Remote Cyber Threat Analyst — Detection & Automation

Phia LLC; Fairfax (VA); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

Short/Long Disability

401k with Company Match

Paid Holidays

Paid Time Off

Tuition and Professional Development

Job summary

phia LLC is seeking a Cyber Threat Analyst (Detection & Automation Engineering) to support cyber threat analysis and detection engineering for a large Federal agency. The role requires collaboration with security operations, threat intelligence, and incident response, plus strong automation and documentation practices.

Remote work flexibility is offered for U.S. Citizens located in the United States with Public Trust vetting.

Qualifications

• Bachelors degree + 3 to 13 years in cybersecurity analysis and engineering (4+ years can substitute a degree).
• Programming/scripting certification or demonstrated proficiency (e.g., Python, PowerShell).
• Certifications such as GCIA/GCIH, CySA+, or equivalent are preferred.
• Familiarity with NIST/CIS/ATT&CK, ISO 27001/27002, FedRAMP, and related directives.

Responsibilities

• Design, implement, and maintain automated AI/SI security detection across enterprise monitoring tools.
• Enhance threat detection and response via detection engineering and automation.
• Build automation and integration workflows to improve detection/response.
• Integrate SIEM/EDR/SOAR and threat intel into a cohesive detection architecture.
• Translate security needs into technical specs and implement solutions.
• Test, validate, and continuously improve detections and workflows.

Skills

Python

PowerShell

Bash

APIs integration

Threat analysis

Incident response

Education

Bachelor's degree

4+ years cybersecurity experience substituted for degree

Programming/scripting certification

Tools

SentinelOne Singularity Hyperautomation

Splunk Enterprise Security

Splunk SOAR

Job description

phia LLC is seeking a Cyber Threat Analyst (Detection & Automation Engineering) to support cyber threat analysis and detection engineering for a large Federal agency. The role requires collaboration with security operations, threat intelligence, and incident response, plus strong automation and documentation practices.

Remote work flexibility is offered for U.S. Citizens located in the United States with Public Trust vetting.