Jobs at Cyderes (cyderes.com)

Build, operate, and improve Kubernetes platforms, cloud infrastructure, CI/CD pipelines, and delivery workflows supporting security services. Manage infrastructure as code, Helm charts, GitOps, releases, observability, networking, secrets, and vulnerability remediation. Troubleshoot production systems, participate in on-call rotations, document procedures, and collaborate with development and security teams in an Agile environment.

Own the vision, roadmap, data model, and lifecycle of Cyderes’ security case-management platform. Lead migration from a legacy system without disrupting 24/7 SOC operations, oversee integrations with customer ticketing and security platforms, and define AI-assisted workflows with human oversight. Partner with Engineering, SOC, UX, customers, and business teams on platform performance, launches, and migrations. Mentor Product Managers and influence executive decisions through data and product strategy.

Own the roadmap, lifecycle, adoption, and reliability of Cyderes’ internal agentic AI harness. Build and evaluate agents and reusable skills, develop prototypes and production code, manage AI tools, and partner with Engineering, Security, UX, and product leadership. Define metrics, safety controls, cost and latency management, rollout plans, and portfolio decisions while improving workflows and operational outcomes.

Leads IAM managed services delivery, overseeing technical operations, client relationships, service-level agreements, team performance, incident response, root cause analysis, and continuous improvement. Manages IAM professionals, workloads, training, reporting, and operational policies. Supports pre-sales engagements, develops Statements of Work, leads client meetings, and ensures coverage for North American and European clients, including on-call incident support.

Provides advanced managed security services, including threat investigations, incident response, SIEM analysis, MITRE ATT&CK mapping, remediation, alert tuning, and security-content management. Mentors analysts, analyzes endpoint, server, network, and email threats, reviews logs, documents recommendations, maintains runbooks, and monitors the evolving threat landscape. Requires at least five years of IT security experience, senior-level experience, SIEM and EDR expertise, query-language proficiency, security certification, SOAR knowledge, and SOC or incident-response experience.

Provides advanced security monitoring, threat investigation, incident response, remediation, and client guidance. Mentors security analysts, analyzes endpoint, server, network, and SIEM data, maps threats to MITRE ATT&CK, manages detection content and tuning, documents runbooks, and recommends improvements based on the threat landscape.

Manage IAM intake requests, review authentication and authorization requirements, support application onboarding and migrations, coordinate changes, troubleshoot integration issues, and guide teams through enterprise IAM patterns. Provide technical consultation on SAML, OAuth, OIDC, SSO, MFA, federation, directories, and cloud identity integrations while maintaining documentation, runbooks, and security control procedures.

Leads federation services and enterprise IAM application onboarding as a PingFederate SME. Configures and deploys OIDC and SAML integrations, manages federation changes, troubleshoots authentication issues, coordinates validation and deployments, maintains documentation and runbooks, supports audit requirements, and serves as the primary escalation point for application and security teams.

Operates and supports managed CyberArk Privileged Access environments, completing ticketed requests within SLAs. Implements technical solutions, supports designs and iterative maintenance, troubleshoots core PAS modules, performs upgrades and security fixes, manages backups and disaster recovery drills, and contributes to documentation and customer requirements. Requires hands-on administration of large CyberArk environments, including PCloud, standalone and high-availability configurations, Vault, PVWA, CPM, PSM, PSMP, AAM, HTML5 Gateway, and Remote Access.

Provides managed security services through advanced threat investigations across endpoint, server, and network environments. Performs incident response, remediation, SIEM analysis, MITRE ATT&CK mapping, alert tuning, and security content management. Identifies attack and compromise indicators, analyzes phishing and email headers, documents recommendations and runbooks, and mentors security analysts. The role requires advanced SIEM and EDR expertise, SOC experience, and familiarity with SOAR platforms and security certifications.

Serve as a senior technical authority for managed Microsoft Sentinel and Defender XDR environments. Administer platforms, onboard data sources, optimize ingestion and costs, and develop advanced KQL detections, threat-hunting use cases, dashboards, and SOAR automations. Troubleshoot telemetry and integration issues, improve alert fidelity using MITRE ATT&CK, document operational processes, mentor engineers, and advise clients and partners on security architecture and platform improvements.

Manage daily operations of CyberArk Privileged Access environments in a managed service context. Implement technical solutions, support designs, troubleshoot CyberArk PAS modules, handle upgrades and security fixes, perform disaster recovery drills, backups, reporting, and complete SLA-driven service requests. Collaborate with customers, product owners, and development teams while maintaining support documentation.

Lead and scale 24/7 security operations for MDR clients, managing SOC leaders, analysts, monitoring, threat detection, investigations, and incident response. Drive SOC process improvement, automation, AI-enabled capabilities, operational KPIs, SLAs, and service quality. Partner with security and customer-facing teams, serve as the senior escalation point for major incidents, and strengthen geographically distributed security operations.

Leads Bengaluru-based Platform Operations for managed security and infrastructure platforms, including SIEM, EDR, firewalls, cloud, and hybrid environments. Manages platform availability, incident and change processes, automation, capacity planning, staffing, performance management, metrics, compliance, and 24x7 global coverage. Partners with Engineering, Security Operations, and Client Delivery teams while serving as an escalation point for complex platform issues and contributing to architecture and process strategy.

Serve as the technical owner for client detection outcomes: maintain and tune SIEM detections, identify and remediate coverage gaps, advise clients on detection strategy and prioritization, partner with SOC/DFIR during escalations, and drive measurable improvements in detection performance.

Support cybersecurity consulting for operational technology and industrial control systems. Responsibilities include designing OT security solutions, conducting maturity and risk assessments, remediating vulnerabilities, supporting incident response, maintaining regulatory compliance, evaluating monitoring technologies, and producing client documentation. The role also contributes to pre-sales, methodology development, knowledge sharing, and collaboration with security operations, engineering, and executive stakeholders.

Provide L2/L3 production support and enhancements for SailPoint IdentityIQ: troubleshoot P1/P2 incidents, implement/configure IIQ, develop integrations and scripts (Java, BeanShell, PowerShell), support provisioning, aggregations, certifications, onboarding, upgrades/patches, produce technical documentation, participate in code reviews and on-call/global support.

The Senior Consultant, SailPoint is responsible for implementing IAM solutions, gathering requirements, ensuring technical solutions meet needs, and fostering customer relationships.

Lead advanced penetration tests across networks, applications, APIs, cloud, and wireless environments. Conduct vulnerability assessments, exploit development, red and purple team exercises, and threat analysis. Lead client engagements, create executive and technical reports, provide mitigation guidance, support presales, mentor junior consultants, research emerging attack techniques, and develop automation tools and scripts.

Design, implement, integrate, and support SailPoint IdentityIQ solutions across enterprise environments. Lead IIQ implementations, develop rules/workflows/connectors, manage lifecycle processes (Joiner/Mover/Leaver), RBAC and governance, access certifications and SoD controls, troubleshoot production incidents, mentor junior engineers, and collaborate with security and business teams on IAM architecture and strategy.