Teams at Phoenix Cyber

Designs, assesses, configures, and tunes endpoint and Microsoft Office 365 email DLP programs for enterprise clients. Responsibilities include evaluating DLP tools and integrations, configuring policies and reporting, developing system test plans, monitoring and categorizing alerts, coordinating secure information exchange, reducing risk, and supporting policy testing and user acceptance testing. The role is onsite and requires a Top Secret clearance and Forcepoint certification.

Monitors network traffic, IDS alerts, security events, and logs; investigates potential intrusions, creates SIEM and IDS detection content, tracks security investigations, supports incident response, and prepares situation reports. Maintains SOC procedures, communicates security alerts, advises responders, and reviews data for anomalous activity. Requires onsite shift work, including some overnight shifts, in Chandler, Arizona.

Collects and analyzes cyber threat intelligence focused on OT environments, reviews security events and alerts, identifies attack patterns and advanced persistent threats, and provides actionable reporting and briefings. Supports cybersecurity engineers and content developers in closing detection and protection gaps, performs root cause analysis and incident remediation, and serves as the OT cybersecurity subject matter expert.