Teams at Phoenix Cyber

Support and deploy cybersecurity solutions for client environments: develop and tune SIEM content, create WAF rules, implement automations and SOAR playbooks, respond to incidents, and support security operations in a fast-paced team.

Design, configure, and assess enterprise DLP programs for endpoints and Office 365 email. Develop DLP integrations, reporting, test plans, and monitoring policies. Triage and tune alerts, coordinate with business owners, and support UAT and risk reduction efforts.

Monitor and analyze network traffic, IDS and SIEM alerts; develop and follow SOC SOPs; create detective content; investigate and track security incidents to resolution; produce shift reports; advise responders; review large datasets for anomalies; stay current on vulnerabilities. Shift work onsite required.