Teams at Phoenix Cybersecurity

Monitor network traffic, IDS, SIEM events, and security logs; distinguish real threats from false alarms; investigate incidents; create detection content; maintain SOC procedures; advise incident responders; produce situation reports and security communications; and track investigations to resolution while working shifts.

Develops, supports, tunes, and deploys cybersecurity solutions. Responsibilities include creating WAF rules, enhancing SIEM content with correlations, dashboards, reports, enrichments, and alerts, and implementing automated responses to security incidents. The role supports security operations and incident response in a fast-paced, cross-functional environment.

Develop and implement cybersecurity automations for incident response and design security orchestrations with subject-matter experts, engineers, vendors, and stakeholders. The role provides cybersecurity engineering expertise in a fast-paced consulting environment, integrating commercial tools and developing security solutions using Python and other scripting or programming languages. This is a remote position with possible minimal domestic travel.