Cybersecurity Engineer – Incident Response & SIEM Expert

phoenixcybersecurity; Richmond (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

Phoenix Cyber is seeking Cybersecurity Engineers to join our client delivery team. The role focuses on security operations, incident response, and building automated protections across diverse environments.

Responsibilities include developing and tuning security solutions, creating WAF rules, and enhancing SIEM content for incident visibility and response. A STEM degree or 5+ years in the field is preferred, with relevant certifications and a willingness to work in a fast-paced team.

Qualifications

• Degree in a STEM related discipline and/or a minimum 5 years of experience.
• Prior experience or support of Security Operations and Incident Response.
• Excellent understanding of Cyber Security Operations and Incident Response processes.
• IT certifications such as CySA, CEH, etc.
• Security clearance required.

Responsibilities

• Provide technical expertise and real-life experience in creating innovative solutions within the cybersecurity space.
• Candidate will develop, support, tune and deploy security solutions.
• Creates WAF rules to mitigate threats and implement security best practices.
• Develop and enhance SIEM content for Cybersecurity teams, including correlations, enrichments, dashboards, reports, and alerts that appropriately illustrate and characterize web application attacks and mitigation mechanisms.
• Develop and implement automations in response to security incidents.
• Ability to navigate and adapt to a fast-paced ever-changing environment with a team of like-minded, cross-functional individuals.

Skills

Security Operations

Incident Response

Education

STEM degree

CySA/CEH certs

Tools

SOAR

SIEM

IDS/IPS

DLP

WAF

Endpoint Security

Job description

Phoenix Cyber is seeking Cybersecurity Engineers to join our client delivery team. The role focuses on security operations, incident response, and building automated protections across diverse environments.

Responsibilities include developing and tuning security solutions, creating WAF rules, and enhancing SIEM content for incident visibility and response. A STEM degree or 5+ years in the field is preferred, with relevant certifications and a willingness to work in a fast-paced team.