Phoenix Cybersecurity Benefits Overview

Monitor network traffic, IDS, SIEM events, and security logs; investigate incidents, identify anomalous activity, create detection content, maintain SOC procedures, produce situation reports, and advise incident responders. The role requires shift work, including overnights, and involves communicating security alerts and tracking investigations through resolution.

Designs, assesses, configures, and tests endpoint and Microsoft Office 365 email data loss prevention programs for enterprise clients. Responsibilities include evaluating DLP tools, developing integrations and reporting, configuring monitoring policies, reviewing alerts, coordinating secure information exchange, tuning policies, and supporting risk reduction and user acceptance testing. Requires Top Secret clearance, Forcepoint certifications, DSPM experience, and Regex knowledge.

Collects and analyzes open-source and intelligence reporting to produce actionable cyber threat briefings. Reviews logs, network events, and alerts for attacks and advanced persistent threats; supports detection and protection gap analysis, root cause analysis, and incident remediation for OT environments. Serves as the OT cybersecurity subject matter expert and analyzes adversary campaigns and cyber-physical attack paths across ICS and SCADA systems.