20d 23h ago
Operations Advisor
Cyderes·Cybersecurity
🏢Hybrid
|United KingdomOperations Advisor
Cyderes | Cybersecurity
2 weeks agoHybrid
Full Time
United Kingdom
Position:
Operations Advisor, Cyber Defense Operations
Company:
Cyderes
Location:
United Kingdom
Employment type:
Full-Time
Work Arrangement:
Hybrid
Short Summary:
The Operations Advisor is the primary technical owner of detection outcomes for assigned clients, improving detection quality and advancing client security maturity through expert-level advisory and hands-on detection engineering.
Responsibilities:
- Own and maintain detection coverage aligned to the Cyderes Rule Set
- Lead tuning and optimization of detection rules across SIEM platforms
- Identify, prioritize, and remediate detection gaps
- Be a trusted advisor on detection strategy and operational effectiveness
- Identify detection improvements based on real-world incident insights
- Partner with SOC and DFIR teams during escalations
- Oversee the technical account relationship for assigned clients
- Lead technical cadence calls focused on detection performance, gaps, and outcomes
- Translate technical findings into risk-based, business-relevant insights
- Guide clients on prioritization of improvements based on detection impact
Requirement:
- 3–5 years of experience in detection engineering, security operations, or a related discipline
- Hands-on proficiency with one or more enterprise SIEM platforms (Splunk, Microsoft Sentinel, Chronicle, or equivalent)
- Demonstrated experience writing and tuning detection rules in production environments
- Experience in a managed security services or MSSP environment serving multiple clients
- Proficiency in multiple SIEM query languages (SPL, KQL, YARA-L, or similar)
- Familiarity with SOAR platforms and automation-assisted detection workflows
- Experience with threat hunting methodologies and retrohunt program execution
- Relevant certifications: GCIA, GCIH, GCDA, or SIEM vendor certifications
Benefits:
- Medical Insurance - Employee covered
- Life Insurance - Protection for what matters most
- Retirement Match Program - We invest in your future
- Hybrid Work Model - 2–3 days in office
- Maternity & Paternity Leave - Time for the moments that matter
- Paid Time Off - PTO + sick & casual leave
- Bereavement & Volunteer Time - Give back to your community
- Professional Development - Reimbursement program
- LinkedIn L&D Platform - Thousands of courses at your fingertips
- Mobile Phone Reimbursement - Stay connected, on us
Operations Advisor, Cyber Defense Operations
Company:
Cyderes
Location:
United Kingdom
Employment type:
Full-Time
Work Arrangement:
Hybrid
Short Summary:
The Operations Advisor is the primary technical owner of detection outcomes for assigned clients, improving detection quality and advancing client security maturity through expert-level advisory and hands-on detection engineering.
Responsibilities:
- Own and maintain detection coverage aligned to the Cyderes Rule Set
- Lead tuning and optimization of detection rules across SIEM platforms
- Identify, prioritize, and remediate detection gaps
- Be a trusted advisor on detection strategy and operational effectiveness
- Identify detection improvements based on real-world incident insights
- Partner with SOC and DFIR teams during escalations
- Oversee the technical account relationship for assigned clients
- Lead technical cadence calls focused on detection performance, gaps, and outcomes
- Translate technical findings into risk-based, business-relevant insights
- Guide clients on prioritization of improvements based on detection impact
Requirement:
- 3–5 years of experience in detection engineering, security operations, or a related discipline
- Hands-on proficiency with one or more enterprise SIEM platforms (Splunk, Microsoft Sentinel, Chronicle, or equivalent)
- Demonstrated experience writing and tuning detection rules in production environments
- Experience in a managed security services or MSSP environment serving multiple clients
- Proficiency in multiple SIEM query languages (SPL, KQL, YARA-L, or similar)
- Familiarity with SOAR platforms and automation-assisted detection workflows
- Experience with threat hunting methodologies and retrohunt program execution
- Relevant certifications: GCIA, GCIH, GCDA, or SIEM vendor certifications
Benefits:
- Medical Insurance - Employee covered
- Life Insurance - Protection for what matters most
- Retirement Match Program - We invest in your future
- Hybrid Work Model - 2–3 days in office
- Maternity & Paternity Leave - Time for the moments that matter
- Paid Time Off - PTO + sick & casual leave
- Bereavement & Volunteer Time - Give back to your community
- Professional Development - Reimbursement program
- LinkedIn L&D Platform - Thousands of courses at your fingertips
- Mobile Phone Reimbursement - Stay connected, on us
Required Languages
🇬🇧 English