Cyber Threat Engineer - Detection & Automation (Remote)

phia LLC; Virginia; Hybrid; USD 110,000 - 165,000; Full time

Benefits offered by this job

Medical Insurance

Vision Insurance

Life Insurance

Disability Insurance

401k with match

Paid Holidays

Paid Time Off

Tuition Assistance

Job summary

phia LLC is seeking a Cyber Threat Analyst (Detection & Automation Engineering) to support cyber threat analysis, detection engineering, and operations at a federal agency. Remote work flexibility is offered; US citizenship and Public Trust clearance are required.

You will design automated detections and integrations across SIEM/EDR/SOAR, strengthen detection capabilities, and collaborate with SOC, threat intel, and IR teams.

Qualifications

• Deep experience with cyber threat analysis workflows and detection engineering.
• Strong capabilities in security automation and SI/ML tooling.
• Extensive knowledge of SOC operations, threat intel, and incident response.

Responsibilities

• Design, implement, and maintain automated security detections and integration across enterprise monitoring tools.
• Improve threat detection and response through engineering and automation.
• Build automation workflows to accelerate detection and response.
• Integrate security technologies (SIEM, EDR, SOAR) into a cohesive architecture.
• Translate security needs into technical requirements and implementable solutions.
• Test, validate, and iteratively improve detections and workflows.
• Analyze telemetry to identify anomalies and gaps, propose enhancements.
• Create and maintain technical docs, SOPs, and runbooks for operations.
• Coordinate with SOC, threat intel, and IR teams to align detections with priorities.
• Evaluate emerging security capabilities to enhance detection effectiveness.

Skills

SOAR platforms

AI/SI security

SOC operations

Threat intelligence

Incident response

Network protocols

Windows/Linux/Unix

Cloud platforms

Security architecture

Programming/Python

API integration

Detection engineering

Automation/orchestration

Education

Bachelor's degree

7–17 years experience substitution

Tools

SentinelOne Singularity

Splunk Enterprise Security

Splunk SOAR

Job description

phia LLC is seeking a Cyber Threat Analyst (Detection & Automation Engineering) to support cyber threat analysis, detection engineering, and operations at a federal agency. Remote work flexibility is offered; US citizenship and Public Trust clearance are required.

You will design automated detections and integrations across SIEM/EDR/SOAR, strengthen detection capabilities, and collaborate with SOC, threat intel, and IR teams.