Teams at Phoenix Cyber

Provide SOAR-focused cybersecurity consulting: design and implement security orchestrations and automations, collaborate with SMEs and vendors, and develop incident response automations to improve security operations.

Onsite SOC Analyst monitors and analyzes network traffic, IDS/IDS alerts and SIEM logs, creates detection content, investigates and tracks security incidents, maintains SOC SOPs, produces shift reports, advises incident responders, and works shift schedules including overnight shifts.

Design, assess, and implement enterprise DLP programs for endpoints and Office 365 email. Evaluate DLP tools, develop DLP designs and integrations, configure reporting and policies in monitoring mode, create system test plans, monitor and categorize alerts, coordinate with business owners to remediate risks, tune policies, and conduct UAT.