Incident Response & Threat Intelligence Lead
sophos· Threat Research and Engineering (SophosLabs)
About this role
About Us
Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response.
Sophos offers industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with the visibility and scalability needed to stay ahead of evolving threats.
Sophos goes to market with a global partner ecosystem, including Managed Service Providers (MSPs), Managed Security Service Providers (MSSPs), resellers and distributors, marketplace integrations, and cyber risk partners, giving organizations the flexibility to choose trusted relationships when securing their business. Sophos is headquartered in Oxford, U.K. More information is available at www.sophos.com.
Role Summary
インシデント対応および脅威インテリジェンスのリーダーは、日々高度化するセキュリティ脅威への対応において、お客様を支援します。インシデント発生時の対応を支援するだけでなく、効果的なインシデント対応に向けた事前準備も支援します。小規模なインシデントから複雑で大規模インシデントまで、技術的な調査を実施し、攻撃者の行動に基づいてインシデントの根本原因と範囲を特定し、推奨される対応戦略を提供することでお客様を支援します。
さらに、この役割はソフォスの脅威対策ユニット（CTU）との主要な連絡窓口として、調査結果に攻撃者の戦術、技術、インフラに関する最新のインテリジェンスを反映させます。また、運用上の知見を、お客様や社内チーム向けの実行可能なガイダンスに変換する役割も担います。
リーダーは技術レベルおよび経営層向けの質の高いプレゼンテーションやブリーフィングを行う責任も担います。これには、調査結果の提示、脅威インテリジェンスの動向の説明、多様な聴衆に対して対応策の推奨事項を明確に伝達し、情報に基づいた意思決定を支援することが含まれます。
Incident Response & Threat Intelligence Leads support clients in managing increasingly sophisticated security threats daily. They not only assist in responding to incidents as they occur but also help clients prepare in advance for effective incident response. Whether handling small‑scale or complex, large‑scale incidents, we assist clients by conducting technical investigations, identifying the root cause and scope of the incident based on attacker behavior, and providing recommended response strategies.
In addition, this role will act as a key liaison with the Sophos Counter Threat Unit, ensuring investigative findings are enriched with the latest intelligence on attacker tactics, techniques, and infrastructure. The role also translates operational intelligence into actionable guidance for clients and internal teams.
Leads are also responsible for delivering high‑quality presentations and briefings, both technical and executive‑level. This includes presenting investigation findings, explaining threat intelligence trends, and clearly communicating response recommendations to diverse audiences to support informed decision‑making.
Frequently Asked Questions
Is the salary disclosed for the Incident Response & Threat Intelligence Lead position at sophos?
The salary for this Incident Response & Threat Intelligence Lead role at sophos is not publicly listed. Click "Apply Now" to learn more about the compensation package on their official careers page.
Where is the Incident Response & Threat Intelligence Lead position at sophos located?
This Incident Response & Threat Intelligence Lead role at sophos is based in Japan. The position is listed as on-site or hybrid. Check the full job description or apply directly to confirm the work arrangement.
Is the Incident Response & Threat Intelligence Lead role at sophos full-time or part-time?
This is listed as a Permanent position. It is posted as a Incident Response & Threat Intelligence Lead role in the Threat Research and Engineering (SophosLabs) department at sophos.
Which team or department does the Incident Response & Threat Intelligence Lead at sophos belong to?
This Incident Response & Threat Intelligence Lead position is part of the Threat Research and Engineering (SophosLabs) department at sophos. See the full job description for more information about the team structure and responsibilities.
How do I apply for the Incident Response & Threat Intelligence Lead position at sophos?
Click the "Apply Now" button on this page. You will be redirected to sophos's official application portal hosted on lever where you can submit your application directly.
When was the Incident Response & Threat Intelligence Lead job at sophos posted?
This Incident Response & Threat Intelligence Lead position at sophos was posted on Mar 16, 2026. Apply as soon as possible — early applications are often reviewed first.
Incident Response & Threat Intelligence Lead
sophos
You'll be redirected to sophos's official application page on Lever.