Jobs at Phoenix Cyber

Develop custom plugins and integrations for cybersecurity software, design data models, and normalize data using log aggregation tools.

Design and implement SOAR-driven automations and integrations to respond to security incidents. Collaborate with SMEs, vendors, and stakeholders to develop security orchestrations and solutions in a fast-paced consulting environment.

Monitor and analyze network traffic, IDS, SIEM and security logs; create detective content, investigate incidents to resolution, support SOC SOPs and reporting, advise responders, and maintain awareness of vulnerabilities. Must work shift schedule and multitask under pressure.

Perform vulnerability and threat assessments, prioritize risks, develop and implement remediation strategies, provide technical leadership and SME support, collaborate with cross-functional teams for compliance, and research emerging vulnerability and attack surface trends.

Monitor and analyze network traffic, IDS and SIEM alerts; investigate and resolve security incidents; create detective content and SOPs; support shift-based reporting; advise responders and stay current on threats and countermeasures.

Design, deploy, tune and support security solutions (SIEM, WAF, SOAR, endpoint). Create WAF rules, develop SIEM content and automations, respond to incidents, and provide cybersecurity engineering expertise to client delivery teams.

Provide cybersecurity engineering support for client delivery: develop, deploy, tune, and support security solutions; create WAF rules; build SIEM content (correlations, dashboards, alerts); implement automations and incident response workflows; and collaborate in a fast-paced, cross-functional environment to strengthen security operations.

Design, deploy, tune, and support security solutions; create WAF rules; develop SIEM content (correlations, dashboards, alerts); implement incident response automations; provide cybersecurity engineering expertise and support security operations.

Provide SOAR expertise to design and implement security orchestrations and automations, integrate SOAR with SIEM and other security platforms, collaborate with SMEs and vendors, and support cybersecurity consulting engagements.

Responsibilities include providing expertise in cybersecurity, developing and deploying security solutions, creating WAF rules, enhancing SIEM content, and automating responses to security incidents.

The DLP Engineer will assess and configure DLP tools, develop endpoint and email protection programs, and monitor alerts for compliance and security.

The role involves providing cybersecurity expertise, implementing automation for incident response, and collaborating with stakeholders to design security orchestrations.