Jobs at Sophos

Own Sophos EDR strategy, roadmap, technical product development, AI-powered experiences, and go-to-market execution. Translate customer needs, threat research, telemetry, competitive intelligence, and business goals into product priorities. Partner with engineering, security operations, threat research, marketing, sales, and customer success to deliver endpoint detection, investigation, threat hunting, response, reporting, and XDR/MDR upgrade capabilities while driving adoption, revenue, and customer outcomes.

Leads customer-facing digital forensics and incident response engagements, directing investigations, prioritizing containment and remediation, delegating analyst work, and coordinating with legal and insurance stakeholders. Conducts root cause and data-exfiltration analysis, manages multiple incidents, identifies MITRE ATT&CK techniques, mentors analysts, and produces executive reports with remediation guidance. The role focuses on complex incidents including ransomware, network breaches, business email compromise, insider threats, and cloud environments.

Leads Sophos’s global total rewards strategy, including executive compensation, equity, base and variable pay, recognition, benefits, analytics, and automation. Partners with HR, Finance, Legal, and HR Systems; manages global regulatory and market considerations; prepares Board materials; and builds a global Total Rewards team. The role requires strategic leadership alongside hands-on program design and delivery across multiple countries.

Serve as the technical SME for compliance automation, overseeing GRC control mapping, evidence collection, integrations, and continuous monitoring. Partner with engineering teams to embed compliance into workflows, support audits and framework rollouts, assign control ownership, reduce audit burden, and maintain audit readiness. Lead cross-functional initiatives and communicate compliance risks, control status, and progress to technical and leadership audiences. The role requires cybersecurity framework expertise, program management, cloud and API fluency, GRC platform experience, and familiarity with AI-enabled compliance workflows.

Designs, develops, tests, deploys, and supports cloud-native microservices and REST APIs for AI-powered cybersecurity capabilities. Builds and operates LLM-powered applications, integrates databases and distributed systems, and contributes to containerized, event-driven services on AWS. Responsibilities include production monitoring, debugging, secure development, responsible AI practices, code reviews, cross-functional collaboration, documentation, and peer support.

Monitor, investigate, and respond to cybersecurity alerts across customer environments in a 24/7 MDR operation. Conduct threat hunting, analyze suspicious activity, phishing, binaries, and endpoint telemetry, and support incident containment, mitigation, and recovery. Mentor Tier I analysts, manage client cases, document investigations, tune detections, research emerging threats, and improve security operations playbooks and processes. Participate in shift rotations and communicate findings to technical and non-technical stakeholders.

Design, develop, test, document, and deploy cloud-based email security services across the full software stack. Contribute to system and product design, security reviews, automation, code reviews, agile planning, and large-scale cloud troubleshooting. Mentor junior engineers, present designs, define test scenarios, and help deliver secure, high-quality solutions using AI-assisted development tools and AWS technologies.

Support and improve CI/CD pipelines, release automation, and cloud infrastructure for SaaS microservices. Deploy and troubleshoot containerized workloads (Kubernetes/EKS), write automation scripts (Groovy/Python/Bash), use Terraform for infrastructure provisioning, integrate DevSecOps tooling, communicate release status and risks, and participate in on-call rotations to maintain build and release reliability.

Serves as the technical advisor for mid-market customers and channel partners across Ontario and Quebec. Leads cybersecurity discovery sessions, demonstrations, workshops, proof-of-concept engagements, and consultative sales conversations. Supports account growth, retention, cross-selling, partner enablement, and technical forecasting while communicating security value to technical and executive stakeholders. Requires English and French fluency, cybersecurity expertise, channel-sales experience, mentoring ability, and regional travel.

Design, build, and maintain Anaplan models for territory, quota planning, and incentive compensation. Lead end-to-end model development, integrations (Salesforce, Snowflake, ERP), governance, performance tuning, UAT, training, and production support while partnering with stakeholders, IT, and data teams.

The Senior Product Manager will support MSP partners by providing product knowledge, tracking enablement progress, gathering market intelligence, and assisting with end-user training to enhance security services.

Monitor, investigate, and respond to security events using Sophos and enterprise tooling. Analyze logs and endpoints, identify threats, communicate findings to technical and executive audiences, drive remediation and continuous improvement, and research emerging IOCs, exploits, and vulnerabilities to operationalize protections for customers.

Provide 24x7 monitoring, detection, investigation, and response for customer environments using enterprise/log/endpoint tools. Analyze logs and network/endpoint telemetry, hunt threats, document findings for technical and executive audiences, remediate incidents, and recommend risk-reducing improvements.

The Channel Marketing Manager will drive partner marketing programs to enhance growth, pipeline generation, and partner engagement for Sophos North America, focusing on high-priority partners and executing collaborative strategies with sales and marketing teams.

Design, implement, test, and maintain TypeScript-based frontend (React) and backend services. Build and operate APIs and cloud infrastructure (IaC), participate in on-call incident response, write automated tests, perform code reviews, mentor junior engineers, and collaborate with product, design, and security teams to deliver scalable security features.

Partner with Sophos Technology Group to build and maintain financial plans, P&L oversight, expense and headcount management, dynamic financial models, variance analysis, and process improvements using AI and BI tools. Support month-end processes, cost optimization initiatives, and cross-functional finance projects.

Research AI threats, analyze threat actor behavior, produce actionable intelligence, collaborate with teams, and publish findings in the cybersecurity domain.