Cybersecurity Engineer (SOAR) [JOB ID 20260828]

Phoenix Cyber; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

Phoenix Cyber is seeking Cybersecurity Engineers for our client delivery team. This is a remote, work-from-home position with minimal travel within the continental United States.

You will provide technical expertise, develop automations for incident response, and collaborate across cross-functional teams to design security orchestrations in a fast-paced environment. A STEM degree or 5+ years in the field is required.

Qualifications

• Degree in STEM and/or 5+ years experience in cybersecurity or software development
• 5+ years of Python development experience
• Working knowledge of Bash and PowerShell
• ≥3 years in software development with COTS integration
• Experience with API development/consumption
• Prior consulting experience

Responsibilities

• Provide technical expertise to create innovative cybersecurity solutions
• Develop and implement automations in response to security incidents
• Collaborate with SMEs, engineers, vendors, and stakeholders on security orchestrations
• Navigate a fast-paced, cross-functional teams environment

Skills

Python

Bash

PowerShell

APIs development

Consulting

Education

B.S. in STEM or related field

Tools

Docker

Kubernetes

AWS / GCP / Azure

Elasticsearch / Logstash / Kibana (ELK)

Splunk

Swimlane

Cyber Triage

Phantom

Kafka / Beats

Job description

Phoenix Cyberis looking for CybersecurityEngineers to join our client delivery team. This is a remote, work-from-home position with the possibility of minimal travel within the continental United States.

Requirements:

• Degree in a STEM related discipline and/or a minimum 5 years of experience
• 5+ years of experience developing with Python
• Working knowledge of scripting languages Bash and PowerShell
• At least 3 years of experience in software development with COTS integration
• Experience in API development/consumption
• Prior consulting experience

Nice to have:

• Demonstrated proficiency in cyber security platforms: SOAR, SIEM, IDS/IPS, DLP, WAF, Endpoint Security
• Experience with SOAR tools, Swimlane, Cyber Triage, Phantom
• Experience with container services (Docker, Kubernetes, etc.)
• Cloud infrastructure experience (AWS, Google, or Azure)
• Experience with the ELK (Elasticsearch, Logstash, Kibana) stack, Elastic Cloud on Kubernetes (ECK), Kafka, Beats, and/or Splunk
• Experience using Agile methodologies
• Government security clearance

Responsibilities:

• Provide technical expertise and real-life experience in creating innovative solutions within the cybersecurity space
• Develop and implement automations in response to security incidents
• Proactively collaborating, developing, and designing security orchestrations with SMEs/engineers, vendors, and project stakeholders
• Ability to navigate and adapt to a fast-paced ever-changing environment with a team of like-minded, cross-functional individuals

Phoenix Cyber is a national provider of cybersecurity engineering services, operations services, sustainment services and managed security services to organizations determined to strengthen their security posture and enhance the processes and technology used by their security operations team.

Phoenix Cyberis an equal opportunity employer and complies with Executive Order 11246, Section 503 of the Rehabilitation Act of 1973, the Vietnam Era Veteran's Readjustment Assistance Act (VEVRAA), all amendments to these regulations, and applicable executive orders, federal, and state regulations. Applicants are considered without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, and/or veteran status.

Phoenix Cyberparticipates in E-Verify to confirm the employment eligibility of all newly-hired employees. To learn more about E-Verify, including your rights and responsibilities, go to https://www.e-verify.gov/