Threat Analyst, Level 2

Sophos

. Investigate, identify and neutralize cyber threats using enterprise systems, log analysis systems and endpoint collection systems .

Posted 11/4/2026full-timeRemote • AustraliaJuniorMid-LevelWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cyber threat investigation and neutralization, with a strong foundation in endpoint and network security, incident response procedures, and security log management. Proficient in utilizing the MITRE ATT&CK framework and various security tools to enhance threat detection and response capabilities.

Highest-signal resume keywords

Cyber Threat InvestigationEndpoint And Network SecurityIncident Response ProceduresMITRE ATT&CK FrameworkSQL Query Construction

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat HuntingLog AnalysisWindows Event Log AnalysisNetwork Traffic AnalysisScripting LanguagesEnterprise Information Security Data ManagementSecurity Information And Event Management (SIEM)Malware DefensesTCP/IPOSQuery

Soft Skills

Team CollaborationClient InteractionTraining And Onboarding

Tools & Technologies

IDSIPSEDRATPKQLPowerShellPython

Certifications & Qualifications

Advanced Cybersecurity Certifications

Industry Keywords

SOC EnvironmentCybersecurityThreat AnalysisInformation Security MetricsIndicators Of Compromise

Tech Stack

Tools & technologies

Cyber SecurityLinuxPythonSQLSwitchingTCP/IP

About the role

Key responsibilities & impact

Investigate, identify and neutralize cyber threats using enterprise systems, log analysis systems and endpoint collection systems
Handle escalations from Level I Threat Analysts and guide or advise on investigations
Onboard and train new Threat Analysts
Participate in Security Operations process improvement and creation
Provide detection and response to security events and cyber threats
Conduct security log management and monitoring
Maintain information security metrics
Assist core security and threat response teams
Create MDR service-related reports
Create cases for clients
Track and follow up with clients through threat neutralization
Interact with clients through various mediums
Research recent indicators of compromise or attack, exploits and vulnerabilities
Obtain metrics for reporting on threat trends, intelligence analysis and situational awareness

Requirements

What you’ll need

2-4 years of experience working in a SOC environment or computer security team in an IT environment
Endpoint and network security experience, including IDS, IPS, EDR, ATP, malware defenses and monitoring
Threat hunting experience preferred
Knowledge of common adversary tactics and techniques
Knowledge of the MITRE ATT&CK framework preferred
Working knowledge of incident response procedures
Experience with SQL query construction preferred
Experience with OSQuery is a plus
Experience administering and supporting Windows OS and either Apple or Linux-based operating systems
Fundamental understanding of network traffic analysis, including TCP/IP, routing, switching and protocols
Strong understanding of Windows event log analysis
Experience with enterprise information security data management; SIEM experience a plus
Experience with scripting languages such as KQL, PowerShell or Python
Advanced cybersecurity certifications preferred but not required
Bachelor’s degree in Information Technology, Computer Science or a related field, or relevant commensurate work experience
Willingness to work outside standard business hours, including weekends and holidays, for a 24x7x365 service
Ability to work effectively in a team and independently
Legal authorization to work in Australia without employer sponsorship

Benefits

Comp & perks

Remote-first working model
Employee-led diversity and inclusion networks
Annual charity and fundraising initiatives
Volunteer days
Global employee sustainability initiatives
Global fitness and trivia competitions
Global wellbeing days
Monthly wellbeing webinars and training
Equal opportunity and recruitment-process adjustments for applicants with disabilities or other needs