Teams at Sophos

Serve as the technical SME for compliance automation, overseeing GRC control mapping, evidence collection, integrations, and continuous monitoring. Partner with engineering teams to embed compliance into workflows, support audits and framework rollouts, assign control ownership, reduce audit burden, and maintain audit readiness. Lead cross-functional initiatives and communicate compliance risks, control status, and progress to technical and leadership audiences. The role requires cybersecurity framework expertise, program management, cloud and API fluency, GRC platform experience, and familiarity with AI-enabled compliance workflows.

Designs, develops, tests, deploys, and supports cloud-native microservices and REST APIs for AI-powered cybersecurity capabilities. Builds and operates LLM-powered applications, integrates databases and distributed systems, and contributes to containerized, event-driven services on AWS. Responsibilities include production monitoring, debugging, secure development, responsible AI practices, code reviews, cross-functional collaboration, documentation, and peer support.

Monitor, investigate, and respond to cybersecurity alerts across customer environments in a 24/7 MDR operation. Conduct threat hunting, analyze suspicious activity, phishing, binaries, and endpoint telemetry, and support incident containment, mitigation, and recovery. Mentor Tier I analysts, manage client cases, document investigations, tune detections, research emerging threats, and improve security operations playbooks and processes. Participate in shift rotations and communicate findings to technical and non-technical stakeholders.