Threat Analyst

Sophos is hiring a Threat Analyst for a remote role open to applicants in India. Level rates it ; you can apply on Sophos.

Level's read on this job

Level rates this cybersecurity role Works on AI ●●●○: the daily work is on AI products, without building the model.
The posting lists this role as remote.
Tools and skills the posting cites include SIEM, Edr and Xdr.
Level classifies it as a mid-level role.
Level lists 85 other open roles at Sophos.

AI in this role

Threat Analyst needed to investigate and neutralize cyber threats using an AI-driven security platform and MDR services.

siemedrxdr

threat-analysiscybersecurityincident-responselog-analysisendpoint-security

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with the visibility and scalability needed to stay ahead of evolving threats. Sophos goes to market with a global partner ecosystem, including Managed Service Providers (MSPs), Managed Security Service Providers (MSSPs), resellers and distributors, marketplace integrations, and cyber risk partners, giving organizations the flexibility to choose trusted relationships when securing their business. Sophos is headquartered in Oxford, U.K. More information is available at www.sophos.com.

Role Summary

As an MDR Threat Analyst, you will work with enterprise systems, log analysis systems, and endpoint collection systems to facilitate the investigation, identification and neutralization of cyber threats. You will work alongside and contribute to a team of analysts with the objective of providing best in class monitoring, detection and response services.

How we rate this

Threat Analyst at Sophos rates 60 out of 100 for how much of the daily work is AI. That makes it Works on AI (AI Level 3 of 4). The level is about AI in the job, not seniority.

Classification

Works on AI. The daily work is on AI products, without building the model.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.

Key facts

Threat Analyst is an open job at Sophos.
Level rates this role AI Level 3 of 4: Works on AI.
The role is based in India and is marked remote.
The job was posted on October 9, 2026.
Seniority: mid.
Applications are handled by Sophos. Apply on Sophos

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

Threat AnalysisCybersecurityIncident ResponseLog AnalysisEndpoint SecuritySIEMEdrXdr

Also common in cybersecurity jobs at this level

Python LLM AWS AI agents Kubernetes Azure

Pay

Typical cybersecurity job: $159k

This posting doesn't list pay. Use the typical cybersecurity figure when pay comes up. See cybersecurity jobs

Questions you could be asked

Tell me about a project where threat analysis was part of your work. What did you do?
Tell me about a project where cybersecurity was part of your work. What did you do?
Tell me about a project where incident response was part of your work. What did you do?
Tell me about a project where log analysis was part of your work. What did you do?
Tell me about a project where endpoint security was part of your work. What did you do?

Adapt your resume

List these exact terms on your resume: Threat Analysis, Cybersecurity, Incident Response, Log Analysis, and Endpoint Security. An applicant tracking system matches the wording, not the idea.
Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.
Show where AI is part of your daily process, not a one-off project. This role expects it to be a running habit.

Want an expert to read your CV for this job?

Free. Send your CV and the role you want next. We reply by email within 2 to 4 business days.

Get a free CV review Get an express CV review Check your resume with the ATS resume checker

Get new remote cybersecurity jobs (Works on AI ●●●○ or higher) by email

One email a week with the new remote cybersecurity jobs (Works on AI ●●●○ or higher), each rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.

Free. One email a week. Unsubscribe in one click.