Jobs at Cyderes (cyderes.com)

Implement, administer, and optimize Tanium across enterprise environments. Manage endpoint visibility, asset discovery, vulnerability remediation, patching, software deployment, dashboards, reporting, and security investigations. Integrate Tanium with SIEM, EDR, ITSM, and vulnerability management platforms. Develop PowerShell or Python automation, troubleshoot platform and agent issues, and support endpoint security operations for internal teams and enterprise clients.

Monitor, investigate, and respond to security threats across enterprise client environments. Conduct advanced triage, threat hunting, incident response, and root-cause analysis across endpoint, network, server, and cloud systems. Analyze SIEM and EDR data, apply MITRE ATT&CK, tune detections, develop response procedures, recommend remediation, and communicate findings to clients. Participate in incident escalation and an after-hours on-call rotation.

Identify and qualify enterprise prospects through outbound calls, email, LinkedIn, and other sales channels. Research target accounts, engage cybersecurity decision-makers, communicate solution value, qualify opportunities, schedule discovery meetings, and build pipeline for Enterprise Account Executives. Maintain prospect and opportunity data in Salesforce or a comparable CRM while executing territory-specific campaigns.

Leads IAM/PAM managed service delivery, technical operations, client engagement, and team development. Designs and supports CyberArk PAM, EPM, and Conjur solutions across enterprise, cloud, DevOps, and Kubernetes environments. Manages SLAs, incidents, changes, upgrades, capacity, performance, governance, and continuous improvement. Serves as the primary client contact, presents service metrics, handles escalations, and participates in 24x7 on-call support.

The Security Analyst II manages security incidents for an enterprise client, performing alert triage, investigation, threat hunting, containment coordination, and recovery support. The role uses CrowdStrike SIEM and EDR, collaborates with MDR providers and internal security teams, investigates phishing, malware, ransomware, and account compromise, and maps threats to MITRE ATT&CK. It also handles incident communications, documentation, stakeholder coordination, firewall and email security collaboration, and recommendations to improve detection and response capabilities.

Provides Level 2/3 production support for PingFederate and enterprise IAM environments. Administers SSO, federation connections, authentication policies, and integrations using SAML, OAuth, and OIDC. Troubleshoots authentication failures, tokens, certificates, and outages; performs upgrades, patches, monitoring, incident management, root cause analysis, and documentation. Collaborates with IAM, security, and infrastructure teams and participates in on-call support.

Perform advanced security monitoring, threat hunting, incident investigation, and triage across endpoint, server, and network environments. Analyze SIEM and endpoint data, identify indicators of attack and compromise, map customer use cases to MITRE ATT&CK, scope incidents, provide recommendations, maintain documentation, and participate in an after-hours incident-controller rotation.

Leads IAM managed services delivery, overseeing technical operations, client relationships, service-level agreements, team performance, incident response, root cause analysis, and continuous improvement. Manages IAM professionals, workloads, training, reporting, and operational policies. Supports pre-sales engagements, develops Statements of Work, leads client meetings, and ensures coverage for North American and European clients, including on-call incident support.

Provides advanced managed security services, including threat investigations, incident response, SIEM analysis, MITRE ATT&CK mapping, remediation, alert tuning, and security-content management. Mentors analysts, analyzes endpoint, server, network, and email threats, reviews logs, documents recommendations, maintains runbooks, and monitors the evolving threat landscape. Requires at least five years of IT security experience, senior-level experience, SIEM and EDR expertise, query-language proficiency, security certification, SOAR knowledge, and SOC or incident-response experience.

Provides advanced security monitoring, threat investigation, incident response, remediation, and client guidance. Mentors security analysts, analyzes endpoint, server, network, and SIEM data, maps threats to MITRE ATT&CK, manages detection content and tuning, documents runbooks, and recommends improvements based on the threat landscape.

Manage IAM intake requests, review authentication and authorization requirements, support application onboarding and migrations, coordinate changes, troubleshoot integration issues, and guide teams through enterprise IAM patterns. Provide technical consultation on SAML, OAuth, OIDC, SSO, MFA, federation, directories, and cloud identity integrations while maintaining documentation, runbooks, and security control procedures.

Leads federation services and enterprise IAM application onboarding as a PingFederate SME. Configures and deploys OIDC and SAML integrations, manages federation changes, troubleshoots authentication issues, coordinates validation and deployments, maintains documentation and runbooks, supports audit requirements, and serves as the primary escalation point for application and security teams.

Operates and supports managed CyberArk Privileged Access environments, completing ticketed requests within SLAs. Implements technical solutions, supports designs and iterative maintenance, troubleshoots core PAS modules, performs upgrades and security fixes, manages backups and disaster recovery drills, and contributes to documentation and customer requirements. Requires hands-on administration of large CyberArk environments, including PCloud, standalone and high-availability configurations, Vault, PVWA, CPM, PSM, PSMP, AAM, HTML5 Gateway, and Remote Access.

Provides managed security services through advanced threat investigations across endpoint, server, and network environments. Performs incident response, remediation, SIEM analysis, MITRE ATT&CK mapping, alert tuning, and security content management. Identifies attack and compromise indicators, analyzes phishing and email headers, documents recommendations and runbooks, and mentors security analysts. The role requires advanced SIEM and EDR expertise, SOC experience, and familiarity with SOAR platforms and security certifications.

Serve as a senior technical authority for managed Microsoft Sentinel and Defender XDR environments. Administer platforms, onboard data sources, optimize ingestion and costs, and develop advanced KQL detections, threat-hunting use cases, dashboards, and SOAR automations. Troubleshoot telemetry and integration issues, improve alert fidelity using MITRE ATT&CK, document operational processes, mentor engineers, and advise clients and partners on security architecture and platform improvements.

Leads Bengaluru-based Platform Operations for managed security and infrastructure platforms, including SIEM, EDR, firewalls, cloud, and hybrid environments. Manages platform availability, incident and change processes, automation, capacity planning, staffing, performance management, metrics, compliance, and 24x7 global coverage. Partners with Engineering, Security Operations, and Client Delivery teams while serving as an escalation point for complex platform issues and contributing to architecture and process strategy.

The Senior Consultant, SailPoint is responsible for implementing IAM solutions, gathering requirements, ensuring technical solutions meet needs, and fostering customer relationships.

Design, implement, integrate, and support SailPoint IdentityIQ solutions across enterprise environments. Lead IIQ implementations, develop rules/workflows/connectors, manage lifecycle processes (Joiner/Mover/Leaver), RBAC and governance, access certifications and SoD controls, troubleshoot production incidents, mentor junior engineers, and collaborate with security and business teams on IAM architecture and strategy.

Senior Security Engineer focused on identity and access management, helping design and operate IAM, exposure management, and MDR integrations. Work with Meridian entity fabric and global operations to detect and mitigate identity-based threats and improve risk posture.