Teams at Phoenix Cyber

Monitor and analyze network traffic, IDS alerts, security events, and logs; identify anomalous activity and distinguish intrusions from false alarms. Develop SOC procedures and detection content, conduct and track security investigations, prepare situation reports and alerts, and advise incident responders on resolving cybersecurity incidents. The role is onsite, shift-based, and includes overnight work.

Designs, configures, tests, and tunes endpoint and Microsoft 365 email data loss prevention programs. Assesses DLP infrastructure and tools, develops integrations and reporting, monitors and categorizes alerts, coordinates secure information exchange with business owners, creates risk reduction plans, and supports user acceptance testing. Requires Forcepoint DLP, DSPM, Regex, Forcepoint certifications, and Top Secret clearance.

Collects and analyzes cyber threat intelligence focused on OT environments, producing actionable reports and briefings. Reviews logs, network events, and alerts for attacks and advanced persistent threats; supports protection and detection gap analysis, root cause analysis, and remediation of OT incidents. Serves as the subject matter expert on OT cybersecurity, including ICS and SCADA threats, vulnerabilities, adversary campaigns, and cyber-physical attack paths.