Team Lead – Threat Analyst

Sophos

. Maintain supervision over operational tasks and provide day-to-day oversight for threat analysts .

Posted 10/9/2026full-timeRemote • IndiaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity incident response, including threat analysis, digital forensics, and malware handling. Possesses strong leadership skills to oversee security operations and effectively communicate with stakeholders.

Highest-signal resume keywords

Cybersecurity Incident ResponseThreat AnalysisDigital ForensicsEndpoint SecurityNetwork Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident Response ProceduresIndicators Of CompromiseNetwork Traffic AnalysisMalware DefensesSQL Query ConstructionMitre ATT&CK FrameworkIntrusion Detection SystemsEndpoint Detection And ResponseApple Operating SystemsLinux Operating Systems

Soft Skills

Effective CommunicationLeadership

Tools & Technologies

Security Operations CenterOSQueryIntrusion Prevention SystemsAdvanced Threat Protection

Industry Keywords

Cyber Threat IntelligenceAdversary TacticsIncident HandlingThreat HuntingOperational Effectiveness

Tech Stack

Tools & technologies

Cyber SecurityLinuxOpen SourceSQLSwitchingTCP/IP

About the role

Key responsibilities & impact

Maintain supervision over operational tasks and provide day-to-day oversight for threat analysts
Oversee analysts in their investigation and response
Determine possible root cause and resolution when security incidents arise
Communicate information effectively to stakeholders at all levels
Apply network and host-based intrusion analysis, incident response processes and procedures, digital forensics, and malware-handling expertise
Act as a lead throughout incident scenarios and provide cybersecurity incident response subject matter expertise
Execute incident handling procedures and directly respond to cybersecurity incidents
Maintain current knowledge of attacker tools, tactics, and procedures
Produce indicators of compromise (IOCs) for active and future investigations
Assess cyber threat intelligence and open source intelligence and operationalize that information
Handle sophisticated malware and dynamic cyber threat actors
Identify current and emerging threats and apply related research
Manage the operational effectiveness of the Security Operations Center and its personnel
Ensure the strategic and operational mission of the MDR team is fulfilled

Requirements

What you’ll need

5+ years of experience within a cybersecurity environment
Bachelor's in information technology, Computer Science, or a related field; or relevant, commensurate work experience
Experience in a security operations center or similar environment
Experience identifying indications of compromise or attack and responding to incidents
Endpoint and network security experience, including IDS, IPS, EDR, ATP, malware defenses, and monitoring
Knowledge of common adversary tactics and techniques, including obfuscation, persistence, and defense evasion
Working knowledge of incident response procedures
Experience administering and supporting Windows OS workstations and servers and either Apple or Linux-based operating systems
Fundamental understanding of network traffic analysis, including TCP/IP, routing, switching, and protocols
Threat hunting experience preferred
Knowledge of the Mitre ATT&CK framework preferred
Experience with SQL query construction preferred
Experience with OSQuery is a plus
Leadership experience preferred

Benefits

Comp & perks

Remote-first working model, with remote work as the primary option for most employees
Employee-led diversity and inclusion networks
Annual charity and fundraising initiatives
Volunteer days for employees
Global employee sustainability initiatives
Global fitness and trivia competitions
Global wellbeing days
Monthly wellbeing webinars and training
Recruitment and selection process adjustments for accessibility when needed