Full-Time
Lead Instructional Designer
Sales Enablement
Sophos
5,001-10,000 employees
Subscription-based cybersecurity for endpoints, networks, MDR
No salary listed
Remote in India
Remote
 Training (1) |
|---|
Get referred to Sophos
See people who can refer or advise you
- At least 7 years of experience in instructional design in technical and sales enablement environments.
- Deep experience in business-to-business technology or cybersecurity environments, ideally with complex product portfolios.
- Ability to use artificial-intelligence-powered authoring tools and develop artificial-intelligence-supported practice and coaching experiences.
- Practical fluency with generative artificial intelligence, prompt design, and content-transformation workflows to accelerate instructional-design production and scale curriculum development.
- Ability to design artificial-intelligence-assisted learning content and workflows that balance speed, personalization, accuracy, governance, and human judgment.
- Ability to manage multiple, time-sensitive projects across global teams.
- Experience working with learning management system and learning experience platform technologies.
- Understanding of enablement metrics such as time to productivity, deal velocity, and content engagement.
- Applied knowledge of adult learning theory, performance consulting, and instructional-design frameworks such as ADDIE or SAM.
- Communication, collaboration, and project-leadership skills.
- A flexible, critical-thinking mindset with a bias toward action and innovation.
- Design strategic enablement programs for sellers, channel partners, and customer-facing roles that align with go-to-market priorities.
- Rapidly develop content using artificial-intelligence-powered tools and modern design methodologies, including simulations, adaptive learning, microlearning, and scenario-based learning.
- Partner with global Sales, Channel, and Product stakeholders to translate complex solutions into relevant, learner-centered experiences.
- Manage instructional-design projects from intake through launch, driving timelines, deliverables, and quality across workstreams.
- Serve as a subject-matter expert on instructional-design best practices, adult learning theory, and technology-enhanced learning.
- Contribute to the configuration and use of learning management and learning experience platforms so global learners can access the right content at the right time.
- Apply data, feedback, and performance metrics to continuously improve learning experiences.
- Develop and enhance the existing artificial-intelligence-enabled instructional-design operating model, including approved workflows for content intake, storyboarding, drafting, content transformation, quality review, and publication readiness.
- Use generative artificial intelligence and prompt-driven workflows to accelerate development of courses, simulations, scenario-based practice, assessments, job aids, and facilitator guides while maintaining human review for instructional quality and technical accuracy.
- Design and build artificial-intelligence-supported practice and coaching experiences, such as artificial-intelligence role-play and conversational simulations, tied to readiness frameworks and scorecards.
- Create a repeatable process for sourcing and transforming subject-matter-expert input, product documentation, and recordings into learner-ready material using artificial-intelligence agents and artificial-intelligence-assisted authoring tools.
- Familiarity with channel enablement programs in the cybersecurity space.
- Experience designing for diverse global audiences, including localization workflows.
- Experience applying artificial-intelligence-assisted learning, content operations, or authoring tools to improve development speed, personalization, and content quality at scale.
- Familiarity with governance practices for artificial-intelligence-assisted content, including source traceability, review standards, and brand fidelity.
- Experience with Asana, Monday.com, Smartsheet, Jira, or equivalent project-management tools.
- Experience with Docebo, Mindtickle, Seismic, HubSpot, or equivalent learning platforms.
Sophos provides cybersecurity solutions for businesses, covering endpoint, network, and mobile security, with a cloud-based management console called Sophos Central. Its products protect devices, networks, and mobile endpoints, and include Managed Detection and Response (MDR) where experts monitor and respond to threats. The company differentiates itself by offering an integrated, single-vendor security stack—covering endpoint, network, and mobile protection—managed from one platform. Its goal is to help organizations prevent digital threats while simplifying security operations.
Company Size
5,001-10,000
Company Stage
Acquired
Total Funding
$208.6M
Headquarters
Abingdon, United Kingdom
Founded
1985
Get referred to Sophos
See people who can refer or advise you
Simplify's Take
What believers are saying
- On September 3, 2026, Sophos launched Exploit Path Verification for Managed Risk.
- OpenAI Daybreak and Anthropic Project Glasswing accelerate AI defenses and vulnerability remediation.
