Teams at Phoenix Cybersecurity

Collects and analyzes open-source and intelligence reporting to produce actionable cyber threat briefings. Reviews logs, network events, and alerts for attacks and advanced persistent threats; supports detection and protection gap analysis, root cause analysis, and incident remediation for OT environments. Serves as the OT cybersecurity subject matter expert and analyzes adversary campaigns and cyber-physical attack paths across ICS and SCADA systems.

Monitors network traffic, IDS alerts, security events, and logs to identify intrusions and false alarms. Develops SOC procedures, reviews data for anomalies, creates SIEM and IDS detection content, manages investigations, communicates alerts, and supports incident responders. The role requires onsite shift work, including overnight shifts, and maintaining awareness of current vulnerabilities and attack methods.

Monitor and analyze network traffic, IDS alerts, security events, and logs; identify threats and false positives; maintain SOC procedures; investigate incidents; create SIEM and IDS detection content; advise incident responders; produce situation reports and security communications; and track investigations through resolution while working scheduled shifts.