Operations Advisor, Cyber Defense Operations

About the Role:

The Operations Advisor is the primary technical owner of detection outcomes for assigned clients. You drive detection quality, identify gaps in coverage, and advance client security maturity through expert-level advisory and hands-on detection engineering. You own the technical account relationship — and you deliver measurable outcomes that clients can see and trust. This role reports to Manager, Cyber Defense Operations.

Responsibilities

• Own and maintain detection coverage aligned to the Cyderes Rule Set
• Lead tuning and optimization of detection rules across SIEM platforms
• Identify, prioritize, and remediate detection gaps
• Execute and guide retrohunt activities to validate detection effectiveness
• Identify gaps in client visibility that directly impact detection capability
• Provide clear, detection-focused recommendations for improving coverage
• Validate whether existing data supports required detection use cases
• Own the technical account relationship for assigned clients
• Lead technical cadence calls focused on detection performance, gaps, and outcomes
• Translate technical findings into risk-based, business-relevant insight
• Support and lead response efforts for security incidents
• Provide detection-focused expertise during investigations
• Identify detection improvements based on real-world incident learnings
• Partner with SOC and DFIR teams during escalations as needed

Requirements

• 3–5 years of experience in detection engineering, security operations, or a closely related discipline
• 1+ years of experience in a managed security services or MSSP environment serving multiple clients
• Hands-on proficiency with one or more enterprise SIEM platforms (Splunk, Microsoft Sentinel, Chronicle, or equivalent)
• Proficiency in multiple SIEM query languages (SPL, KQL, YARA-L, or similar)
• Deep, demonstrable experience architecting and owning detection programs
• Advanced knowledge of adversary TTPs, threat intelligence operationalization, and detection framework design
• Demonstrated experience writing and tuning detection rules in production environments
• Familiarity with SOAR platforms and automation-assisted detection workflows