Jobs at Phoenix Cyber

Designs, assesses, configures, and tunes endpoint and Microsoft Office 365 email DLP programs for enterprise clients. Responsibilities include evaluating DLP tools and integrations, configuring policies and reporting, developing system test plans, monitoring and categorizing alerts, coordinating secure information exchange, reducing risk, and supporting policy testing and user acceptance testing. The role is onsite and requires a Top Secret clearance and Forcepoint certification.

Monitors network traffic, IDS alerts, security events, and logs; investigates potential intrusions, creates SIEM and IDS detection content, tracks security investigations, supports incident response, and prepares situation reports. Maintains SOC procedures, communicates security alerts, advises responders, and reviews data for anomalous activity. Requires onsite shift work, including some overnight shifts, in Chandler, Arizona.

Collects and analyzes cyber threat intelligence focused on OT environments, reviews security events and alerts, identifies attack patterns and advanced persistent threats, and provides actionable reporting and briefings. Supports cybersecurity engineers and content developers in closing detection and protection gaps, performs root cause analysis and incident remediation, and serves as the OT cybersecurity subject matter expert.

Monitor and analyze network traffic, security events, logs, and anomalous activity; distinguish intrusion attempts from false alarms; develop SOC procedures and detection content; conduct security investigations; support incident response; prepare situation reports and security communications; and track current vulnerabilities and countermeasures while working a shift schedule.

Provide cybersecurity consulting and technical expertise by developing security automations and orchestrations for incident response. Collaborate with subject matter experts, engineers, vendors, and project stakeholders to design and implement innovative security solutions in a fast-paced client delivery environment. The role focuses on SOAR development, cybersecurity platform integration, API usage, scripting, and software development.

Provides cybersecurity consulting expertise for a commercial client onsite. Develops and implements SOAR automations responding to security incidents, designs security orchestrations with engineers, SMEs, vendors, and stakeholders, and delivers innovative solutions in a fast-paced security operations environment.

Monitor network traffic, IDS alerts, security events, and logs; investigate anomalous activity and security incidents; develop SOC procedures, situation reports, detection content, and alert communications; advise incident responders; track investigations through resolution; and remain current on vulnerabilities and attack countermeasures while working shifts.

Develop, deploy, tune, and support cybersecurity solutions; create WAF rules; enhance SIEM correlations, enrichments, dashboards, reports, and alerts; and implement incident-response automations. The role provides technical expertise for security operations and incident response in a fast-paced, cross-functional environment.

Develops, deploys, tunes, and supports cybersecurity solutions. Creates WAF rules, enhances SIEM content including correlations, dashboards, reports, and alerts, and implements incident-response automations. Provides technical expertise in security operations and incident response while adapting to a fast-paced, cross-functional environment.

Develops, supports, tunes, and deploys cybersecurity solutions. Creates WAF rules, enhances SIEM content including correlations, dashboards, reports, and alerts, and builds automations for security incident response. Provides technical expertise in cybersecurity engineering while collaborating with cross-functional security teams in a fast-paced environment.

Develop, deploy, tune, and support cybersecurity solutions. Create WAF rules, enhance SIEM content including correlations, dashboards, reports, and alerts, and implement incident-response automations. The role supports security operations and incident response in a fast-paced, cross-functional environment, with opportunities to use SOAR, SIEM, cloud, Linux, and endpoint-security platforms.