Teams at Phoenix Cyber

Monitor and analyze network traffic, IDS alerts, SIEM data, security events, and logs; investigate incidents, identify anomalous activity, create detection content, maintain SOC procedures, produce situation reports, and advise incident responders. The role requires shift work, including overnight hours, and active Secret clearance.

Monitor network traffic, IDS alerts, security events, and logs to identify threats and false positives. Develop SOC procedures, review data for anomalies, create SIEM and IDS detection content, manage investigations, issue security communications, and support incident responders. The role requires shift work, incident response experience, a cybersecurity certification, a bachelor’s degree, and an active government clearance.

Analyzes open-source and intelligence reporting to produce actionable cyber threat briefings. Supports cybersecurity engineers and content developers by identifying protection and detection gaps, reviews logs and network events for attacks and advanced persistent threats, performs root cause analysis, supports remediation of OT cybersecurity incidents, and serves as the OT cybersecurity subject matter expert.