Jobs at Sophos

Monitor, investigate, and respond to cybersecurity threats across customer environments within Sophos’s 24/7 MDR service. Analyze logs, security events, endpoint and network data; conduct threat hunting; communicate findings to technical and executive audiences; support issue resolution; research indicators of compromise, exploits, vulnerabilities, and adversary techniques; and provide recommendations to reduce customer risk.

Monitors, investigates, and responds to cybersecurity alerts across customer environments in a 24/7 MDR operation. Responsibilities include threat hunting, incident response, phishing and malware analysis, detection tuning, case documentation, client communication, and playbook improvement. The role also mentors junior analysts, researches emerging threats and vulnerabilities, and supports security operations processes. Shift work, including nights, weekends, and holidays, is required.

Provides global technical leadership for Sophos’s MSSP program and AI security solutions. Leads solution design, architecture workshops, demonstrations, proofs of value, partner enablement, and technical evaluations. Advises MSSP partners on managed security service architecture, integrations, automation, and operational readiness while building AI security labs and attack simulations. Engages customers, partners, and internal teams across regions, mentors technical stakeholders, contributes market insights, and represents Sophos in industry forums. Travel of up to 50% is required.

Lead complex, high-impact incident response engagements for MDR customers, directing investigations, forensics, containment, and investigative strategy. Serve as Incident Advisor or Commander, synthesize technical findings into customer guidance, mentor IR and SOC analysts, collaborate with threat intelligence and detection engineering teams, and improve response playbooks and workflows. The role requires advanced forensic expertise, executive communication, and participation in weekend and holiday rotations.

Leads the transformation of Sophos’s pricing operations by building a centralized function, establishing governance and segment-based pricing cadences, and developing AI-assisted competitive and discount analysis. The role builds a new team, partners with Network Security, provides leadership with market intelligence, and tracks pricing performance metrics. Candidates need experience transforming pricing, revenue operations, or deal desk functions in B2B SaaS or technology businesses, along with strong change-management and people-leadership skills.

Leads Americas Sales Finance, partnering with senior sales leadership on topline growth, P&L oversight, forecasting, annual planning, headcount, quota capacity, commissions, pricing, renewals, and investment decisions. Builds financial models, translates sales performance into executive insights, improves forecasting and finance operations, and influences global Sales Finance initiatives. Requires strong expertise in FP&A, sales finance, GTM metrics, channel economics, cross-functional collaboration, and strategic decision-making in technology-driven environments.

Monitor, investigate, and respond to cyber threats in customer environments through Sophos MDR. Analyze logs, security events, endpoint data, and network activity; document findings; communicate with technical and executive audiences; support issue resolution and risk reduction. Research emerging indicators of compromise, exploits, vulnerabilities, and adversary tactics. Collaborate with threat hunters, incident responders, engineers, and ethical hackers in a 24/7 service environment.

Leads the Americas Enterprise Customer Success team, building a scalable engagement model across deployment, adoption, renewal, and customer growth. Responsibilities include recruiting and developing CSMs, creating playbooks and value plans, optimizing customer success processes, improving cross-functional handoffs, reducing churn, increasing adoption and upsell opportunities, and analyzing customer data. Requires extensive B2B technology customer success leadership experience and cybersecurity expertise.

Lead positioning, messaging, go-to-market strategy, launches, channel enablement, competitive intelligence, and analyst relations for Sophos’ AI cybersecurity solutions. Translate complex technical capabilities into buyer- and partner-focused narratives, build launch assets and sales tools, and coordinate cross-functional execution across product, sales, marketing, and research teams. The role also develops customer feedback loops, competitive battlecards, and category-defining market perspectives.

Own Sophos EDR strategy, roadmap, technical product development, AI-powered experiences, and go-to-market execution. Translate customer needs, threat research, telemetry, competitive intelligence, and business goals into product priorities. Partner with engineering, security operations, threat research, marketing, sales, and customer success to deliver endpoint detection, investigation, threat hunting, response, reporting, and XDR/MDR upgrade capabilities while driving adoption, revenue, and customer outcomes.

Leads customer-facing digital forensics and incident response engagements, directing investigations, prioritizing containment and remediation, delegating analyst work, and coordinating with legal and insurance stakeholders. Conducts root cause and data-exfiltration analysis, manages multiple incidents, identifies MITRE ATT&CK techniques, mentors analysts, and produces executive reports with remediation guidance. The role focuses on complex incidents including ransomware, network breaches, business email compromise, insider threats, and cloud environments.

Leads Sophos’s global total rewards strategy, including executive compensation, equity, base and variable pay, recognition, benefits, analytics, and automation. Partners with HR, Finance, Legal, and HR Systems; manages global regulatory and market considerations; prepares Board materials; and builds a global Total Rewards team. The role requires strategic leadership alongside hands-on program design and delivery across multiple countries.

Serve as the technical SME for compliance automation, overseeing GRC control mapping, evidence collection, integrations, and continuous monitoring. Partner with engineering teams to embed compliance into workflows, support audits and framework rollouts, assign control ownership, reduce audit burden, and maintain audit readiness. Lead cross-functional initiatives and communicate compliance risks, control status, and progress to technical and leadership audiences. The role requires cybersecurity framework expertise, program management, cloud and API fluency, GRC platform experience, and familiarity with AI-enabled compliance workflows.

Monitor, investigate, and respond to cybersecurity alerts across customer environments in a 24/7 MDR operation. Conduct threat hunting, analyze suspicious activity, phishing, binaries, and endpoint telemetry, and support incident containment, mitigation, and recovery. Mentor Tier I analysts, manage client cases, document investigations, tune detections, research emerging threats, and improve security operations playbooks and processes. Participate in shift rotations and communicate findings to technical and non-technical stakeholders.

Monitor, investigate, and respond to security events using Sophos and enterprise tooling. Analyze logs and endpoints, identify threats, communicate findings to technical and executive audiences, drive remediation and continuous improvement, and research emerging IOCs, exploits, and vulnerabilities to operationalize protections for customers.

Research AI threats, analyze threat actor behavior, produce actionable intelligence, collaborate with teams, and publish findings in the cybersecurity domain.