---
title: "Incident Response Engineer 2 at Sophos · OpenVibe.Work"
canonical: "https://openvibe.work/jobs/job_mrh0z48y0330fe94msp0c12hph"
updated: null
---

# Incident Response Engineer 2 at Sophos · OpenVibe.Work

HTML: [Incident Response Engineer 2 at Sophos · OpenVibe.Work](https://openvibe.work/jobs/job_mrh0z48y0330fe94msp0c12hph)

# Incident Response Engineer 2

[Sophos](/companies/sophos) · United Kingdom · Full time

Salary not listed by the employer

Threat Intelligence & Cybersecurity

## Excerpt

Role Summary Sophos is seeking an intermediate-level Incident Response Analyst to support its Managed Detection and Response (MDR) customers within the Critical Incident Response Team (CIRT). As an Incident Response Analyst 2, you will perform advanced investigative, forensic, and containment…

Short excerpt only. You apply on Arbeitnow.

[Read the full listing on Arbeitnow](https://www.arbeitnow.co.uk/jobs/companies/sophos/incident-response-engineer-2-united-kingdom-388756) Read from Arbeitnow on 10 November 2026

[Sign in](/auth/login?next=%2Fjobs%2Fjob_mrh0z48y0330fe94msp0c12hph) to track this job and ask your agent for help applying.

 Where this listing came from · Arbeitnow

- Source: [Arbeitnow](https://www.arbeitnow.co.uk/jobs/companies/sophos/incident-response-engineer-2-united-kingdom-388756) — [its terms as applied](/sources#arbeitnow)
- Posted: 2026-11-10 12:40:15 UTC
- Read from the board: 2026-11-10 16:55:46 UTC
- First seen: 2026-11-10 16:55:46 UTC
- Last seen: 2026-11-10 16:55:46 UTC
- Board's id: `incident-response-engineer-2-united-kingdom-388756`

Found a problem with this listing, or want it gone? It is the board's listing, not ours — the source above is where it lives. In code: `GET /api/v1/jobs/job_mrh0z48y0330fe94msp0c12hph`.