Jobs at Phoenix Cybersecurity

Collects and analyzes open-source and intelligence reporting to produce actionable cyber threat briefings. Reviews logs, network events, and alerts for attacks and advanced persistent threats; supports detection and protection gap analysis, root cause analysis, and incident remediation for OT environments. Serves as the OT cybersecurity subject matter expert and analyzes adversary campaigns and cyber-physical attack paths across ICS and SCADA systems.

Monitors network traffic, IDS alerts, security events, and logs to identify intrusions and false alarms. Develops SOC procedures, reviews data for anomalies, creates SIEM and IDS detection content, manages investigations, communicates alerts, and supports incident responders. The role requires onsite shift work, including overnight shifts, and maintaining awareness of current vulnerabilities and attack methods.

Monitor and analyze network traffic, IDS alerts, security events, and logs; identify threats and false positives; maintain SOC procedures; investigate incidents; create SIEM and IDS detection content; advise incident responders; produce situation reports and security communications; and track investigations through resolution while working scheduled shifts.

Provide cybersecurity consulting and technical expertise by developing security incident automations and designing SOAR orchestrations. Collaborate with security SMEs, engineers, vendors, and project stakeholders to implement innovative solutions in a fast-paced environment. The role requires Python development, scripting, COTS integration, API experience, and familiarity with cybersecurity platforms and cloud or container technologies.

Supports a commercial client by designing, developing, and implementing SOAR automations for security incident response. Collaborates with cybersecurity SMEs, engineers, vendors, and stakeholders to create security orchestrations and innovative solutions. The role requires expertise across SOAR, SIEM, IDS/IPS, DLP, WAF, and endpoint security platforms, cybersecurity consulting experience, and onsite client work.

Monitor network traffic, IDS, SIEM events, and security logs; distinguish real threats from false alarms; investigate incidents; create detection content; maintain SOC procedures; advise incident responders; produce situation reports and security communications; and track investigations to resolution while working shifts.

Develops, supports, tunes, and deploys cybersecurity solutions. Responsibilities include creating WAF rules, enhancing SIEM content with correlations, dashboards, reports, enrichments, and alerts, and implementing automated responses to security incidents. The role supports security operations and incident response in a fast-paced, cross-functional environment.

Develop, support, tune, and deploy cybersecurity solutions. Create WAF rules, enhance SIEM content with correlations, dashboards, reports, enrichments, and alerts, and implement incident-response automations. Provide technical expertise for innovative security solutions while collaborating in a fast-paced, cross-functional environment.

Develop, support, tune, and deploy cybersecurity solutions. Create WAF rules, enhance SIEM content with correlations, enrichments, dashboards, reports, and alerts, and implement incident-response automations. Provide technical expertise in cybersecurity engineering while collaborating with cross-functional teams in a fast-paced environment.

Develops, supports, tunes, and deploys cybersecurity solutions. Creates WAF rules, enhances SIEM content with correlations, enrichments, dashboards, reports, and alerts, and implements incident-response automations. Provides technical expertise in cybersecurity operations and incident response while adapting to a fast-paced, cross-functional environment.