Jobs at Phoenix Cyber

Provides cybersecurity consulting expertise for a commercial client onsite. Develops and implements SOAR automations responding to security incidents, designs security orchestrations with engineers, SMEs, vendors, and stakeholders, and delivers innovative solutions in a fast-paced security operations environment.

Develop and implement cybersecurity automations responding to security incidents, design security orchestrations, integrate commercial off-the-shelf technologies, and provide technical expertise to client delivery teams. The role collaborates with subject matter experts, engineers, vendors, and project stakeholders in a fast-paced onsite environment.

Monitor network traffic, IDS alerts, security events, and logs; investigate anomalous activity and security incidents; develop SOC procedures, situation reports, detection content, and alert communications; advise incident responders; track investigations through resolution; and remain current on vulnerabilities and attack countermeasures while working shifts.

Develop, deploy, tune, and support cybersecurity solutions; create WAF rules; enhance SIEM correlations, enrichments, dashboards, reports, and alerts; and implement incident-response automations. The role provides technical expertise for security operations and incident response in a fast-paced, cross-functional environment.

Develops, deploys, tunes, and supports cybersecurity solutions. Creates WAF rules, enhances SIEM content including correlations, dashboards, reports, and alerts, and implements incident-response automations. Provides technical expertise in security operations and incident response while adapting to a fast-paced, cross-functional environment.

Develop and implement cybersecurity automations for security incidents, design security orchestrations, and provide technical expertise to client delivery teams. The role collaborates with cybersecurity SMEs, engineers, vendors, and project stakeholders to create innovative solutions in a fast-paced environment. This remote position may require minimal travel within the continental United States.

Develops, supports, tunes, and deploys cybersecurity solutions. Creates WAF rules, enhances SIEM content including correlations, dashboards, reports, and alerts, and builds automations for security incident response. Provides technical expertise in cybersecurity engineering while collaborating with cross-functional security teams in a fast-paced environment.

Develop, deploy, tune, and support cybersecurity solutions. Create WAF rules, enhance SIEM content including correlations, dashboards, reports, and alerts, and implement incident-response automations. The role supports security operations and incident response in a fast-paced, cross-functional environment, with opportunities to use SOAR, SIEM, cloud, Linux, and endpoint-security platforms.

Configure, test, maintain, troubleshoot, and optimize F5 WAF policies for websites and applications. Collaborate with stakeholders to define security requirements, recommend controls, remediate vulnerabilities, support compliance and security testing, and perform upgrades and preventive maintenance. Provide technical recommendations, briefings, documentation, and training related to WAF capabilities and cybersecurity technologies.

Monitor and analyze network traffic, IDS and SIEM alerts; investigate and resolve security incidents; develop and follow SOC SOPs; produce shift reports; create detection content; advise incident responders; review large datasets for anomalous activity; compose alert communications. Must work overnight shifts onsite.