InfoSec Engineer

Role Summary

As an InfoSec Engineer, you will work with enterprise systems, log analysis systems, and endpoint collection systems to facilitate the identification and investigation of challenging cybersecurity issues. You will work alongside and contribute to a team of cybersecurity professionals with the objective of providing best-in-class monitoring, detection, and response services.

In this role, you will help customers enhance their cybersecurity posture by reviewing security configurations, identifying improvement opportunities, providing best-practice recommendations, and supporting customer adoption of Sophos MDR services. You will work closely with customers and internal stakeholders to help deliver a superior customer experience while contributing to the overall effectiveness of customer security programmes.

What you will do

• Implement measures aimed at securing the posture of applications and platforms within customer environments.
• Identify and recommend security posture improvements to customers with the intent of reducing the risk of cyber-attacks.
• Effectively communicate the capabilities and value of MDR services to customers.
• Respond to various customer scenarios, documenting solutions and providing dependable and timely resolutions to MDR-related issues experienced by customers.
• Collaborate with Support teams and various internal organisations to provide a superior customer experience.
• Provide assistance to core Security and Threat Response teams.
• Create MDR service-related reports.
• Effectively track and report on remediation efforts.
• Interact with customers via various communication mediums including phone, email, messaging platforms, and virtual meetings.
• Review customer environments and security configurations to identify opportunities for improving protection coverage, operational readiness, and overall security posture.
• Provide customers with guidance and recommendations to help maximise the effectiveness of MDR.
• Support customer onboarding and service adoption by helping ensure environments are configured according to established best practices.
• Work closely with Customer Success, Support, Product, and other internal stakeholders to help drive positive customer outcomes.
• Maintain accurate documentation of customer engagements, recommendations, and remediation activities.
• Develop a strong understanding of Sophos products, services, and cybersecurity best practices to effectively support customer needs.

What you will bring

• Bachelor’s degree in information technology, Computer Science, Cybersecurity, or a related field; or equivalent practical experience.
• Willingness to work outside standard business hours, including weekends and holidays, as our Managed Detection and Response service operates on a 24x7x365 basis.
• Must be able to thrive within a team environment as well as independently.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent verbal and written communication skills.
• Ability to manage multiple priorities in a fast-paced operational environment.
• Strong attention to detail and commitment to delivering high-quality customer outcomes.
• Customer-focused mindset with strong communication, relationship-building, and stakeholder engagement skills.

Desired Skills

• Fundamental knowledge of core cybersecurity concepts.
• Fundamental understanding of network traffic analysis including TCP/IP, routing, switching, protocols, and networking fundamentals.
• Experience with vulnerability management.
• Fundamental understanding of enterprise information security data management. SIEM, EDR, or XDR experience is considered an advantage.
• Excellent troubleshooting and analytical thinking skills.
• Strong documentation and communication skills.
• Intuitive individual with the ability to manage change and demonstrate effective time management.
• Excellent customer service skills.
• Passion for information technology and information security.
• Natural curiosity and the ability to learn new skills quickly.
• Ability to think outside the box.
• Innovative mindset.
• Understanding of cybersecurity operations and managed security services.
• Familiarity with endpoint, network, cloud, and identity security concepts.
• Understanding of security monitoring, vulnerability management, and cyber risk reduction principles.
• Experience reviewing security configurations and providing security best-practice recommendations.
• Ability to analyse operational, security, and configuration data to identify potential risks and improvement opportunities.
• Strong customer engagement and stakeholder management skills.
• Ability to work effectively in a dynamic, fast-paced environment.