InfoSec Engineer

Role Summary

As an InfoSec Engineer , you will work with enterprise systems, log analysis systems, and endpoint collection systems to facilitate the identification and investigation of challenging cybersecurity issues. You will work alongside and contribute to a team of cybersecurity professionals with the objective of providing best-in-class monitoring, detection, and response services.

In this role, you will help customers enhance their cybersecurity posture by reviewing security configurations, identifying improvement opportunities, providing best-practice recommendations, and supporting customer adoption of Sophos MDR services . You will work closely with customers and internal stakeholders to help deliver a superior customer experience while contributing to the overall effectiveness of customer security programmes.

What you will do

• Implement measures aimed at securing the posture of applications and platforms within customer environments.
• Identify and recommend security posture improvements to customers with the intent of reducing the risk of cyber-attacks.
• Effectively communicate the capabilities and value of MDR services to customers.
• Respond to various customer scenarios, documenting solutions and providing dependable and timely resolutions to MDR-related issues experienced by customers.
• Collaborate with Support teams and various internal organisations to provide a superior customer experience.
• Provide assistance to core Security and Threat Response teams.
• Create MDR service-related reports .
• Effectively track and report on remediation efforts.
• Interact with customers via various communication mediums including phone, email, messaging platforms, and virtual meetings.
• Review customer environments and security configurations to identify opportunities for improving protection coverage, operational readiness, and overall security posture.
• Provide customers with guidance and recommendations to help maximise the effectiveness of MDR .
• Support customer onboarding and service adoption by helping ensure environments are configured according to established best practices.
• Work closely with Customer Success, Support, Product, and other internal stakeholders to help drive positive customer outcomes.
• Maintain accurate documentation of customer engagements, recommendations, and remediation activities.
• Develop a strong understanding of Sophos products, services, and cybersecurity best practices to effectively support customer needs.

What you will bring

• Bachelor’s degree in information technology, Computer Science, Cybersecurity, or a related field ; or equivalent practical experience.
• Willingness to work outside standard business hours, including weekends and holidays, as our Managed Detection and Response service operates on a 24x7x365 basis .
• Must be able to thrive within a team environment as well as independently.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent verbal and written communication skills.
• Ability to manage multiple priorities in a fast-paced operational environment.
• Strong attention to detail and commitment to delivering high-quality customer outcomes.
• Customer-focused mindset with strong communication, relationship-building, and stakeholder engagement skills.

Desired Skills

• Fundamental knowledge of core cybersecurity concepts .
• Fundamental understanding of network traffic analysis including TCP/IP, routing, switching, protocols, and networking fundamentals .
• Experience with vulnerability management .
• Fundamental understanding of enterprise information security data management. SIEM, EDR, or XDR experience is considered an advantage.
• Excellent troubleshooting and analytical thinking skills.
• Strong documentation and communication skills.
• Intuitive individual with the ability to manage change and demonstrate effective time management.
• Excellent customer service skills.
• Passion for information technology and information security.
• Natural curiosity and the ability to learn new skills quickly.
• Ability to think outside the box.
• Innovative mindset.
• Understanding of cybersecurity operations and managed security services .
• Familiarity with endpoint, network, cloud, and identity security concepts .
• Understanding of security monitoring, vulnerability management, and cyber risk reduction principles .
• Experience reviewing security configurations and providing security best-practice recommendations.
• Ability to analyse operational, security, and configuration data to identify potential risks and improvement opportunities.
• Strong customer engagement and stakeholder management skills.
• Ability to work effectively in a dynamic, fast-paced environment.