Jobs at Phoenix Cyber

Develop custom plugins and integrations for cybersecurity software, design data models, and normalize data using log aggregation tools.

Remote Cybersecurity Engineer on a client delivery team designing and implementing security automations and orchestrations (SOAR). Develop integrations and APIs, build incident-response automations using Python and scripting, collaborate with SMEs, vendors, and stakeholders, and adapt in a fast-paced environment.

Onsite SOC Analyst monitoring and analyzing network traffic, IDS and SIEM alerts, triaging incidents, creating detective content, maintaining SOC SOPs, producing shift reports, and advising responders. Requires shift work and ability to multitask under pressure.

Provide SOAR expertise to design and implement security orchestrations and automations, integrate SOAR with SIEM and other security platforms, collaborate with SMEs and vendors, and support cybersecurity consulting engagements.

Implement, tune, deploy, and support security solutions; create WAF rules; develop SIEM content (correlations, enrichments, dashboards, alerts); build automations for incident response; provide cybersecurity engineering expertise within client environments and support security operations and incident response processes.

Responsibilities include providing expertise in cybersecurity, developing and deploying security solutions, creating WAF rules, enhancing SIEM content, and automating responses to security incidents.

The DLP Engineer will assess and configure DLP tools, develop endpoint and email protection programs, and monitor alerts for compliance and security.

The role involves providing cybersecurity expertise, implementing automation for incident response, and collaborating with stakeholders to design security orchestrations.