Jobs at Cyderes (cyderes.com)

Manage end-to-end CMMC audit delivery for an enterprise customer, including planning, timelines, resources, risks, dependencies, evidence collection, stakeholder communication, and project closeout. Coordinate cybersecurity consultants and engineers, ensure SSPs, POA&Ms, artifacts, and control mappings meet audit requirements, and serve as the primary customer-facing project-management contact throughout the assessment lifecycle.

Serve as the technical owner for client detection outcomes: maintain and tune SIEM detections, identify and remediate coverage gaps, advise clients on detection strategy and prioritization, partner with SOC/DFIR during escalations, and drive measurable improvements in detection performance.

Leads and mentors a four-person vulnerability management team while remaining hands-on with vulnerability identification, prioritization, remediation tracking, validation, and exposure management. The manager serves as a technical and client-facing escalation point, guides remediation across infrastructure and security teams, oversees workload and service delivery, and communicates risks and priorities to technical and non-technical stakeholders.

Support cybersecurity consulting for operational technology and industrial control systems. Responsibilities include designing OT security solutions, conducting maturity and risk assessments, remediating vulnerabilities, supporting incident response, maintaining regulatory compliance, evaluating monitoring technologies, and producing client documentation. The role also contributes to pre-sales, methodology development, knowledge sharing, and collaboration with security operations, engineering, and executive stakeholders.

Design, implement, and develop Microsoft-based security architectures for enterprise clients. Secure cloud, hybrid, and on-premises environments using industry best practices and Microsoft security technologies. Partner with clients to optimize protection and report to the Senior Director of Microsoft Consulting.

Provide L2/L3 production support and enhancements for SailPoint IdentityIQ: troubleshoot P1/P2 incidents, implement/configure IIQ, develop integrations and scripts (Java, BeanShell, PowerShell), support provisioning, aggregations, certifications, onboarding, upgrades/patches, produce technical documentation, participate in code reviews and on-call/global support.

The IAM Consultant is responsible for implementing IAM solutions, working closely with clients and technical teams to deliver high-quality solutions and maintain strong customer relationships.

The Senior Consultant, SailPoint is responsible for implementing IAM solutions, gathering requirements, ensuring technical solutions meet needs, and fostering customer relationships.

Lead advanced penetration tests across networks, applications, APIs, cloud, and wireless environments. Conduct vulnerability assessments, exploit development, red and purple team exercises, and threat analysis. Lead client engagements, create executive and technical reports, provide mitigation guidance, support presales, mentor junior consultants, research emerging attack techniques, and develop automation tools and scripts.

Design, implement, integrate, and support SailPoint IdentityIQ solutions across enterprise environments. Lead IIQ implementations, develop rules/workflows/connectors, manage lifecycle processes (Joiner/Mover/Leaver), RBAC and governance, access certifications and SoD controls, troubleshoot production incidents, mentor junior engineers, and collaborate with security and business teams on IAM architecture and strategy.

Senior Security Engineer focused on identity and access management, helping design and operate IAM, exposure management, and MDR integrations. Work with Meridian entity fabric and global operations to detect and mitigate identity-based threats and improve risk posture.