Remote Cyber Defense Analyst | SOC & Incident Response

Phoenix Cyber; United States; Remote; USD 90,000 - 120,000; Full time

Job summary

Phoenix Cyber is seeking a Cybersecurity Analyst for our client delivery team in a remote role. You will monitor network traffic, IDS/SIEM events, and security logs, prioritizing genuine threats while reducing false alarms and supporting routine reporting.

You will develop SOC SOPs, review large datasets for anomalies, and craft detection content to strengthen security architecture. You’ll guide incident responders and stay current with vulnerabilities and countermeasures.

Qualifications

• Bachelor's degree required.
• 3 years of security experience required.
• Experience handling incident response.
• Active government clearance.
• Experience with IDS/SIEM and security monitoring.

Responsibilities

• Monitor and analyze network traffic, IDS, security events and logs; prioritize and differentiate between potential intrusion attempts and false alarms.
• Develop, maintain, and follow SOC SOPs.
• Support daily and monthly situation reporting per shift.
• Proactively review large data sets for anomalous activity.
• Create detective content for monitoring devices such as IDS and SIEM and advise on proactive blocks for security architecture.
• Create and track security investigations to resolution.
• Compose security alert notifications and other communications.
• Advise incident responders on steps to investigate and resolve computer security incidents.
• Stay up to date with current vulnerabilities, attacks, and countermeasures.

Skills

Incident response

Security monitoring

Threat analysis

SOC operations

Alerting & reporting

Education

Bachelor's Degree

Tools

CompTIA CySA+ or CEH

Job description

Phoenix Cyber is seeking a Cybersecurity Analyst for our client delivery team in a remote role. You will monitor network traffic, IDS/SIEM events, and security logs, prioritizing genuine threats while reducing false alarms and supporting routine reporting.

You will develop SOC SOPs, review large datasets for anomalies, and craft detection content to strengthen security architecture. You’ll guide incident responders and stay current with vulnerabilities and countermeasures.