Security Operations Analyst II — Incident Response

Cyderes; United States; On-site; USD 68,000 - 75,000; Full time

Job summary

Cyderes is seeking a dedicated Security Analyst to monitor, investigate, and respond to security events across customer environments while helping drive effective security outcomes.

The ideal candidate understands how networks, endpoints, servers, identity systems, and cloud environments interact in modern enterprises and has a background in security operations, development, or system administration to support incident response and continuous improvement.

Qualifications

• Experience in a SOC/MSSP/MDR environment.
• Experience with SIEM/log-management platforms (Splunk, Elastic, Sentinel, Google SOAR).
• Experience with EDR tools such as CrowdStrike, Defender, SentinelOne.
• Experience with cloud environments (AWS, Azure, GCP).
• Experience with Microsoft 365 and Entra ID/Azure AD.
• Scripting or development in Python, PowerShell, or JavaScript.
• Advanced Windows system administration (PowerShell, Ansible, SaltStack, Chef, Puppet).
• Experience with SOAR platforms (Cortex XSOAR, Splunk SOAR).
• Familiarity with incident response, threat hunting, digital forensics, or malware analysis.
• Understanding of MITRE ATT&CK framework and adversary behaviors.
• Cybersecurity certifications are a plus.

Responsibilities

• Monitor security alerts and events across Cyderes platform and customer environments.
• Analyze, investigate and respond to security events to drive outcomes for customers.
• Perform initial triage to determine severity, scope and potential impact.
• Investigate suspicious activity across endpoints, networks, identity systems, cloud environments and security tech.
• Escalate high-risk incidents to incident response or senior security teams.
• Participate in incident response and assist with containment/remediation.
• Review telemetry, logs, alerts to identify malicious or abnormal behavior.
• Maintain documentation of investigations, actions and communications.
• Perform day-to-day security operations and ensure processes and service expectations are met.
• Communicate security events and recommended actions to customers and stakeholders.
• Identify opportunities to improve detection capabilities and platform efficiency.
• Collaborate with Managed Detection & Response, Threat Hunting, Incident Response, Engineering, and Customer Success teams.

Skills

SOC experience

MSSP/MDR experience

SIEM expertise

EDR experience

Threat hunting

Incident response

MITRE ATT&CK

Automation tooling

Threat intelligence

Tools

Splunk

Elastic Stack

Microsoft Sentinel

Google Cloud Security Operations

CrowdStrike

Microsoft Defender

SentinelOne

Cortex XSOAR

Splunk SOAR

Job description

Cyderes is seeking a dedicated Security Analyst to monitor, investigate, and respond to security events across customer environments while helping drive effective security outcomes.

The ideal candidate understands how networks, endpoints, servers, identity systems, and cloud environments interact in modern enterprises and has a background in security operations, development, or system administration to support incident response and continuous improvement.