Security Analyst II: Guardian

Security analyst in Cyderes's security operations team, monitoring, investigating and answering security alerts in client environments through the Cyderes platform. The role is remote in the US.

The analyst triages alerts and gauges severity and scope, investigates suspicious activity across endpoints, networks, identity systems and cloud, escalates confirmed or high-risk incidents, helps with containment and remediation, documents findings and customer communications, and suggests improvements to detection and automation. Cyderes wants SOC, MSSP or MDR experience, hands-on SIEM and EDR tools such as Splunk, Sentinel, CrowdStrike or SentinelOne, familiarity with AWS, Azure and GCP and with Microsoft 365 and Entra ID, scripting in Python or PowerShell, some SOAR exposure, and a working knowledge of MITRE ATT&CK.