We Help the World Be Everyday Ready™
Today's threatscape is relentless. So are we. At Cyderes, we build practical Identity & Access Management (IAM), Exposure Management, and risk programs, helping organizations stop active threats fast with Managed Detection & Response (MDR) that integrates with existing tools. Powering it all is Meridian, our entity fabric that connects identities, assets, and access into one trusted reality. Augmented by AI and driven by seasoned operators, our tireless global team arms organizations with the people, platforms, and perspectives they need to conquer whatever tomorrow throws their way.
🏆 Great Place to Work® Certified™ | United States | Canada | United Kingdom | India
About the Role:
This role combines advanced technical expertise with leadership responsibilities, including coaching analysts, coordinating major incident response activities, and partnering with Security Engineering, Threat Intelligence, Detection Engineering, and Customer Success teams. The ideal candidate has extensive experience investigating endpoint, identity, cloud, and network threats within a 24x7 SOC or MDR environment.
Responsibilities
Lead complex security investigations involving ransomware, phishing, business email compromise (BEC), insider threats, credential theft, privilege escalation, lateral movement, cloud attacks, and advanced persistent threats (APTs).
Serve as the technical escalation point for Tier I and Tier II Security Analysts, providing mentorship, coaching, and guidance during high-priority incidents.
Perform advanced incident detection, triage, containment, eradication, recovery, and root cause analysis across endpoint, network, cloud, and identity environments.
Monitor, investigate, and respond to security alerts using SIEM, EDR/XDR, SOAR, and threat intelligence platforms.
Conduct proactive threat hunting using the MITRE ATT&CK Framework, Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and behavioral analytics.
Develop and optimize detection rules, correlation searches, dashboards, and automated response playbooks to improve detection accuracy and reduce false positives.
Analyze security telemetry across Windows, Linux, Active Directory, Microsoft Entra ID, Microsoft 365, Azure, AWS, and network infrastructure.
Utilize enterprise security tools including Microsoft Sentinel, Splunk Enterprise Security, IBM QRadar, Elastic Security, CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, Cortex XDR, VMware Carbon Black, Microsoft Defender XDR, CyberArk, SailPoint, Okta, and Microsoft Entra ID.
Investigate endpoint, identity, cloud, email, and network-based attacks using forensic data and security logs.
Partner with Detection Engineering, Threat Intelligence, Security Engineering, and Customer Success teams to continuously improve MDR capabilities.
Requirements
6–10+ years of experience in Security Operations Center (SOC), Managed Detection & Response (MDR), Incident Response, Threat Hunting, and Cyber Defense.
Experience serving as a technical lead and mentoring Tier I and Tier II Security Analysts.
Deep understanding of the MITRE ATT&CK Framework, Cyber Kill Chain, and the Incident Response lifecycle.
Strong knowledge of Windows internals, Active Directory, Microsoft Entra ID, and enterprise authentication.
Solid understanding of network protocols including DNS, HTTP/S, SMB, LDAP, Kerberos, and TCP/IP.
Experience investigating sophisticated endpoint, cloud, identity, and network-based cyber threats.
Hands-on experience with SIEM, EDR/XDR, SOAR, and threat intelligence platforms.
Strong analytical, troubleshooting, and problem-solving skills with the ability to lead complex investigations.
Ability to analyze indicators of compromise (IOCs), attacker tactics, techniques, and procedures (TTPs), and provide actionable remediation recommendations.
Excellent written and verbal communication skills, including the ability to communicate technical findings to both technical and non-technical stakeholders.
WHY CYDERES?
Benefits that go beyond the basics, we support our people so they can do their best work.
✔ Medical Insurance - Employee + dependents covered
✔ Life Insurance - Protection for what matters most
✔ Retirement Match Program - We invest in your future
✔ Hybrid Work Model - 2–3 days in office
✔ Maternity & Paternity Leave - Time for the moments that matter
✔ Paid Time Off - PTO + sick & casual leave
✔ Bereavement & Volunteer Time - Give back to your community
✔ Professional Development - Reimbursement program
✔ LinkedIn L&D Platform - Thousands of courses at your fingertips
✔ Mobile Phone Reimbursement - Stay connected, on us
Cyderes is an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to race, religion, color, sex, age, disability, sexual orientation, genetic information, national origin, or veteran status.
Note: This job posting is intended for direct applicants only. We request that outside recruiters do not contact us regarding this position.
