Jobs at Phoenix Cyber

Design, deploy, tune, and support cybersecurity solutions; create WAF rules; develop SIEM content (correlations, dashboards, alerts); implement incident response automations; provide hands-on security operations and incident response expertise within client environments.

Design and implement security automations and orchestrations (SOAR) to respond to incidents, integrate COTS tools and APIs, collaborate with SMEs and stakeholders, and adapt in a fast-paced consulting environment.

Design, deploy, tune, and support security solutions. Create WAF rules, develop SIEM content and automations, and respond to incidents while collaborating in a fast-paced cybersecurity operations environment.

Design, deploy, tune and support security solutions. Create WAF rules, develop SIEM content and SOAR automations, and respond to security incidents while collaborating in fast-paced delivery teams.

Lead vulnerability threat management activities: assess and prioritize vulnerabilities, develop remediation strategies, support incident response, collaborate with stakeholders for compliance, research emerging threats, and provide SME guidance to teams.

Monitor and analyze network traffic, IDS and SIEM alerts; investigate and resolve security incidents; develop and follow SOC SOPs; produce shift reports; create detection content; advise incident responders; review large datasets for anomalous activity; compose alert communications. Must work overnight shifts onsite.

Monitor and analyze network traffic, IDS, SIEM, and security logs; create detective content and SOPs; investigate and resolve security incidents; support shift reporting and advise responders.

Provide SOAR-focused cybersecurity consulting: design and implement security orchestrations and automations, collaborate with SMEs and vendors, and develop incident response automations to improve security operations.

Monitor and analyze network traffic, IDS and SIEM alerts; develop and follow SOC SOPs; create detective content; investigate and track security incidents to resolution; produce shift reports; advise responders; review large datasets for anomalies; stay current on vulnerabilities. Shift work onsite required.

Develop security-focused Python plugins and third-party integrations for a commercial cybersecurity product. Design data models, indexing/storage strategies, ingestion and normalization pipelines, enrich and query big data using log aggregation tools, and integrate with third-party APIs and cloud infrastructure.