Security Analyst II, CrowdStrike Next-Gen SIEM

Cyderes; Bengaluru; On-site; INR 900,000 - 1,800,000; Full time

Benefits offered by this job

Medical Insurance

Life Insurance

Retirement match

Hybrid work model

PTO and leave

Professional development

Job summary

Cyderes is seeking a Security Analyst II to be embedded within a client's security operations team. You will own incident management and response, coordinating with internal stakeholders and CrowdStrike MDR to triage, investigate, and communicate outcomes.

Responsibilities include deep-dive investigations across endpoints, networks, email, and cloud, documenting actions, and guiding containment and recovery efforts.

Qualifications

• Experience in SOC, IR, threat hunting, or cybersecurity operations.
• Experience working in enterprise client environments with MDR providers.
• Strong understanding of IR processes and lifecycle management.
• Familiarity with CrowdStrike platforms and email security tools.

Responsibilities

• Act as the primary security incidents contact and coordinate response.
• Triage, investigate, and respond to security events using MDR outputs.
• Conduct deep-dive investigations across endpoints, networks, email, and cloud.
• Maintain incident records and communicate status throughout lifecycle.
• Collaborate with security service providers and client teams.

Skills

Client-facing

Stakeholder management

Incident response

Threat hunting

Security operations

Scripting (PowerShell, Python, KQL, or

Education

Security certifications

Tools

CrowdStrike Next Gen SIEM

CrowdStrike EDR

Proofpoint

Palo Alto

MITRE ATT&CK framework knowledge

Job description

We Help the World Be Everyday Ready™

Today's threatscape is relentless. So are we. At Cyderes, we build practical Identity & Access Management (IAM), Exposure Management, and risk programs, helping organizations stop active threats fast with Managed Detection & Response (MDR) that integrates with existing tools. Powering it all is Meridian, our entity fabric that connects identities, assets, and access into one trusted reality. Augmented by AI and driven by experienced operators, our tireless global team arms organizations with the people, platforms, and perspectives they need to conquer whatever tomorrow throws their way.

Great Place to Work® Certified™

About the Job:

The Security Analyst II serves as a dedicated security resource embedded within the client's security operations environment provided by Cyderes. This role acts as the primary point of contact for security incident management and response activities, working closely with the client's internal stakeholders and security vendors. The analyst will operate within the client's security tools and processes, leveraging Managed Detection and Response (MDR) services provided by MDR Service Provider (CrowdStrike) while coordinating response actions, investigations, and communications across multiple security functions. Success in this role requires a client-first mindset, strong ownership of security incidents, and the ability to collaborate effectively with external service providers and internal client teams.

Responsibilities:

• Serve as a dedicated Security Analyst supporting the client's security operations and acting as an extension of the client's security team.
• Perform security event triage, investigation, and response activities utilizing alerts and findings generated by the MDR service providers.
• Act as the primary point of contact for all security incidents and coordinate response efforts across internal and external stakeholders.
• Review, validate, and take appropriate response actions based on incidents escalated to client.
• Conduct deep-dive investigations across endpoint, network, email, cloud, and identity platforms to determine the scope and impact of security incidents.
• Manage incident communications, documentation, and status updates throughout the incident lifecycle.
• Coordinate containment, eradication, and recovery activities with client IT and security teams.
• Work closely with Firewall Management teams to implement and validate security controls required during incident response activities.
• Coordinate with Email Security teams to investigate phishing threats, malicious email campaigns, and email-based compromises.
• Perform proactive threat hunting activities and identify indicators of compromise across the client's environment.
• Map observed threats and client use cases to the MITRE ATT&CK framework and provide recommendations to enhance security posture.
• Collaborate security service providers to ensure investigation and resolution of security events.
• Maintain detailed incident records, lessons learned, and recommendations for improving detection and response capabilities.
• Develop trusted relationships with client stakeholders and provide security guidance aligned with business objectives.
• Stay current with emerging threats, attack techniques, and industry best practices.

Requirements:

• 3+ years of experience in Security Operations Center (SOC), Incident Response, Threat Hunting, or Cybersecurity Operations roles.
• Experience working directly within client environments or as a dedicated security resource supporting enterprise customers.
• Strong understanding of Incident Response processes and lifecycle management.
• Experience working with SIEM solutions, preferably CrowdStrike Next Gen SIEM for log analysis, correlation, and investigation.
• Experience working with Endpoint Detection and Response (EDR) solutions, preferably CrowdStrike EDR.
• Experience collaborating with Managed Detection and Response (MDR) providers and managing escalations from external security service providers.
• Strong understanding of CrowdStrike Falcon platform and security operations workflows.
• Experience investigating phishing, malware, ransomware, account compromise, and insider threat incidents.
• Familiarity with email security platforms such as Proofpoint and common email threat vectors.
• Understanding of firewall technologies, such as PaloAlto, network security controls, and change management processes related to incident response.
• Strong knowledge of the MITRE ATT&CK framework and adversary tactics, techniques, and procedures (TTPs).
• Coordinate with multiple teams and drive incident response activities to completion.
• Strong customer-facing and stakeholder management experience.
• Think from a client ownership perspective rather than a service provider perspective, taking accountability for security outcomes and business risk.
• Relevant certifications such as Security+, CEH, SC-200, GCIH, GCFA, or equivalent security certifications.
• Basic scripting or automation experience (PowerShell, Python, KQL, SPL).

WHY CYDERES?

Benefits that go beyond the basics, we support our people so they can do their best work.

Medical Insurance - Employee + dependents covered

Life Insurance -Protection for what matters most

Retirement Match Program - We invest in your future

Hybrid Work Model -2–3 days in office

Maternity & Paternity Leave-Time for the moments that matter

Paid Time Off -PTO+ sick & casual leave

Bereavement & Volunteer Time - Giveback to your community

Professional Development -Reimbursement program

LinkedIn L& D Platform -Thousands of coursesat your fingertips

Mobile Phone Reimbursement -Stay connected, on us

Cyderes i s an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to race, religion, color, sex, age, disability, sexual orientation, genetic information, national origin, or veteran status.

Note: This job posting is intended for direct applicants only. We request that outside recruiters do not contact us regarding this position.