Security Analyst II

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee security alerts and events across the Cyderes security platform and client environments.

• Evaluate, investigate, and respond to security events to achieve effective outcomes for customers.

• Conduct initial triage to assess the severity, scope, and potential impact of security incidents.

• Examine suspicious activities across endpoints, networks, identity systems, cloud environments, and security technologies.

• Escalate confirmed or high-risk incidents to the relevant incident response teams or senior security personnel.

• Actively participate in the incident response process and assist with containment and remediation efforts.

• Review security telemetry, logs, alerts, and other data sources to detect malicious or irregular behavior.

• Maintain thorough documentation of investigations, findings, actions taken, and communications with customers.

• Execute daily operational security tasks while ensuring compliance with established processes and service expectations.

• Clearly communicate with customers and internal stakeholders regarding security events and recommended actions.

• Identify opportunities to enhance detection capabilities, operational processes, automation, and overall platform effectiveness.

• Collaborate with other teams at Cyderes, including Managed Detection & Response, Threat Hunting, Incident Response, Engineering, and Customer Success.

⛳️ Requirements

• Experience working in a Security Operations Center (SOC), Managed Security Service Provider (MSSP), or Managed Detection & Response (MDR) environment.

• Proficient with SIEM and log management platforms such as Splunk, Elastic Stack, Microsoft Sentinel, Google Security Operations, or similar technologies.

• Familiar with Endpoint Detection and Response technologies like CrowdStrike, Microsoft Defender, SentinelOne, or comparable platforms.

• Knowledge of cloud environments and technologies including AWS, Microsoft Azure, and Google Cloud Platform.

• Experience supporting Microsoft 365, Entra ID/Azure AD, Proofpoint, or other enterprise security solutions.

• Scripting or development experience with technologies such as Python, PowerShell, or JavaScript.

• Advanced system administration experience with Windows PowerShell, Ansible, SaltStack, Chef, Puppet, or equivalent technologies.

• Experience with Security Orchestration, Automation, and Response (SOAR) technologies like Cortex XSOAR, Splunk SOAR, or similar platforms.

• Familiarity with incident response, threat hunting, digital forensics, or malware analysis.

• Understanding of the MITRE ATT&CK framework and common adversary behaviors.

• Relevant cybersecurity certifications are a plus.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Flexible work schedule and remote work options.

• Opportunities for professional development and training.

• Collaborative and innovative work environment.