Security Analyst II

Cyderes•Bentonville, AR

3d•Hybrid

About The Position

Cyderes is seeking an experienced Managed Services Security Analyst II to join its Cyber Defense team. The role monitors, investigates, and responds to security threats across complex enterprise client environments. The analyst conducts advanced investigations, threat hunting, incident response, and security analysis using security technologies and the MITRE ATT&CK framework to identify threats, assess security posture, and provide actionable recommendations. The role collaborates with internal security teams and clients to deliver security outcomes and represent Cyderes through professional communication and technical expertise. The position follows a hybrid model with 2–3 days in the office.

Requirements

At least 3 years of progressive experience in cybersecurity, security operations, incident response, or a related IT security role.
Strong experience conducting security investigations, incident triage, threat hunting, and advanced security analysis.
Hands-on experience with EDR platforms such as CrowdStrike Falcon, SentinelOne, or Microsoft Defender for Endpoint.
Advanced knowledge of at least one leading SIEM platform, such as Microsoft Sentinel, Splunk, Elastic Security, IBM QRadar, or Google Chronicle.
Strong understanding of the MITRE ATT&CK framework, including mapping security detections to adversary tactics and techniques.
Experience analyzing security events, identifying indicators of compromise, and investigating malicious activity across enterprise environments.
Previous experience working within an MDR provider, MSSP, or enterprise SOC.
Experience with SOAR platforms and security workflow automation.
Familiarity with cloud security monitoring and incident investigations across Microsoft Azure, AWS, or Google Cloud.
Experience developing or tuning SIEM detection rules, security use cases, and threat-hunting queries.
Experience supporting client-facing incident investigations and communicating technical findings to security stakeholders.
Knowledge of vulnerability management, threat intelligence, and proactive security monitoring techniques.

Responsibilities

Perform advanced security triage and investigations across endpoint, server, network, and cloud environments.
Conduct proactive threat hunting to identify, investigate, and isolate suspicious or malicious activity within client environments.
Lead in-depth security incident investigations, identifying root causes, indicators of compromise, and potential business impact.
Analyze security alerts, logs, and telemetry using SIEM, EDR, and other security monitoring platforms.
Use the MITRE ATT&CK framework to map adversary tactics and techniques, assess detection coverage, and identify gaps in client security posture.
Coordinate incident investigations and escalations, providing technical analysis and remediation recommendations.
Review network traffic, endpoint artifacts, and system logs to identify indicators of attack and compromise.
Develop, maintain, and improve security documentation, investigation procedures, and incident response runbooks.
Participate in an after-hours on-call rotation and serve as an Incident Controller when required.
Scope and assess client security incidents, ensuring timely investigation, communication, and escalation.