Jobs at Phoenix Cyber

Provide SOAR-focused cybersecurity consulting: design and implement security orchestrations and automations, collaborate with SMEs and vendors, and develop incident response automations to improve security operations.

Onsite SOC Analyst monitors and analyzes network traffic, IDS/IDS alerts and SIEM logs, creates detection content, investigates and tracks security incidents, maintains SOC SOPs, produces shift reports, advises incident responders, and works shift schedules including overnight shifts.

Design, assess, and implement enterprise DLP programs for endpoints and Office 365 email. Evaluate DLP tools, develop DLP designs and integrations, configure reporting and policies in monitoring mode, create system test plans, monitor and categorize alerts, coordinate with business owners to remediate risks, tune policies, and conduct UAT.

Design and implement security automations and orchestrations, develop integrations and APIs, collaborate with SMEs and vendors to build SOAR-enabled incident response solutions, and adapt in a fast-paced consulting environment.

Design, deploy, tune, and support cybersecurity solutions including WAF and SIEM content. Develop automations and incident response workflows, create WAF rules, and support security operations and incident response efforts within a fast-paced delivery team.

Monitor and analyze network traffic, IDS and SIEM alerts; develop and follow SOC SOPs; create detective content; investigate and track security incidents to resolution; produce shift reports; advise responders; review large datasets for anomalies; stay current on vulnerabilities. Shift work onsite required.

Develop security-focused Python plugins and third-party integrations for a commercial cybersecurity product. Design data models, indexing/storage strategies, ingestion and normalization pipelines, enrich and query big data using log aggregation tools, and integrate with third-party APIs and cloud infrastructure.