Sophos jobs, judged for you, free

What they do

Sophos sells cybersecurity for organizations of any size. Its products cover endpoints, networks, email, and identity. Its MDR service watches customer systems and responds to attacks around the clock. MDR means managed detection and response. Sophos bought Secureworks, another MDR company. It says it defends more than 600,000 customers.

What they value

• Simplicity: make cybersecurity intuitive and efficient.
• Empowerment: take ownership, act with integrity, and challenge the status quo.
• Passion: care about the work and the people.
• Innovation: experiment, learn fast, and never settle.
• Authenticity: be honest and transparent, and speak up when it is hard.

Where they hire

73 of 82 roles are remote, and you work from the country in the posting. The most roles are in India, Canada, the US, the UK, and Japan. Others are in Australia, Romania, Germany, and the Philippines. You must live in that country and have the right to work there. One posting says that Sophos does not sponsor visas.

Teams and roles

Sales and the threat intelligence and cybersecurity group have 26 roles each. Product and engineering has 15.

• MDR and security operations: threat analysts, from level 1 to team lead, who find and stop attacks in customer systems. The service runs 24 hours a day, so these roles work outside business hours, weekends and holidays included.
• Incident response: analysts and consultants who investigate and contain live attacks with customers.
• Penetration testing: testers in India and a manager in Japan. A penetration tester attacks a system with permission to find its weak points.
• Product management: AI-native products, endpoint detection and response, and pricing.
• Engineering in India: site reliability engineers and a Java software engineer.
• Sales: account executives, sales engineers, channel managers, and renewals.

Most roles in Japan ask for Japanese.

What they look for

Threat analyst roles ask for two or more years in a security operations center (SOC) at level 1, and five or more at level 3. They ask for endpoint and network security monitoring, Windows administration, and knowledge of the MITRE ATT&CK framework of attacker methods. Most security roles ask for SQL, and many ask for PowerShell. Many name certifications such as GCFA, CISSP, GCIH, or OSCP. Penetration testers need two or more years with tools such as Nmap, Metasploit, Kali Linux, or Burp Suite.

The site reliability roles ask for three to five years, AWS, Terraform, Kubernetes, and CI/CD with Jenkins and GitHub Actions. The Java role asks for one to two years of Java, Spring Boot, and microservices. The AI product manager role asks for five or more years and hands-on work with LLM products. Most sales roles ask for three or more years, and every sales posting names work with channel partners, resellers, or MSPs. An MSP is a managed service provider that runs IT for other companies.