Detection Operations Advisor: SIEM & Threat Tuning

Cyderes; United Kingdom; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Medical Insurance

Life Insurance

Retirement Match Program

Hybrid Work Model

Maternity & Paternity Leave

Paid Time Off

Bereavement & Volunteer Time

Professional Development

LinkedIn L&D Platform

Mobile Phone Reimbursement

Job summary

Cyderes in the United Kingdom is seeking an Operations Advisor to be the primary technical owner of detection outcomes for assigned clients. You will improve detection quality and identify gaps in coverage through expert advisory and hands-on detection engineering.

You will lead the technical account relationship and deliver measurable outcomes that clients can see and trust, reporting to Manager, Cyber Defense Operations.

Qualifications

• 3–5 years of experience in detection engineering or security operations.
• Experience tuning detection rules in production environments.
• Experience in a managed security services or MSSP environment serving multiple clients.
• Proficiency in SIEM query languages (SPL, KQL, YARA-L).
• Familiarity with SOAR platforms and automation-assisted detection workflows.
• Experience with threat hunting methodologies and retrohunt programs.
• Relevant certifications: GCIA, GCIH, GCDA, or SIEM vendor certifications.

Responsibilities

• Own and maintain detection coverage aligned to the Cyderes Rule Set.
• Lead tuning and optimization of detection rules across SIEM platforms.
• Identify, prioritize, and remediate detection gaps.
• Be a trusted advisor on detection strategy and operational effectiveness.
• Identify detection improvements based on real-world incident insights.
• Partner with SOC and DFIR teams during escalations.
• Oversee the technical account relationship for assigned clients.
• Lead technical cadence calls focused on detection performance, gaps, and outcomes.
• Translate technical findings into risk-based, business-relevant insights.
• Guide clients on prioritization of improvements based on detection impact.

Skills

Detection engineering

Security operations

SIEM platforms

Threat hunting

MSSP experience

SOAR familiarity

SIEM query languages

Tools

Splunk

Microsoft Sentinel

Chronicle

Job description

Cyderes in the United Kingdom is seeking an Operations Advisor to be the primary technical owner of detection outcomes for assigned clients. You will improve detection quality and identify gaps in coverage through expert advisory and hands-on detection engineering.

You will lead the technical account relationship and deliver measurable outcomes that clients can see and trust, reporting to Manager, Cyber Defense Operations.