Security Operations Analyst II

OpenKrill; United States; On-site; USD 85,000 - 130,000; Full time

Job summary

Cyderes is seeking a dedicated Security Analyst to join our security operations team, monitoring, investigating, and responding to security events across customer environments while collaborating with internal security teams.

The ideal candidate has hands-on experience with SIEM, EDR, and cloud platforms, plus scripting skills and a solid understanding of MITRE ATT&CK. You will document findings and drive improvements in detection and response.

Qualifications

• Experience in SOC/MSSP/MDR environments.
• Experience with SIEM/log-management platforms (Splunk, Elastic Stack, MS Sentinel, Google Security Operations, etc.).
• Experience with EDR technologies such as CrowdStrike, Defender, SentinelOne, etc.
• Experience with cloud environments (AWS, Azure, GCP).
• Scripting or development with Python, PowerShell, or JavaScript.
• Advanced system administration with Windows PowerShell and config management tools.
• Experience with SOAR technologies (Cortex XSOAR, Splunk SOAR, etc.).
• Familiarity with incident response, threat hunting, forensics, or malware analysis.
• Cybersecurity certifications are a plus.

Responsibilities

• Monitor security alerts and events across the Cyderes security platform and customer environments.
• Analyze, investigate, and respond to security events to drive effective customer outcomes.
• Perform initial triage and determine severity, scope, and potential impact of incidents.
• Investigate suspicious activity across endpoints, networks, identity systems, cloud environments, and security technologies.
• Escalate confirmed or high-risk incidents to appropriate incident response or senior security resources.
• Participate in the incident response process and assist with containment and remediation.
• Review telemetry, logs, alerts, and data sources to identify malicious or abnormal behavior.
• Maintain documentation of investigations, findings, actions taken, and customer communications.
• Perform day-to-day security tasks and ensure processes and service expectations are met.
• Communicate with customers and internal stakeholders regarding events and recommended actions.
• Identify opportunities to improve detection capabilities, processes, and automation.
• Collaborate with Managed Detection & Response, Threat Hunting, Incident Response, Engineering, and Customer Success teams.

Skills

SOC experience

SIEM knowledge

EDR technologies

Cloud platforms

PowerShell

MITRE ATT&CK

Incident response

Threat hunting

Automation / SOAR

Tools

Splunk

Elastic Stack

Microsoft Sentinel

CrowdStrike

Azure

Google Cloud Platform

Job description

Cyderes is seeking a dedicated Security Analyst to join our security operations team, monitoring, investigating, and responding to security events across customer environments while collaborating with internal security teams.

The ideal candidate has hands-on experience with SIEM, EDR, and cloud platforms, plus scripting skills and a solid understanding of MITRE ATT&CK. You will document findings and drive improvements in detection and response.