About Company
Sophos is a global leader in next-generation cybersecurity, protecting more than 600,000 organizations and millions of consumers in more than 150 countries from today’s most advanced cyberthreats. Powered by SophosLabs and SophosAI, Sophos offers a broad portfolio of advanced products and services to secure users, networks, and endpoints against ransomware, malware, exploits, phishing, and a wide range of other cyberattacks. We provide highly effective, integrated threat protection solutions that are easy to deploy, manage, and use. From endpoint and network security to cloud security and managed threat response, Sophos is at the forefront of innovation, continuously adapting to the evolving threat landscape. Our mission is to make security simple, robust, and accessible for businesses of all sizes, enabling them to focus on their core objectives without fear of cyber disruption. In Colombia, Sophos is rapidly expanding its footprint, serving a diverse client base and contributing significantly to the region’s cybersecurity resilience. We foster a collaborative, innovative, and growth-oriented culture where every team member is empowered to make a real impact.
Job Description
Are you passionate about cybersecurity and eager to make an immediate impact in a fast-paced environment? Sophos is looking for an enthusiastic and detail-oriented Associate Threat Hunter to join our elite cybersecurity team in Bogotá. This is a critical role for someone ready to dive deep into security data, proactively identify stealthy threats, and enhance our defense mechanisms from day one.
As an Associate Threat Hunter, you will be instrumental in Sophos’s proactive security posture, moving beyond reactive incident response to actively seek out advanced persistent threats (APTs), zero-day exploits, and sophisticated malware that evade traditional security controls. Your day will involve analyzing vast datasets from various security tools – including SIEMs, EDR platforms, and network logs – to uncover anomalies and indicators of compromise (IOCs) that could signal a breach in progress or a nascent threat. You will develop and refine hunting queries, build dashboards, and contribute to the creation of new detection methodologies to stay ahead of adversaries. This role offers an unparalleled opportunity to work with cutting-edge cybersecurity technologies and learn from industry experts.
We are looking for an individual with an insatiable curiosity, excellent analytical skills, and a solid understanding of the cyber kill chain and MITRE ATT&CK framework. You’ll collaborate closely with our incident response, security operations, and engineering teams, translating your findings into actionable intelligence that strengthens our overall security infrastructure and protects our global client base. Given the ‘Immediate Start’ nature of this position, we seek a candidate who is a quick learner, self-motivated, and capable of integrating rapidly into our dynamic team. If you thrive on the challenge of outsmarting cybercriminals and are ready to contribute to a world-leading cybersecurity company, we encourage you to apply and help us shape the future of threat intelligence and defense.
Key Responsibilities
- Conduct proactive, hypothesis-driven threat hunting exercises across Sophos's protected environments and customer data to identify novel threats and attacker techniques.
- Analyze security logs, network traffic, endpoint telemetry, and other security data sources for suspicious activities and indicators of compromise (IOCs).
- Develop and refine threat hunting playbooks, queries, and detection rules to improve the efficiency and effectiveness of threat detection.
- Collaborate with Incident Response (IR) and Security Operations Center (SOC) teams to transition identified threats into formal incidents and support remediation efforts.
- Stay current with the latest cybersecurity threats, attack vectors, vulnerabilities, and threat intelligence reports.
- Document hunting methodologies, findings, and provide clear, concise reports to relevant stakeholders.
- Contribute to the continuous improvement of Sophos's security tools, processes, and overall security posture.
- Participate in knowledge sharing and training activities to enhance team capabilities.
Required Skills
- Proven understanding of cybersecurity principles, including threat landscapes, attack techniques (e.g., MITRE ATT&CK), and defense strategies.
- Experience with Security Information and Event Management (SIEM) tools (e.g., Splunk, Elastic SIEM, Microsoft Sentinel) for data analysis and correlation.
- Familiarity with Endpoint Detection and Response (EDR) solutions and their capabilities.
- Strong analytical and problem-solving skills with the ability to identify patterns and anomalies in large datasets.
- Basic knowledge of scripting languages (e.g., Python, PowerShell) for automation and data manipulation.
- Understanding of network protocols (TCP/IP, HTTP, DNS) and common operating systems (Windows, Linux).
- Excellent communication skills in both English and Spanish, capable of explaining complex security concepts clearly.
- Ability to work independently and collaboratively in a fast-paced, dynamic environment.
Preferred Qualifications
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
- Relevant industry certifications such as CompTIA Security+, CySA+, GCIH, CEH, or equivalent.
- Prior experience in a Security Operations Center (SOC), Incident Response, or similar cybersecurity role.
- Experience with cloud security platforms (AWS, Azure, GCP) and cloud-native security tools.
- Knowledge of malware analysis techniques and reverse engineering principles.
- Familiarity with intelligence-driven threat hunting methodologies.
Perks & Benefits
- Competitive salary and performance-based bonuses.
- Comprehensive health, dental, and vision insurance plans.
- Generous paid time off and flexible work arrangements.
- Opportunities for professional growth, training, and industry certifications.
- A vibrant, inclusive, and collaborative work culture.
- Modern office environment with access to cutting-edge technology.
- Employee assistance programs and wellness initiatives.
- Participation in innovative projects at the forefront of cybersecurity.
How to Apply
Interested candidates are encouraged to click on the application link below to submit their resume and cover letter. Please ensure your application highlights your relevant experience, technical skills, and why you are a great fit for an ‘Immediate Start’ role at Sophos. We look forward to reviewing your application and exploring how you can contribute to our mission of protecting businesses worldwide.