Jobs at Phoenix Cybersecurity

Monitor and analyze network traffic, IDS alerts, security events, and logs; identify threats and false positives; maintain SOC procedures; investigate incidents; create SIEM and IDS detection content; advise incident responders; produce situation reports and security communications; and track investigations through resolution while working scheduled shifts.

Monitor and analyze network traffic, IDS, SIEM events, and security logs; investigate and resolve incidents; identify anomalous activity; develop detection content and proactive blocking recommendations; maintain SOC procedures and reports; communicate alerts; and support incident responders during shift-based onsite operations.

Analyzes open-source and intelligence reporting to produce actionable threat briefings for cybersecurity teams. Supports detection and protection gap identification, reviews logs and network alerts for attacks and advanced persistent threats, performs root cause analysis, and supports remediation of OT cybersecurity incidents. Serves as the subject matter expert for OT security across ICS and SCADA environments.

Provide cybersecurity consulting and technical expertise by developing security incident automations and designing SOAR orchestrations. Collaborate with security SMEs, engineers, vendors, and project stakeholders to implement innovative solutions in a fast-paced environment. The role requires Python development, scripting, COTS integration, API experience, and familiarity with cybersecurity platforms and cloud or container technologies.

Supports a commercial client by designing, developing, and implementing SOAR automations for security incident response. Collaborates with cybersecurity SMEs, engineers, vendors, and stakeholders to create security orchestrations and innovative solutions. The role requires expertise across SOAR, SIEM, IDS/IPS, DLP, WAF, and endpoint security platforms, cybersecurity consulting experience, and onsite client work.

Monitor network traffic, IDS, SIEM events, and security logs; distinguish real threats from false alarms; investigate incidents; create detection content; maintain SOC procedures; advise incident responders; produce situation reports and security communications; and track investigations to resolution while working shifts.

Develops, supports, tunes, and deploys cybersecurity solutions. Responsibilities include creating WAF rules, enhancing SIEM content with correlations, dashboards, reports, enrichments, and alerts, and implementing automated responses to security incidents. The role supports security operations and incident response in a fast-paced, cross-functional environment.

Develop, support, tune, and deploy cybersecurity solutions. Create WAF rules, enhance SIEM content with correlations, dashboards, reports, enrichments, and alerts, and implement incident-response automations. Provide technical expertise for innovative security solutions while collaborating in a fast-paced, cross-functional environment.

Develop, support, tune, and deploy cybersecurity solutions. Create WAF rules, enhance SIEM content with correlations, enrichments, dashboards, reports, and alerts, and implement incident-response automations. Provide technical expertise in cybersecurity engineering while collaborating with cross-functional teams in a fast-paced environment.

Develops, supports, tunes, and deploys cybersecurity solutions. Creates WAF rules, enhances SIEM content with correlations, enrichments, dashboards, reports, and alerts, and implements incident-response automations. Provides technical expertise in cybersecurity operations and incident response while adapting to a fast-paced, cross-functional environment.