Security Analyst II

Lucidum; Orlando (FL); Hybrid; USD 85,000 - 120,000; Full time

Benefits offered by this job

Medical Insurance

Life Insurance

Retirement Match Program

Hybrid Work Model

Maternity & Paternity Leave

Paid Time Off

Bereavement & Volunteer Time

Professional Development

LinkedIn L&D Platform

Mobile Phone Reimbursement

Job summary

Cyderes is seeking an experienced Managed Services Security Analyst II to join our Cyber Defense team. The role focuses on monitoring, investigating, and responding to threats across complex enterprise client environments.

You will conduct advanced investigations, leverage leading security technologies, and use MITRE ATT&CK to identify threats and provide actionable recommendations. The role requires strong expertise in security operations, incident response, and threat hunting, with

Qualifications

• 3+ years of progressive experience in cybersecurity, security operations, incident response, or related IT security role.
• Hands-on experience with EDR platforms like CrowdStrike Falcon, SentinelOne, or Defender for Endpoint.
• Strong experience with at least one leading SIEM (Microsoft Sentinel, Splunk, Elastic, IBM QRadar, Chronicle).
• Knowledge of MITRE ATT&CK framework and mapping detections to tactics.

Responsibilities

• Perform advanced security triage and investigations across endpoint, server, network, and cloud environments.
• Conduct proactive threat hunting to identify and isolate suspicious activity within client environments.
• Lead deep-dive investigations into security incidents, identifying root causes and business impact.
• Analyze security alerts, logs, and telemetry using SIEM/EDR and other monitoring platforms.
• Map adversary tactics using MITRE ATT&CK and identify gaps in detection coverage.
• Coordinate incident investigations and escalations with remediation recommendations.
• Review network traffic and system logs to identify indicators of attack and compromise.
• Develop, maintain, and improve security runbooks and procedures.
• Participate in after-hours on-call rotation as Incident Controller when required.
• Scope and assess client security incidents with timely communication and escalation.

Skills

Security operations

Incident response

Threat hunting

MITRE ATT&CK

EDR expertise

SIEM proficiency

MDR/MSSP experience

SOAR

Cloud security monitoring

Tools

CrowdStrike Falcon

SentinelOne

Microsoft Defender for Endpoint

Microsoft Sentinel

Splunk

Elastic Security

IBM QRadar

Google Chronicle

Job description

We Help the World Be Everyday Ready™

Today's threatscape is relentless. So are we. At Cyderes, we build practical Identity & Access Management (IAM), Exposure Management, and risk programs, helping organizations stop active threats fast with Managed Detection & Response (MDR) that integrates with existing tools. Powering it all is Meridian, our entity fabric that connects identities, assets, and access into one trusted reality. Augmented by AI and driven by experienced operators, our tireless global team arms organizations with the people, platforms, and perspectives they need to conquer whatever tomorrow throws their way.

Great Place to Work® Certified™

About the Role:

Cyderes is seeking an experienced Managed Services Security Analyst II to join our Cyber Defense team. This role is responsible for monitoring, investigating, and responding to security threats across complex enterprise client environments.

The ideal candidate will have strong technical expertise in security operations, threat hunting, incident response, and security analysis. This individual will conduct advanced investigations, leverage industry-leading security technologies, and utilize the MITRE ATT&CK framework to identify threats, assess security posture, and provide actionable recommendations to clients.

The Security Analyst II will collaborate with internal security teams and clients to deliver high-quality security outcomes while representing the Cyderes brand through professionalism, technical expertise, and effective communication.

Hybrid model with 2-3 days in office.

Responsibilities

• Perform advanced security triage and investigations across endpoint, server, network, and cloud environments.
• Conduct proactive threat hunting to identify, investigate, and isolate suspicious or malicious activity within client environments.
• Lead deep-dive investigations into security incidents, identifying root causes, indicators of compromise (IOCs), and potential business impact.
• Analyze security alerts, logs, and telemetry using SIEM, EDR, and other security monitoring platforms.
• Utilize the MITRE ATT&CK framework to map adversary tactics and techniques, assess detection coverage, and identify gaps in client security posture.
• Coordinate incident investigations and escalations, providing technical analysis and remediation recommendations.
• Review network traffic, endpoint artifacts, and system logs to identify indicators of attack and compromise.
• Develop, maintain, and improve security documentation, investigation procedures, and incident response runbooks.
• Participate in an after-hours on-call rotation, serving as an Incident Controller when required.
• Scope and assess client security incidents, ensuring timely investigation, communication, and escalation.

Requirements

• 3+ years of progressive experience in cybersecurity, security operations, incident response, or a related IT security role.
• Strong experience conducting security investigations, incident triage, threat hunting, and advanced security analysis.
• Hands‑on experience with Endpoint Detection and Response (EDR) platforms such as CrowdStrike Falcon, SentinelOne, or Microsoft Defender for Endpoint.
• Advanced knowledge of at least one leading SIEM platform, including Microsoft Sentinel, Splunk, Elastic Security, IBM QRadar, or Google Chronicle.
• Strong understanding of the MITRE ATT&CK framework, including mapping security detections to adversary tactics and techniques.
• Experience analyzing security events, identifying indicators of compromise, and investigating malicious activity across enterprise environments.
• Previous experience working within a Managed Detection & Response (MDR) provider, Managed Security Services Provider (MSSP), or enterprise Security Operations Center (SOC).
• Experience with Security Orchestration, Automation, and Response (SOAR) platforms and security workflow automation.
• Familiarity with cloud security monitoring and incident investigations across Microsoft Azure, AWS, or Google Cloud.
• Experience developing or tuning SIEM detection rules, security use cases, and threat hunting queries.
• Experience supporting client-facing incident investigations and communicating technical findings to security stakeholders.
• Knowledge of vulnerability management, threat intelligence, and proactive security monitoring techniques.

WHY CYDERES?

• Medical Insurance - Employee + dependents covered
• Life Insurance - Protection for what matters most
• Retirement Match Program - We invest in your future
• Hybrid Work Model - 2-3 days in office
• Maternity & Paternity Leave - Time for the moments that matter
• Paid Time Off - PTO + sick & casual leave
• Bereavement & Volunteer Time - Give back to your community
• Professional Development - Reimbursement program
• LinkedIn L&D Platform - Thousands of courses at your fingertips
• Mobile Phone Reimbursement - Stay connected, on us

Cyderes is an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to race, religion, color, sex, age, disability, sexual orientation, genetic information, national origin, or veteran status.

Note: This job posting is intended for direct applicants only. We request that outside recruiters do not contact us regarding this position.