What Sophos does
Sophos is a cybersecurity company headquartered in Abingdon, England, defending around 600,000 organisations worldwide with what it describes as an AI-driven platform and expert-led services. Its portfolio covers endpoint, network, email and cloud security, extended detection and response, identity threat detection, and managed detection and response delivered 24/7 by its Sophos X-Ops threat unit.
The 24/7 part matters more than it sounds for a jobseeker. A company running round-the-clock threat monitoring needs people in multiple time zones by construction, which is a different reason for hiring remotely than the usual one.
Remote Work Europe tracks Sophos through the Connected members’ jobs board, where it is one of the more consistent sources of remote security roles in Europe.
Remote culture: what it’s actually like
Sophos does not publish a headline remote-working policy, and it would be wrong to call it remote-first. It is an established British company with offices, hiring a proportion of its roles remotely.
What the listings show is that the remote roles are real rather than nominal. Of the thirteen Sophos roles on our board at the end of September 2026, the locations were stated as “United Kingdom, Remote”, “Germany, Remote” and similar – a named country with remote working, rather than an office address with flexibility implied.
That is an honest arrangement and worth understanding for what it is: you would be a remote employee of a company that has buildings, not a member of a distributed organisation.
Hiring in Europe: the details
Countries. United Kingdom heavily dominant. Of thirteen roles at the end of September 2026, nine were in the UK, two in Germany, one in Sweden and one in Italy.
Employment model. Employed roles, including fixed-term – we recorded a Group Financial Controller advertised as a six-month contract, stated plainly in the title.
Timezone expectations. Security operations roles are shift-based by nature. Incident Response and Threat Analyst positions sit inside a 24/7 service, and the rota is the thing to ask about.
Language. English throughout, with one language-specific role in the set. German appears in sales engineering titles as “(m/f/d)”, the standard German job-advert convention.
Salary approach. Not published on the adverts.
Remote Work Europe Connected
EUR 15 a month for daily curated remote job leads across Europe, hand-picked and scam-filtered, with contract type flagged wherever the employer states it.
Who they’re looking for
Two clear populations. Technical security: incident response engineers, threat analysts, and the specialists who staff a managed detection service.
And a commercial layer around it: product marketing directors for AI solutions, lead lifecycle marketing managers, sales engineers for channel and Nordics coverage, and finance.
Eight of the thirteen roles were non-technical, which is a better ratio than most security employers manage.
What the hiring pattern tells you
Eight of Sophos’s thirteen roles carried our gateway flag – experienced positions where the barrier is not seniority but the absence of prior remote experience.
There is a second, more practical signal in this employer’s data, and it is a technical one. Sophos’s job feed is large enough that it was timing out of our daily rebuild entirely for weeks, and no Sophos roles reached the board at all until we found and fixed it at the end of September 2026. Thirteen live, genuinely remote European security roles were invisible because of a download limit.
We mention it because it is the kind of failure that no job board tells you about, and because it is a reminder that an employer’s absence from any listing is not evidence they are not hiring. If you want a role at a specific company, their own careers page remains the source of truth.
If you are moving into remote work with an established security career, our guide to remote gateway roles covers how to present experience that has always been on-site.
How to apply
- Careers: Sophos posts through Lever and applications go directly to the company
- LinkedIn: Sophos on LinkedIn
Specific tips: for the security operations roles, ask about the shift pattern at first contact rather than at offer – a 24/7 service has a rota and it is the single biggest factor in whether the job suits your life. Check whether a role is permanent or fixed-term, because Sophos states it in the title when it is. And if you are applying to a German posting, “(m/f/d)” is legal boilerplate rather than anything about the role.
See our full guide to Remote-First Companies That Actually Hire in Europe, and what “remote” actually means on a job advert.