Onsite SOC Analyst — Shift Work & Incident Response

phoenixcybersecurity; Phoenix (AZ); On-site; USD 65,000 - 95,000; Full time

Job summary

Phoenix Cybersecurity is a national provider of cybersecurity services and is seeking a SOC Analyst to join our client delivery team in Chandler, AZ. This is an on-site role with shift work, including some overnight hours.

You will monitor network traffic, IDS/IPS, and security events, and support incident response and reporting per shift. The ideal candidate has at least two years of security experience, a CEH or CySA+ certification (or equivalent per DoD 8570), and an active Secret clearance.

Qualifications

• Two years’ experience in security.
• Experience in handling incident response.
• Active Secret Clearance (active).
• CEH or CySA+ with DoD 8570 within 6 months of hire.

Responsibilities

• Monitor and analyze network traffic, IDS, security events and logs; prioritize intrusion attempts vs false alarms.
• Develop, maintain, and follow SOC SOPs.
• Support daily and monthly situation reporting per shift.
• Proactively review large data sets for anomalous activity.
• Create detective content for IDS/SIEM monitoring and advise on proactive blocks.
• Create and track security investigations to resolution.
• Compose security alert notifications and communicate with incident responders.
• Stay up to date with vulnerabilities, attacks, and countermeasures.
• Work a shift schedule and multitask under pressure.

Education

High school diploma or GED

Secret Clearance (active)

CEH certification or CompTIA CySA+

Tools

SIEM

IDS/IPS

Job description

Phoenix Cybersecurity is a national provider of cybersecurity services and is seeking a SOC Analyst to join our client delivery team in Chandler, AZ. This is an on-site role with shift work, including some overnight hours.

You will monitor network traffic, IDS/IPS, and security events, and support incident response and reporting per shift. The ideal candidate has at least two years of security experience, a CEH or CySA+ certification (or equivalent per DoD 8570), and an active Secret clearance.