← All roles

Security Analyst II, CrowdStrike Next-Gen SIEM

Cyderes· Managed Services & Consulting – 105 - Security Operations
Apply on company site
Hybrid (Bengaluru, Karnataka)Full-timePosted 4d ago

About the role

Security Analyst II embedded in the client’s security operations, acting as the primary contact for incident management and response within Cyderes’ MDR-enabled environment (CrowdStrike). Works with client stakeholders and external vendors to manage, investigate, and respond to security incidents, leveraging MDR services and CrowdStrike tooling.

Responsibilities

  • Serve as a dedicated Security Analyst supporting the client's security operations and acting as an extension of the client's security team.
  • Perform security event triage, investigation, and response activities utilizing alerts and findings generated by the MDR service providers.
  • Act as the primary point of contact for all security incidents and coordinate response efforts across internal and external stakeholders.
  • Review, validate, and take appropriate response actions based on incidents escalated to client.
  • Conduct deep-dive investigations across endpoint, network, email, cloud, and identity platforms to determine the scope and impact of security incidents.
  • Manage incident communications, documentation, and status updates throughout the incident lifecycle.
  • Coordinate containment, eradication, and recovery activities with client IT and security teams.
  • Work closely with Firewall Management teams to implement and validate security controls required during incident response activities.
  • Coordinate with Email Security teams to investigate phishing threats, malicious email campaigns, and email-based compromises.
  • Perform proactive threat hunting activities and identify indicators of compromise across the client's environment.
  • Map observed threats and client use cases to the MITRE ATT&CK framework and provide recommendations to enhance security posture.
  • Collaborate security service providers to ensure investigation and resolution of security events.
  • Maintain detailed incident records, lessons learned, and recommendations for improving detection and response capabilities.
  • Develop trusted relationships with client stakeholders and provide security guidance aligned with business objectives.
  • Stay current with emerging threats, attack techniques, and industry best practices.

Qualifications

  • 3+ years of experience in Security Operations Center (SOC), Incident Response, Threat Hunting, or Cybersecurity Operations roles.
  • Experience working directly within client environments or as a dedicated security resource supporting enterprise customers.
  • Strong understanding of Incident Response processes and lifecycle management.
  • Experience working with SIEM solutions, preferably CrowdStrike Next Gen SIEM for log analysis, correlation, and investigation.
  • Experience working with Endpoint Detection and Response (EDR) solutions, preferably CrowdStrike EDR.
  • Experience collaborating with Managed Detection and Response (MDR) providers and managing escalations from external security service providers.
  • Strong understanding of CrowdStrike Falcon platform and security operations workflows.
  • Experience investigating phishing, malware, ransomware, account compromise, and insider threat incidents.
  • Familiarity with email security platforms such as Proofpoint and common email threat vectors.
  • Understanding of firewall technologies, such as PaloAlto, network security controls, and change management processes related to incident response.
  • Strong knowledge of the MITRE ATT&CK framework and adversary tactics, techniques, and procedures (TTPs).
  • Coordinate with multiple teams and drive incident response activities to completion.
  • Strong customer-facing and stakeholder management experience.
  • Think from a client ownership perspective rather than a service provider perspective, taking accountability for security outcomes and business risk.
  • Relevant certifications such as Security+, CEH, SC-200, GCIH, GCFA, or equivalent security certifications.
  • Basic scripting or automation experience (PowerShell, Python, KQL, SPL).

Skills

Required:Security Operations Center (SOC)Incident ResponseSIEM (CrowdStrike Next Gen SIEM)EDR (CrowdStrike)MDR coordinationMITRE ATT&CK
Nice to have:Phishing/Malware InvestigationFirewall Technology (Palo Alto)

Benefits

  • Medical Insurance - Employee + dependents covered
  • Life Insurance - Protection for what matters most
  • Retirement Match Program - We invest in your future
  • Hybrid Work Model - 2–3 days in office
  • Maternity & Paternity Leave - Time for the moments that matter
  • Paid Time Off - PTO + sick & casual leave
  • Bereavement & Volunteer Time - Give back to your community
  • Professional Development - Reimbursement program
  • LinkedIn L&D Platform - Thousands of courses at your fingertips
  • Mobile Phone Reimbursement - Stay connected, on us
Last updated Oct 21, 2026. Interested? Apply on the company site.

About Cyderes

Get enterprise-grade cybersecurity. Be Everyday Ready.

Cyderes is a managed security services partner with an identity-first approach uniting MDR, exposure management, and IAM, keeping you Everyday Ready.

Managed Detection & ResponseIdentity & Access ManagementExposure Management
Company profileWebsite

More open roles at Cyderes