boost your career with Sophos as a Security Engineer specialized in Threat Response. This role blends investigative skills with engineering to tackle cyber threats, all within a remote-first framework. At Sophos, we are looking for a proactive engineer to manage the entire cyber incident lifecycle.

You will independently detect and investigate threats while engineering advanced automated workflows that enhance our Internal Detection and Response capabilities. Robust expertise in DFIR, endpoint forensics, and AI automation safety controls is essential for this role. Key Responsibilities:
Detect and respond to cyber threats across Sophos products
Own complex investigations from triage to lessons learned
Perform DFIR, network analysis, and malware investigations




Design reusable skills and workflows for scalable automation
Communicate clearly with engineering and leadership teams Requirements:
Hands-on experience with Claude and similar coding agents
Proficient in Python or comparable scripting languages
Knowledge of Git, GitHub practices, and CI/CD concepts
Robust background in threat hunting and detection engineering
Familiarity with APIs and SQL for data queries Excel in cyber threat management, forensics, and engineering at Sophos, where your skills will make a direct impact.

📌 Sophos Threat Response Security Engineer Ottawa (Canada)
🏢 Sophos
📍 Canada