Cybersecurity Engineer — SIEM & Incident Response

Phoenix Cyber; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Job summary

Phoenix Cyber is seeking Cybersecurity Engineers to join our client delivery team in the United States. You will provide technical expertise to design, deploy, and optimize security solutions across client environments.

The role emphasizes security operations, incident response, and building automations, with opportunities to work on WAF, SIEM content, and threat mitigation strategies. A strong background in cybersecurity practices is required.

Qualifications

• Degree in STEM or 5+ years of security experience.
• Experience in security operations and incident response.
• Understanding of cybersecurity operations and incident response processes.
• IT certifications such as CySA or CEH.
• Security clearance is required.

Responsibilities

• Provide technical expertise and create innovative cybersecurity solutions.
• Develop, support, tune and deploy security solutions.
• Create WAF rules to mitigate threats and enforce security best practices.
• Develop and enhance SIEM content including correlations, enrichments, dashboards, alerts.
• Develop and implement automations in response to security incidents.
• Navigate a fast-paced environment with cross-functional teams.

Skills

Security Operations

Incident Response

Cybersecurity Certifications (CySA/CEH

Security clearance

Education

STEM degree

Tools

SOAR

SIEM

IDS/IPS

DLP

WAF

Endpoint Security

Cloud platforms (AWS/GCP/Azure)

Job description

Phoenix Cyber is seeking Cybersecurity Engineers to join our client delivery team in the United States. You will provide technical expertise to design, deploy, and optimize security solutions across client environments.

The role emphasizes security operations, incident response, and building automations, with opportunities to work on WAF, SIEM content, and threat mitigation strategies. A strong background in cybersecurity practices is required.