We Help the World Be Everyday Ready™
Today's threatscape is relentless. So are we. At Cyderes, we build practical Identity & Access Management (IAM), Exposure Management, and risk programs, helping organizations stop active threats fast with Managed Detection & Response (MDR) that integrates with existing tools. Powering it all is Meridian, our entity fabric that connects identities, assets, and access into one trusted reality. Augmented by AI and driven by seasoned operators, our tireless global team arms organizations with the people, platforms, and perspectives they need to conquer whatever tomorrow throws their way.
🏆 Great Place to Work® Certified™ | United States | Canada | United Kingdom | India
About the Role:
The Operations Advisor is the primary technical owner of detection outcomes for assigned clients. You drive detection quality, identify gaps in coverage, and advance client security maturity through expert-level advisory and hands-on detection engineering. You own the technical account relationship — and you deliver measurable outcomes that clients can see and trust. This role reports to Manager, Cyber Defense Operations.
Responsibilities
- Own and maintain detection coverage aligned to the Cyderes Rule Set
- Lead tuning and optimization of detection rules across SIEM platforms
- Identify, prioritize, and remediate detection gaps
- Execute and guide retrohunt activities to validate detection effectiveness
- Identify gaps in client visibility that directly impact detection capability
- Provide clear, detection-focused recommendations for improving coverage
- Validate whether existing data supports required detection use cases
- Own the technical account relationship for assigned clients
- Lead technical cadence calls focused on detection performance, gaps, and outcomes
- Translate technical findings into risk-based, business-relevant insight
- Support and lead response efforts for security incidents
- Provide detection-focused expertise during investigations
- Identify detection improvements based on real-world incident learnings
- Partner with SOC and DFIR teams during escalations as needed
Requirements
- 3–5 years of experience in detection engineering, security operations, or a closely related discipline
- 1+ years of experience in a managed security services or MSSP environment serving multiple clients
- Hands-on proficiency with one or more enterprise SIEM platforms (Splunk, Microsoft Sentinel, Chronicle, or equivalent)
- Proficiency in multiple SIEM query languages (SPL, KQL, YARA-L, or similar)
- Deep, demonstrable experience architecting and owning detection programs
- Advanced knowledge of adversary TTPs, threat intelligence operationalization, and detection framework design
- Demonstrated experience writing and tuning detection rules in production environments
- Familiarity with SOAR platforms and automation-assisted detection workflows
WHY CYDERES?
Benefits that go beyond the basics, we support our people so they can do their best work.
✔ Medical Insurance - Employee + dependents covered
✔ Life Insurance - Protection for what matters most
✔ Retirement Match Program - We invest in your future
✔ Hybrid Work Model - 2–3 days in office
✔ Maternity & Paternity Leave - Time for the moments that matter
✔ Paid Time Off - PTO + sick & casual leave
✔ Bereavement & Volunteer Time - Give back to your community
✔ Professional Development - Reimbursement program
✔ LinkedIn L&D Platform - Thousands of courses at your fingertips
✔ Mobile Phone Reimbursement - Stay connected, on us
Cyderes is an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to race, religion, color, sex, age, disability, sexual orientation, genetic information, national origin, or veteran status.
Note: This job posting is intended for direct applicants only. We request that outside recruiters do not contact us regarding this position.
