Security Analyst II: Guardian

OpenKrill; United States; Remote; USD 85,000 - 130,000; Full time

Job summary

Cyderes is seeking a dedicated Security Analyst to join our security operations team, monitoring, investigating, and responding to security events across customer environments while collaborating with internal security teams.

The ideal candidate has hands-on experience with SIEM, EDR, and cloud platforms, plus scripting skills and a solid understanding of MITRE ATT&CK. You will document findings and drive improvements in detection and response.

Qualifications

• Experience in SOC/MSSP/MDR environments.
• Experience with SIEM/log-management platforms (Splunk, Elastic Stack, MS Sentinel, Google Security Operations, etc.).
• Experience with EDR technologies such as CrowdStrike, Defender, SentinelOne, etc.
• Experience with cloud environments (AWS, Azure, GCP).
• Scripting or development with Python, PowerShell, or JavaScript.
• Advanced system administration with Windows PowerShell and config management tools.
• Experience with SOAR technologies (Cortex XSOAR, Splunk SOAR, etc.).
• Familiarity with incident response, threat hunting, forensics, or malware analysis.
• Cybersecurity certifications are a plus.

Responsibilities

• Monitor security alerts and events across the Cyderes security platform and customer environments.
• Analyze, investigate, and respond to security events to drive effective customer outcomes.
• Perform initial triage and determine severity, scope, and potential impact of incidents.
• Investigate suspicious activity across endpoints, networks, identity systems, cloud environments, and security technologies.
• Escalate confirmed or high-risk incidents to appropriate incident response or senior security resources.
• Participate in the incident response process and assist with containment and remediation.
• Review telemetry, logs, alerts, and data sources to identify malicious or abnormal behavior.
• Maintain documentation of investigations, findings, actions taken, and customer communications.
• Perform day-to-day security tasks and ensure processes and service expectations are met.
• Communicate with customers and internal stakeholders regarding events and recommended actions.
• Identify opportunities to improve detection capabilities, processes, and automation.
• Collaborate with Managed Detection & Response, Threat Hunting, Incident Response, Engineering, and Customer Success teams.

Skills

SOC experience

SIEM knowledge

EDR technologies

Cloud platforms

PowerShell

MITRE ATT&CK

Incident response

Threat hunting

Automation / SOAR

Tools

Splunk

Elastic Stack

Microsoft Sentinel

CrowdStrike

Azure

Google Cloud Platform

Job description

About the Role:

Cyderes is looking for a dedicated and analytical Security Analyst to join our security operations team. This role is responsible for monitoring, investigating, and responding to security events across customer environments while helping drive effective security outcomes.

The ideal candidate will have a strong understanding of how networks, endpoints, servers, identity systems, and cloud environments interact within modern enterprise environments. A background in networking, system administration, application development, or security operations is highly beneficial.

Security Analysts at Cyderes work closely with customers, internal security teams, and other technical stakeholders to investigate threats, support incident response activities, and continuously improve security operations.

This is an excellent opportunity for someone who enjoys solving complex cybersecurity problems in a collaborative environment. Critical thinking, technical curiosity, a customer-first mindset, and a commitment to continuous improvement are essential to success in this role.

Responsibilities

• Monitor security alerts and events across the Cyderes security platform and customer environments
• Analyze, investigate, and respond to security events to drive effective customer outcomes
• Perform initial triage and determine the severity, scope, and potential impact of security incidents
• Investigate suspicious activity across endpoints, networks, identity systems, cloud environments, and security technologies
• Escalate confirmed or high-risk incidents to appropriate incident response or senior security resources
• Participate as a member of the incident response process and assist with containment and remediation activities
• Review security telemetry, logs, alerts, and other data sources to identify malicious or abnormal behavior
• Maintain accurate documentation of investigations, findings, actions taken, and customer communications
• Perform day-to-day operational security tasks and ensure established processes and service expectations are met
• Communicate clearly with customers and internal stakeholders regarding security events and recommended actions
• Identify opportunities to improve detection capabilities, operational processes, automation, and overall platform effectiveness
• Collaborate with other Cyderes teams including Managed Detection & Response, Threat Hunting, Incident Response, Engineering, and Customer Success

Requirements

• Experience working within a Security Operations Center (SOC), Managed Security Service Provider (MSSP), or Managed Detection & Response (MDR) environment
• Experience with SIEM and log-management platforms such as Splunk, Elastic Stack, Microsoft Sentinel, Google Security Operations, or similar technologies
• Experience with Endpoint Detection and Response technologies such as CrowdStrike, Microsoft Defender, SentinelOne, or similar platforms
• Experience with cloud environments and technologies including AWS, Microsoft Azure, and Google Cloud Platform
• Experience supporting Microsoft 365, Entra ID/Azure AD, Proofpoint, or other enterprise security platforms
• Scripting or development experience with technologies such as Python, PowerShell, or JavaScript
• Advanced system administration experience with Windows PowerShell, Ansible, SaltStack, Chef, Puppet, or similar technologies
• Experience with Security Orchestration, Automation, and Response (SOAR) technologies such as Cortex XSOAR, Splunk SOAR, or comparable platforms
• Familiarity with incident response, threat hunting, digital forensics, or malware analysis
• Understanding of the MITRE ATT&CK framework and common adversary behaviors
• Relevant cybersecurity certifications are a plus