Jobs at Phoenix Cyber

Monitor and analyze network traffic, IDS alerts, security events, and logs to identify and prioritize potential intrusions. Develop SOC procedures, reports, detection content, and security alerts; investigate incidents through resolution; advise responders; and track current vulnerabilities and countermeasures. This onsite Chandler, Arizona role requires shift work, including overnight schedules, an active Secret clearance, U.S. citizenship, incident response experience, and relevant cybersecurity certifications.

Monitor and analyze network traffic, security events, logs, and anomalous activity; distinguish intrusion attempts from false alarms; develop SOC procedures and detection content; conduct security investigations; support incident response; prepare situation reports and security communications; and track current vulnerabilities and countermeasures while working a shift schedule.

Analyze open-source and intelligence reporting to produce actionable threat intelligence, briefings, and detection insights. Review logs, network events, and alerts for attacks and advanced persistent threats. Support root cause analysis and remediation for OT cybersecurity incidents, identify protection and detection gaps, and serve as the subject matter expert for OT security issues.

Provide cybersecurity consulting and technical expertise by developing security automations and orchestrations for incident response. Collaborate with subject matter experts, engineers, vendors, and project stakeholders to design and implement innovative security solutions in a fast-paced client delivery environment. The role focuses on SOAR development, cybersecurity platform integration, API usage, scripting, and software development.

Provides cybersecurity consulting expertise for a commercial client onsite. Develops and implements SOAR automations responding to security incidents, designs security orchestrations with engineers, SMEs, vendors, and stakeholders, and delivers innovative solutions in a fast-paced security operations environment.

Monitor network traffic, IDS alerts, security events, and logs; investigate anomalous activity and security incidents; develop SOC procedures, situation reports, detection content, and alert communications; advise incident responders; track investigations through resolution; and remain current on vulnerabilities and attack countermeasures while working shifts.

Develop, deploy, tune, and support cybersecurity solutions; create WAF rules; enhance SIEM correlations, enrichments, dashboards, reports, and alerts; and implement incident-response automations. The role provides technical expertise for security operations and incident response in a fast-paced, cross-functional environment.

Develops, deploys, tunes, and supports cybersecurity solutions. Creates WAF rules, enhances SIEM content including correlations, dashboards, reports, and alerts, and implements incident-response automations. Provides technical expertise in security operations and incident response while adapting to a fast-paced, cross-functional environment.

Develops, supports, tunes, and deploys cybersecurity solutions. Creates WAF rules, enhances SIEM content including correlations, dashboards, reports, and alerts, and builds automations for security incident response. Provides technical expertise in cybersecurity engineering while collaborating with cross-functional security teams in a fast-paced environment.

Develop, deploy, tune, and support cybersecurity solutions. Create WAF rules, enhance SIEM content including correlations, dashboards, reports, and alerts, and implement incident-response automations. The role supports security operations and incident response in a fast-paced, cross-functional environment, with opportunities to use SOAR, SIEM, cloud, Linux, and endpoint-security platforms.