Incident Response Engineer 3

Role Summary

Sophos is seeking an experienced Incident Response Engineer to support Managed Detection and Response (MDR) customers within the Critical Incident Response Unit (CIRU).As an Incident Response Engineer 3, you will lead the investigative stream of active cyber incidents, performing advanced forensic, analytical, and containment tasks across diverse customer environments. You will operate with moderate autonomy, serve primarily in an Incident Responder role, and support Advisors by validating findings, shaping investigative direction, and preparing technical context for customer communication. This role acts as a bridge between junior responders and senior analysts, ensuring technical accuracy, investigative consistency, and high‑quality documentation throughout the engagement.

What You Will Do

Utilize Sophos technologies to investigate, contain, and respond to cyber incidents

Conduct analysis of cyber incidents for malware...