Cybersecurity Engineer — Incident Response & SIEM Expert

Phoenix Cyber; Alexandria (VA); On-site; USD 110,000 - 170,000; Full time

Job summary

Phoenix Cyber is seeking Cybersecurity Engineers to join our client delivery team in a fast-paced environment. You will work on creating and tuning security solutions, developing SIEM content, and deploying WAF rules to mitigate threats.

The role requires a STEM degree or 5+ years of experience, experience with Security Operations and Incident Response, and security clearances. Certifications such as CySA/CEH are preferred, with cloud platform familiarity a plus.

Qualifications

• Degree in a STEM related discipline and/or a minimum 5 years of experience.
• Prior experience or support of Security Operations and Incident Response
• Excellent understanding of Cyber Security Operations and Incident Response processes
• IT certifications such as CySA, CEH, etc
• Security clearance required

Responsibilities

• Provide technical expertise and real-life experience in creating innovative solutions within the cybersecurity space
• Candidate will develop, support, tune and deploy security solutions
• Creates WAF rules to mitigate threats and implement security best practices
• Develop and enhance SIEM content for Cybersecurity teams, including correlations, enrichments, dashboards, reports, and alerts that appropriately illustrate and characterize web application attacks and mitigation mechanisms
• Develop and implement automations in response to security incidents
• Ability to navigate and adapt to a fast-paced ever-changing environment with a team of like-minded, cross-functional individuals

Skills

Security Operations

Incident Response

Cybersecurity

Security Clearance

Education

STEM degree or equivalent experience

Certifications: CySA, CEH (preferred)

Tools

SOAR

SIEM

IDS/IPS

DLP

WAF

Endpoint Security

Job description

Phoenix Cyber is seeking Cybersecurity Engineers to join our client delivery team in a fast-paced environment. You will work on creating and tuning security solutions, developing SIEM content, and deploying WAF rules to mitigate threats.

The role requires a STEM degree or 5+ years of experience, experience with Security Operations and Incident Response, and security clearances. Certifications such as CySA/CEH are preferred, with cloud platform familiarity a plus.