Jobs at Phoenix Cybersecurity

Monitor network traffic, IDS, SIEM events, and security logs; distinguish real threats from false alarms; investigate incidents; create detection content; maintain SOC procedures; advise incident responders; produce situation reports and security communications; and track investigations to resolution while working shifts.

Develops, supports, tunes, and deploys cybersecurity solutions. Responsibilities include creating WAF rules, enhancing SIEM content with correlations, dashboards, reports, enrichments, and alerts, and implementing automated responses to security incidents. The role supports security operations and incident response in a fast-paced, cross-functional environment.

Develop and implement cybersecurity automations for incident response and design security orchestrations with subject-matter experts, engineers, vendors, and stakeholders. The role provides cybersecurity engineering expertise in a fast-paced consulting environment, integrating commercial tools and developing security solutions using Python and other scripting or programming languages. This is a remote position with possible minimal domestic travel.

Develop, support, tune, and deploy cybersecurity solutions. Create WAF rules, enhance SIEM content with correlations, dashboards, reports, enrichments, and alerts, and implement incident-response automations. Provide technical expertise for innovative security solutions while collaborating in a fast-paced, cross-functional environment.

Develop, support, tune, and deploy cybersecurity solutions. Create WAF rules, enhance SIEM content with correlations, enrichments, dashboards, reports, and alerts, and implement incident-response automations. Provide technical expertise in cybersecurity engineering while collaborating with cross-functional teams in a fast-paced environment.

Develops, supports, tunes, and deploys cybersecurity solutions. Creates WAF rules, enhances SIEM content with correlations, enrichments, dashboards, reports, and alerts, and implements incident-response automations. Provides technical expertise in cybersecurity operations and incident response while adapting to a fast-paced, cross-functional environment.

Configure, test, maintain, troubleshoot, patch, and optimize F5 WAF environments supporting websites and applications. Collaborate with stakeholders to define security requirements, develop WAF policies, recommend security controls, remediate vulnerabilities, and support compliance testing. Provide technical guidance, documentation, briefings, and training related to WAF capabilities and emerging security technologies.

Monitor and analyze network traffic, IDS and SIEM alerts; investigate and track security incidents to resolution; create detection content and SOPs; support shift reporting and advise incident responders.

Provide SOAR-focused cybersecurity consulting: design and implement security orchestrations and automations, respond to incidents, collaborate with SMEs, vendors, and stakeholders, and apply hands-on expertise across SIEM, IDS/IPS, DLP, WAF, and endpoint security.