Jobs at Phoenix Cyber

Support and deploy cybersecurity solutions for client environments: develop and tune SIEM content, create WAF rules, implement automations and SOAR playbooks, respond to incidents, and support security operations in a fast-paced team.

Design, configure, and assess enterprise DLP programs for endpoints and Office 365 email. Develop DLP integrations, reporting, test plans, and monitoring policies. Triage and tune alerts, coordinate with business owners, and support UAT and risk reduction efforts.

Monitor and analyze network traffic, IDS and SIEM alerts; develop and follow SOC SOPs; create detective content; investigate and track security incidents to resolution; produce shift reports; advise responders; review large datasets for anomalies; stay current on vulnerabilities. Shift work onsite required.

Provide SOAR-focused cybersecurity consulting: design and implement security orchestrations and automations, respond to incidents, collaborate with SMEs, vendors, and stakeholders to develop innovative security solutions in a fast-paced environment.

Develop security-focused Python plugins and third-party integrations for a commercial cybersecurity product. Design data models, indexing/storage strategies, ingestion and normalization pipelines, enrich and query big data using log aggregation tools, and integrate with third-party APIs and cloud infrastructure.

Design and implement security automations and orchestrations (SOAR), develop integrations and APIs, collaborate with SMEs and vendors, and provide cybersecurity engineering expertise to respond to incidents and improve security operations.