Jobs at Phoenix Cyber

Analyzes open-source and intelligence reporting to produce actionable cyber threat briefings. Supports cybersecurity engineers and content developers by identifying protection and detection gaps, reviews logs and network events for attacks and advanced persistent threats, performs root cause analysis, supports remediation of OT cybersecurity incidents, and serves as the OT cybersecurity subject matter expert.

Provides cybersecurity consulting and technical expertise to design and implement security automations and orchestrations. Develops incident-response automations, integrates commercial off-the-shelf software, consumes and develops APIs, and collaborates with security engineers, vendors, subject-matter experts, and project stakeholders. The role is onsite in Northern Virginia and supports security operations teams in fast-paced environments.

Develop and implement SOAR automations for security incident response, design security orchestrations, and provide cybersecurity technical expertise. Collaborate with security SMEs, engineers, vendors, and project stakeholders to deliver innovative solutions in a fast-paced onsite consulting environment.

Monitor network traffic, IDS alerts, security events, and logs to identify threats and false positives. Develop SOC procedures, produce situation reports, investigate incidents, create SIEM and IDS detection content, recommend proactive security blocks, and advise incident responders. The role requires shift work, multitasking under pressure, incident response experience, a bachelor’s degree, a relevant cybersecurity certification, and eligibility for a government clearance.

Develops, supports, tunes, and deploys cybersecurity solutions. Responsibilities include creating WAF rules, enhancing SIEM content and dashboards, characterizing web application attacks, and automating incident response. The role provides technical expertise in security operations and incident response within a fast-paced, cross-functional delivery team.

Develop, support, tune, and deploy cybersecurity solutions; create WAF rules; enhance SIEM correlations, dashboards, reports, and alerts; and implement automated incident-response workflows. Provide technical expertise in innovative cybersecurity solutions while collaborating in a fast-paced, cross-functional environment.

Develops, deploys, tunes, and supports cybersecurity solutions. Responsibilities include creating WAF rules, enhancing SIEM content with correlations, dashboards, reports, and alerts, and implementing incident-response automations. The role requires expertise in security operations and incident response, with preferred experience in SOAR, SIEM, network defenses, endpoint security, Linux, and cloud infrastructure.

Develops, deploys, tunes, and supports cybersecurity solutions. Responsibilities include creating WAF rules, enhancing SIEM content with correlations, dashboards, reports, enrichments, and alerts, and implementing incident-response automations. The role provides technical expertise in cybersecurity operations and incident response while adapting to a fast-paced, cross-functional environment.

Configure, test, maintain, troubleshoot, and optimize F5 WAF policies for websites and applications. Collaborate with stakeholders to define security requirements, recommend controls, perform vulnerability remediation and compliance activities, and support security testing. The role also includes patching, upgrades, configuration changes, reliability improvements, technical recommendations, documentation, briefings, and training.

Monitor and analyze network traffic, IDS and SIEM alerts; investigate and resolve security incidents; create detective content and SOPs; support shift-based reporting; advise responders and stay current on threats and countermeasures.