Jobs at Phoenix Cyber

Monitor and analyze network traffic, IDS alerts, security events, and logs; identify anomalous activity and distinguish intrusions from false alarms. Develop SOC procedures and detection content, conduct and track security investigations, prepare situation reports and alerts, and advise incident responders on resolving cybersecurity incidents. The role is onsite, shift-based, and includes overnight work.

Designs, configures, tests, and tunes endpoint and Microsoft 365 email data loss prevention programs. Assesses DLP infrastructure and tools, develops integrations and reporting, monitors and categorizes alerts, coordinates secure information exchange with business owners, creates risk reduction plans, and supports user acceptance testing. Requires Forcepoint DLP, DSPM, Regex, Forcepoint certifications, and Top Secret clearance.

Collects and analyzes cyber threat intelligence focused on OT environments, producing actionable reports and briefings. Reviews logs, network events, and alerts for attacks and advanced persistent threats; supports protection and detection gap analysis, root cause analysis, and remediation of OT incidents. Serves as the subject matter expert on OT cybersecurity, including ICS and SCADA threats, vulnerabilities, adversary campaigns, and cyber-physical attack paths.

Monitor network traffic, IDS alerts, security events, and logs to identify threats and false positives. Develop SOC procedures, review data for anomalies, create SIEM and IDS detection content, manage investigations, issue security communications, and support incident responders. The role requires shift work, incident response experience, a cybersecurity certification, a bachelor’s degree, and an active government clearance.

Provides cybersecurity consulting and technical expertise to design and implement security automations and orchestrations. Develops incident-response automations, integrates commercial off-the-shelf software, consumes and develops APIs, and collaborates with security engineers, vendors, subject-matter experts, and project stakeholders. The role is onsite in Northern Virginia and supports security operations teams in fast-paced environments.

Develop and implement SOAR automations for security incident response, design security orchestrations, and provide cybersecurity technical expertise. Collaborate with security SMEs, engineers, vendors, and project stakeholders to deliver innovative solutions in a fast-paced onsite consulting environment.

Monitor network traffic, IDS alerts, security events, and logs to identify threats and false positives. Develop SOC procedures, produce situation reports, investigate incidents, create SIEM and IDS detection content, recommend proactive security blocks, and advise incident responders. The role requires shift work, multitasking under pressure, incident response experience, a bachelor’s degree, a relevant cybersecurity certification, and eligibility for a government clearance.

Develops, supports, tunes, and deploys cybersecurity solutions. Responsibilities include creating WAF rules, enhancing SIEM content and dashboards, characterizing web application attacks, and automating incident response. The role provides technical expertise in security operations and incident response within a fast-paced, cross-functional delivery team.

Develop, support, tune, and deploy cybersecurity solutions; create WAF rules; enhance SIEM correlations, dashboards, reports, and alerts; and implement automated incident-response workflows. Provide technical expertise in innovative cybersecurity solutions while collaborating in a fast-paced, cross-functional environment.

Develops, deploys, tunes, and supports cybersecurity solutions. Responsibilities include creating WAF rules, enhancing SIEM content with correlations, dashboards, reports, and alerts, and implementing incident-response automations. The role requires expertise in security operations and incident response, with preferred experience in SOAR, SIEM, network defenses, endpoint security, Linux, and cloud infrastructure.

Develops, deploys, tunes, and supports cybersecurity solutions. Responsibilities include creating WAF rules, enhancing SIEM content with correlations, dashboards, reports, enrichments, and alerts, and implementing incident-response automations. The role provides technical expertise in cybersecurity operations and incident response while adapting to a fast-paced, cross-functional environment.