- Dicker Data expanded Sophos distribution across Australia and New Zealand on August 24, 2026.
What critics are saying
- Sophos faces a March 2027, $2.1 billion term-loan refinancing after failed private-credit efforts.
- Thoma Bravo offers lender concessions, not equity, signaling sponsor reluctance and balance-sheet strain.
- If refinancing fails, Sophos enters a restructuring before March 2027.
What makes Sophos unique
- On August 15, 2026, Sophos Fusion unified SIEM, XDR, and MDR on one data layer.
- Sophos MDR serves 40,000 customers and closes 52% of cases end-to-end by AI.
- Nozomi Networks integration brings OT telemetry into Fusion across IT and industrial environments.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Health Insurance
Disability Insurance
Remote Work Options
Wellness Program
Mental Health Support
Growth & Insights and Company News
6 month growth
↑ 14%1 year growth
↑ 14%2 year growth
↑ 14%Sophos to showcase ai-native cybersecurity defense at GISEC 2026. Posted on September 8, 2026 Company to spotlight Sophos Fusion and its expanding portfolio of AI-powered security, XDR, SIEM and MDR capabilities Dubai, United Arab Emirates, September 8, 2026, ZEX PR WIRE - Sophos, a global cybersecurity leader, has announced its participation at GISEC Global 2026 (16-18 September) at Dubai Exhibition Centre, Expo City. The company will showcase how organizations can strengthen cyber resilience in an AI-enabled threat landscape where attacks are becoming faster, more coordinated, and difficult to manage with disconnected security tools. The focus will be on Sophos Fusion, its AI-native cybersecurity defense system designed to move businesses beyond fragmented security stacks. Attackers are now using AI and automation to move faster, scale campaigns, and operate across multiple parts of an organization's environment. Disconnected tools cannot keep pace with threats that move this way. Sophos' 2026 State of Ransomware report found that 79% of ransomware attacks globally involve an identity-based initial access vector, with malicious email and phishing accounting for 26% of attacks, followed by exploited vulnerabilities at 24% and compromised credentials at 23%. In the UAE, organizations that suffered ransomware attacks reported an average recovery cost of US$665,000. These findings reinforce the need for a system that can see the whole picture and respond as one. Sophos Fusion, a modern cybersecurity defense system, is designed to close that gap by preventing, detecting, investigating, and responding at AI speed, while keeping human expertise and accountability at the center of security operations. This shift is particularly relevant in the Middle East, where rapid digital transformation and AI adoption are creating new opportunities as well as new security challenges. "As AI agents gain greater access to sensitive systems and data, enterprises need security and governance to keep pace with innovation. This demands a coordinated, AI-native defense system that can respond at the speed and scale of today's threats," said Harish Chib, Vice President for Emerging Markets, Middle East & Africa at Sophos. "GISEC is an important platform for us to bring these conversations together, engage with customers, partners, policymakers and security leaders, and reinforce our commitment to helping organizations build the resilience they need for the AI era." At GISEC 2026, Sophos will also highlight how it is applying agentic AI to strengthen security operations. Within Sophos MDR, agentic workflows can resolve a significant proportion of cases end-to-end using AI, while human analysts remain responsible for business judgment, context and complex investigations. This enables high-confidence tasks to be handled at machine speed while maintaining human oversight and reducing the operational burden on security teams. Building on this approach, Sophos is advancing the defensive use of frontier AI through the OpenAI Daybreak Cyber Partner Program and Anthropic's Project Glasswing. These collaborations enable Sophos to integrate advanced AI capabilities into trusted security workflows, with analysts and controls in the loop, to accelerate threat investigation, strengthen detections and support faster vulnerability remediation. Through Project Glasswing, Sophos has access to Claude Mythos 5, an advanced frontier model that is not publicly available, helping identify and remediate software vulnerabilities before they can be exploited by AI-driven attackers. Visitors can meet the Sophos team and explore its latest AI-native cybersecurity capabilities at Hall 4, Booth D100 during GISEC Global 2026. About Sophos Sophos, a global cybersecurity leader, defends more than 625,000 organizations worldwide with Sophos Fusion, the industry's first and most complete AI-native cybersecurity defense system: a single, connected architecture where every control point operates as one. Powered by agentic AI and elite human expertise, Sophos detects, investigates, and neutralizes threats before they become business-disrupting events. Working alongside a global ecosystem of managed service providers, resellers, and technology partners, Sophos compounds intelligence from every threat encountered and every environment defended to make every customer's defense stronger than the last. Sophos is headquartered in Oxford, U.K. More information is available at www.sophos.com. Company-submitted announcement. Visit their site for details.
