Cybersecurity Engineer (SOAR) [JOB ID 20250530]

Phoenix Cyber; United States; On-site; USD 90,000 - 130,000; Full time

Job summary

Phoenix Cyber seeks experienced Cybersecurity Engineers for a remote position within our client delivery team. Ideal candidates will possess a strong background in software development with extensive experience in Python, scripting, and API development. The role includes providing technical solutions and implementing security automations. Join us in enhancing cybersecurity for various organizations across the United States.

Benefits

Remote work flexibility

Minimal travel opportunities

Equal opportunity employer

Qualifications

• Minimum 5 years of experience developing with Python.
• Experience in API development and consumption.
• Proficiency in scripting languages like Bash and PowerShell.

Responsibilities

• Provide technical expertise in cybersecurity solutions.
• Develop automations in response to security incidents.
• Collaborate with SMEs to design security orchestrations.

Skills

Python

Bash

PowerShell

COTS integration

C#

JavaScript

Node.js

API development

SOAR platforms

SIEM

DLP

WAF

Endpoint Security

Agile methodologies

Education

Degree in a STEM related discipline

Tools

Docker

Kubernetes

AWS

Google Cloud

Azure

ELK stack

Elastic Cloud on Kubernetes (ECK)

Kafka

Beats

Splunk

Job description

Phoenix Cyberis looking for CybersecurityEngineers to join our client delivery team. This is a remote, work-from-home position with the possibility of minimal travel within the continental United States.

Requirements:

• Degree in a STEM related discipline and/or a minimum 5 years of experience
• 5+ years of experience developing with Python
• Working knowledge of scripting languages Bash and PowerShell
• At least 3 years of experience in software development with COTS integration
• Working knowledge of one or more programming languages such as C#, JavaScript, or Node.js
• Experience in API development/consumption
• Prior consulting experience

Nice to have:

• Demonstrated proficiency in cyber security platforms: SOAR, SIEM, IDS/IPS, DLP, WAF, Endpoint Security
• Experience with SOAR tools, Swimlane, Cyber Triage, Phantom
• Experience with container services (Docker, Kubernetes, etc.)
• Linux administration experience
• Cloud infrastructure experience (AWS, Google, or Azure)
• Experience with the ELK (Elasticsearch, Logstash, Kibana) stack, Elastic Cloud on Kubernetes (ECK), Kafka, Beats, and/or Splunk
• Experience using Agile methodologies
• Prior government, large enterprise experience
• Government security clearance

Responsibilities:

• Provide technical expertise and real-life experience in creating innovative solutions within the cybersecurity space
• Develop and implement automations in response to security incidents
• Proactively collaborating, developing, and designing security orchestrations with SMEs/engineers, vendors, and project stakeholders
• Ability to navigate and adapt to a fast-paced ever-changing environment with a team of like-minded, cross-functional individuals

Phoenix Cyber is a national provider of cybersecurity engineering services, operations services, sustainment services and managed security services to organizations determined to strengthen their security posture and enhance the processes and technology used by their security operations team.

Phoenix Cyberis an equal opportunity employer and complies with Executive Order 11246, Section 503 of the Rehabilitation Act of 1973, the Vietnam Era Veteran's Readjustment Assistance Act (VEVRAA), all amendments to these regulations, and applicable executive orders, federal, and state regulations. Applicants are considered without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, and/or veteran status.

Phoenix Cyberparticipates in E-Verify to confirm the employment eligibility of all newly-hired employees. To learn more about E-Verify, including your rights and responsibilities, go to https://www.e-verify.gov/