Operations Advisor, Cyber Defense Operations
New
United StatesFull-TimeMiddle
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 3–5 years
Requirements
- 3–5 years of experience in detection engineering, security operations, or a closely related discipline
- Hands-on proficiency with one or more enterprise SIEM platforms (Splunk, Microsoft Sentinel, Chronicle, or equivalent)
- Demonstrated experience writing and tuning detection rules in production environments
- Working knowledge of MITRE ATT&CK and ability to map detections to adversary TTPs
- Strong client-facing communication — leads technical conversations and earns trust
- Familiarity with SOAR platforms and automation-assisted detection workflows
- 3+ years of experience with threat hunting methodologies and retrohunt program execution
- Relevant certifications: GCIA, GCIH, GCDA, or SIEM vendor certifications
Responsibilities
- Own and maintain detection coverage aligned to the Cyderes Rule Set
- Lead tuning and optimization of detection rules across SIEM platforms
- Identify, prioritize, and remediate detection gaps
- Execute and guide retrohunt activities to validate detection effectiveness
- Own the technical account relationship for assigned clients
- Lead technical cadence calls focused on detection performance, gaps, and outcomes
- Translate technical findings into risk-based, business-relevant insights
- Guide clients on prioritization of improvements based on detection impact
- Act as a trusted advisor on detection strategy and operational effectiveness
- Support and lead response efforts for security incidents
View Full Description & ApplyYou'll be redirected to the employer's site