Sophos to bring OpenAI GPT cyber models into Managed Risk offering, helping defenders validate exploit paths. Sep. 3, 2026, 05:02 PM OXFORD, United Kingdom, Sept. 03, 2026 (GLOBE NEWSWIRE) - Sophos, a global cybersecurity leader, today announced Exploit Path Verification (EPV), a new capability that will be built into Sophos Managed Risk to help security teams better prioritize and manage exploitable vulnerabilities in their environment. The capability will be built with OpenAI's GPT cyber models through the Daybreak Defense Network, to return verified, evidence-backed verdicts that give defenders the clarity they need to fix the exposures that matter first. Availability will be announced at a later date. Security teams face a widening gap between the vulnerabilities they can find and the ones they can fix. Scanners surface thousands of exposures and severity scores and rank them, but a severity score cannot tell whether a critical flaw sits behind a control that blocks it, or whether two low-severity findings chain into the path that leads to a breach. As a result, security teams often patch by generic score, rather than by whether an attacker could reach and use a flaw in their specific environment. Sophos is designing EPV to close that gap. It is being built to reason over asset and patch state, endpoint protection policy, network reachability, identity and privilege facts, and known exploit availability, and returns a clear evidence-backed exploitability verdict: * Confirmed Exploitable * Blocked by a Control * Not Reachable * Insufficient Evidence EPV will also be designed to identify chained paths where multiple lower-severity findings combine into one exploitable route, assess whether a control blocks a technique class or only a common public proof of concept, and draft remediation text ready for a ticket. The capability will be advisory and additive by design. Every verdict is labeled as AI-generated with its evidence visible, and Sophos analysts review the results. "One of the most common challenges we hear from security teams today is the volume of findings they need to sift through, and the lack of clarity of which findings matter most, or in other words, put them at greatest risk," said John Peterson, chief technology officer, Sophos. "Exploit Path Verification is being built to make it clear what in their environment is reachable by an attacker, with the evidence to prove it, so they fix what counts first." EPV extends Sophos' work with OpenAI. Through the OpenAI Daybreak Defense Network (formerly OpenAI Daybreak Cyber Partner Program), which Sophos joined in June 2026, the company brought frontier cyber models into MDR investigation, advisory assessments, and workflows that help customers discover, validate, and remediate exposure. EPV will build on that work inside a product customers already run. OpenAI's GPT cyber models provide frontier reasoning to help assess exploitability. Sophos supplies the environment-specific evidence and product controls, and its analysts review the results delivered to customers. "Our goal through the OpenAI Daybreak Defense Network is to give defenders the advantage of frontier AI, safely," said McCall McIntyre, Head of Global Cyber Partnerships, OpenAI. "Sophos has been a thoughtful partner since joining the program, and Exploit Path Verification is a clear example of frontier reasoning applied to a real defensive problem, with the guardrails that responsible deployment demands." Sophos defends more than 625,000 organizations worldwide, including 40,000 managed detection and response (MDR) customers across enterprise, mid-market, and commercial segments, delivered through one of the industry's largest partner ecosystems. That reach is central to EPV's purpose. Verified exploitability should not be a capability reserved for the largest security teams with the deepest budgets. EPV is in development for enterprise and mid-market business customers of Sophos Managed Risk. Sophos will announce availability, including early access and general availability timing, at a later date. ABOUT SOPHOS Sophos, a global cybersecurity leader, defends more than 625,000 organizations worldwide with Sophos Fusion, the industry's first and most complete AI-native cybersecurity defense system: a single, connected architecture where every control point operates as one. Powered by agentic AI and elite human expertise, Sophos detects, investigates, and neutralizes threats before they become business-disrupting events. Working alongside a global ecosystem of managed service providers, resellers, and technology partners, Sophos compounds intelligence from every threat encountered and every environment defended to make every customer's defense stronger than the last. Sophos is headquartered in Oxford, U.K. More information is available at www.sophos.com. Markets Insider and Business Insider Editorial Teams were not involved in the creation of this post. Sponsored Financial Content
