Operations Advisor

Responsibilities

Serve as a technical advisor and point of contact for assigned customer environments.

Manage security operations relationships across a portfolio of approximately eight client environments.

Develop, implement, and optimize detection rules and security monitoring content.

Work with SIEM platforms including Google SecOps (Chronicle), Microsoft Sentinel, and Splunk.

Identify gaps in customer security monitoring, log ingestion, and detection coverage.

Partner with SOC analysts and detection engineers to improve alert quality and reduce false positives.

Provide recommendations for improving customer security posture and operational effectiveness.

Support continuous improvement initiatives within Cyderes managed detection and response services.

Collaborate with internal security operations teams on investigations, escalations, and threat detection strategies.

Communicate technical findings and security recommendations to customer stakeholders.

Requirements

• Experience in SOC operations, detection engineering, SIEM engineering, or cybersecurity consulting.

• Hands-on experience developing and tuning SIEM detection rules.

• Experience with one or more of the following:

• Google SecOps / Chronicle

• Microsoft Sentinel

• Splunk

• Strong understanding of security monitoring, alert analysis, and threat detection.

• Knowledge of security frameworks and methodologies, including MITRE ATT&CK.

• Experience troubleshooting log ingestion, detection coverage, and alerting issues.

• Strong customer-facing communication and technical advisory skills.

• Ability to manage multiple customer environments and prioritize competing requirements.

• Experience working within an MSSP or MDR provider.

• Experience with SIEM content engineering and detection use-case development.

• Familiarity with KQL, SPL, or YARA-L.

• Understanding of incident response, threat hunting, and security operations workflows.

• Experience delivering technical recommendations to enterprise customers.