Role Summary
The Operations Advisor is the primary technical owner of detection outcomes for assigned clients. You drive detection quality, identify gaps in coverage, and advance client security maturity through expert-level advisory and hands-on detection engineering.
You own the technical account relationship — and you deliver measurable outcomes that clients can see and trust.
Responsibilities
- Own and maintain detection coverage aligned to the Cyderes Rule Set
- Lead tuning and optimization of detection rules across SIEM platforms
- Identify, prioritize, and remediate detection gaps
- Execute and guide retrohunt activities to validate detection effectiveness
- Own the technical account relationship for assigned clients
- Lead technical cadence calls focused on detection performance, gaps, and outcomes
- Translate technical findings into risk-based, business-relevant insights
- Guide clients on prioritization of improvements based on detection impact
- Act as a trusted advisor on detection strategy and operational effectiveness
- Support and lead response efforts for security incidents
- Provide detection-focused expertise during investigations
- Identify detection improvements based on real-world incident learnings
Requirements
- 3–5 years of experience in detection engineering, security operations, or a closely related discipline
- Hands-on proficiency with one or more enterprise SIEM platforms (Splunk, Microsoft Sentinel, Chronicle, or equivalent)
- Demonstrated experience writing and tuning detection rules in production environments
- Working knowledge of MITRE ATT&CK and ability to map detections to adversary TTPs
- Strong client-facing communication — leads technical conversations and earns trust
- Experience conducting or supporting incident response investigations
- Experience in a managed security services or MSSP environment serving multiple clients
- Proficiency in multiple SIEM query languages (SPL, KQL, YARA-L, or similar)
- Familiarity with SOAR platforms and automation-assisted detection workflows
WHY CYDERES?
Benefits that go beyond the basics, we support our people so they can do their best work.
✔ Medical Insurance - Employee covered
✔ Life Insurance - Protection for what matters most
✔ Retirement Match Program - We invest in your future
✔ Hybrid Work Model - 2–3 days in office
✔ Maternity & Paternity Leave - Time for the moments that matter
✔ Paid Time Off - PTO + sick & casual leave
✔ Bereavement & Volunteer Time - Give back to your community
✔ Professional Development - Reimbursement program
✔ LinkedIn L&D Platform - Thousands of courses at your fingertips
✔ Mobile Phone Reimbursement - Stay connected, on us
Skills Required
- 3-5 years of experience in detection engineering, security operations, or a closely related discipline
- Hands-on proficiency with one or more enterprise SIEM platforms
- Demonstrated experience writing and tuning detection rules in production environments
- Working knowledge of MITRE ATT&CK
- Strong client-facing communication
- Experience conducting or supporting incident response investigations
- Experience in a managed security services or MSSP environment
- Proficiency in multiple SIEM query languages
- Familiarity with SOAR platforms and automation-assisted detection workflows
What We Do
Cyderes is a global cybersecurity partner built for today’s relentless threatscape. We specialize in identity-centric security, managed detection and response, and cloud defense—powered by AI and driven by expert operators. Our mission: arm organizations with the people, platforms, and perspective to "be everyday ready.”