The next chapter of Sophos Fusion starts now. Sophos XDR Powered by Secureworks, enhanced Sophos MDR, and Sophos Next-Gen SIEM are now available, giving you more ways to grow customer relationships and strengthen security outcomes. August 31, 2026 Last month, Sophos Group introduced Sophos Fusion and shared its vision for the future of cyber defense. Today, Sophos Group is excited to announce the next significant milestone in that journey: Sophos XDR Powered by Secureworks, Sophos Next-Gen SIEM, and an expanded Sophos MDR service, are now generally available. Powered by Sophos Fusion, these new and enhanced offerings create fresh opportunities to help customers strengthen security operations, defend against AI-driven threats, meet compliance requirements, and reduce complexity. What's available now. The following are now generally available for new term (non-MSP) customers: * Sophos XDR Powered by Secureworks Delivering stronger detections, embedded threat intelligence, expanded integrations, automation playbooks (SOAR), Sophos Email Monitoring System (EMS), a significantly enhanced analyst experience, and more. * Sophos MDR Now expanded with broader integrations, embedded threat intelligence, Sophos EMS, a redesigned analyst workspace, continuous agentic threat hunting through the world's largest Agentic SOC, and more. * Sophos Next-Gen SIEM A new compliance-focused add-on that extends Sophos XDR and Sophos MDR with long-term data retention, compliance reporting, and support for custom integrations. Existing customer upgrades are underway. Sophos Group has also started a phased upgrade program for existing Sophos EDR, Sophos XDR, and Sophos MDR customers. Customers will receive in-product notifications before their upgrade takes place. As customers are upgraded to the enhanced solutions, they'll gain access to new capabilities included as part of their existing subscription. This creates a valuable opportunity to reconnect with customers, demonstrate the additional value they're receiving, and explore ways to further strengthen their security operations. Sophos AI Defense EAP is now open. Sophos AI Defense helps organizations gain visibility and control over AI use across their environments, creating new opportunities to engage customers on AI governance, AI risk management, and secure AI adoption. Learn more about Sophos AI Defense Customers running the enhanced Sophos EDR, Sophos XDR, or Sophos MDR solutions can now join the Sophos AI Defense Early Access Program (EAP) ahead of general availability coming soon. Identify customers interested in securing AI usage and encourage them to join the EAP. The partner opportunity. The latest offerings, enabled by Sophos Fusion, create opportunities across both new and existing customer relationships. Partners can position enhanced Sophos XDR and Sophos MDR capabilities, helping organizations strengthen security operations with broader visibility, deeper integrations, and enhanced threat detection and response. Sophos Next-Gen SIEM also creates new opportunities to address customer requirements for compliance, long-term data retention, and custom integrations, while increasing the value of Sophos XDR and Sophos MDR deployments. And Sophos AI Defense gives you a timely way to extend customer conversations into securing AI adoption across the business. Potential customer conversations include: * Moving from Sophos Endpoint or Sophos EDR to Sophos XDR for broader visibility and response. * Upgrading Sophos Endpoint, Sophos EDR, or Sophos XDR to Sophos MDR for 24/7 protection through the world's largest Agentic SOC. * Extending Sophos XDR or Sophos MDR with Sophos Next-Gen SIEM to address compliance reporting and long-term data-retention requirements. * Introducing customers to the new Sophos AI Defense solution, built to help them see, control, and secure AI across their environment. What partners need to know. This GA release is for term (non-MSP) customers only. MSP availability is planned for next quarter, with dedicated communications to follow. * New term customers and new trials will now be provisioned on the enhanced Sophos EDR, Sophos XDR, and Sophos MDR solutions, on the new Sophos Fusion architecture. * Continue to sell existing Sophos EDR, Sophos XDR, and Sophos MDR SKUs. * Sophos MDR service tiers have been renamed. Sophos MDR Essentials is now Sophos MDR, and Sophos MDR Complete is now Sophos MDR Plus. SKU codes remain unchanged. * The Sophos Next-Gen SIEM add-on is now available for customers on the enhanced Sophos XDR and Sophos MDR solutions. Partner resources. Ready to start the conversation with customers? Visit the Sophos Partner Portal to access the latest Sophos Fusion resources, along with updated sales, marketing, and enablement materials for the new and enhanced solutions. Sophos Fusion is moving from vision to customer value. The new and enhanced solutions are available now, the customer upgrade journey is underway, and partners have more ways to grow relationships, increase value, and help customers strengthen security operations. Together, let's go win with Sophos Fusion.
Dicker Data adds Sophos to boost cyber security offering. 24 Aug 2026 2 mins Demand for cybersecurity continues to grow. Dicker Data is set to expand its cyber security portfolio and providing partners across Australia and New Zealand with Sophos solutions. The agreement will see Dicker Data distribute the vendor's cyber security portfolio across endpoint, network, email and security operation products. The distributor will also support the continued growth of Sophos' MSP business and services portfolio. This includes managed detection and response (MDR), advisory services and incident response. Through the partnership, Dicker Data will provide local sales, technical, enablement and go-to-market support to help partners build their Sophos capability, as well as help them to develop cyber security opportunities and grow sustainable security practices. Dicker Data general manager - software A/NZ Pennie Stevens said the addition of Sophos reflects the distributor's continued investment in cyber security as a strategic growth area for partners. "Cyber security continues to be one of the most important priorities for our partners and their customers, and Sophos brings a comprehensive and highly relevant portfolio to help address that need," she said. "For our partners, this creates new opportunities to grow their security practice, expand managed services offerings and support customers." The appointment of Dicker Data brings additional reach support Sophos' next phase of growth across A/NZ, said Sophos director channel and commercial sales A/NZ Marina Brook. "As our business continues to evolve, so does the opportunity for our partners," she said. "Together with Dicker Data, we want to expand the Sophos partner ecosystem, create new opportunities across the market and help our partners." Don't miss a thing Join the Reseller News mailing list for daily news on the IT channel, covering business, technology, products, and services. Community Editor
Thoma Bravo considers lender-friendly terms in $2bn Sophos refinancing. * August 19, 2026 * - 9:26 am Thoma Bravo-backed cybersecurity company Sophos is turning to its existing leveraged-loan lenders as it seeks to refinance or extend more than $2bn of debt, after attempts to secure private credit financing failed to gain traction, according to a report by Bloomberg. The company could offer investors more attractive terms, including a higher interest coupon, additional amortisation and tighter financial covenants, according to people familiar with the discussions. A transaction could be launched as soon as next month, although the terms remain under negotiation and could change. Thoma Bravo, which acquired Sophos in 2020, has indicated that it does not intend to provide additional equity capital as part of the refinancing, despite some lenders raising concerns about the impact of artificial intelligence on the software business, the people said. Sophos has been working for several months on the refinancing of a $2.1bn term loan due in March 2027. Several private credit investors previously declined to participate despite being offered a substantial increase in yield. The company is now hoping that improved operating performance will help attract support from the syndicated loan market. Sophos reported 6% year-on-year growth in annual recurring revenue for the three months to the end of June, while adjusted EBITDA increased 10% to around $120m. Its term loan has also recovered from levels seen during the sharp sell-off in software credit earlier this year. The debt was recently trading at about 96.88 cents on the dollar, compared with 92.69 cents in February. The refinancing represents another important test for Thoma Bravo, one of private equity's largest software-focused investors, as lenders continue to scrutinise the sector's vulnerability to AI-driven disruption. The firm was forced to offer significant concessions to lenders last month to complete a roughly $5bn refinancing for another portfolio company, Proofpoint. Thoma Bravo's software exposure has also come under pressure following the loss of control of customer-experience software provider Medallia, after creditors took over the company earlier this year. Sophos' effort to return to the broadly syndicated loan market therefore comes at a sensitive point for the sponsor and the wider software buyout sector. The willingness of lenders to accept revised terms without fresh sponsor equity is likely to be closely watched as investors assess refinancing risk across highly leveraged technology companies.