Remote Cyber Threat Analyst — Detection & Automation

phia, LLC; Idaho; Remote; USD 110,000 - 165,000; Full time

Benefits offered by this job

Medical Insurance

Vision Insurance

Life Insurance

Short Term Disability

Long Term Disability

401k Retirement Savings Plan with 公司匹配

Job summary

phia LLC is seeking a Cyber Threat Analyst to support detection engineering and automation within a Federal agency context. This remote role requires active collaboration with SOC, threat intel, and incident response teams to optimize detections and automate workflows.

The candidate will analyze telemetry, develop automation, and maintain documentation and runbooks, while ensuring compliance with security controls and incident response processes.

Qualifications

• Bachelor's degree in CS or related field with 3–13 years in cybersecurity analysis.

Responsibilities

• Design, implement, and maintain automated, AI/SI-enabled security detection and integration across enterprise monitoring.
• Strengthen threat detection and response through engineering, security automation, and data analysis.
• Build automation and integration workflows to improve detection and response.
• Integrate security technologies into a cohesive detection architecture.
• Translate security needs into technical specifications and implement solutions.

Skills

SOAR platforms

AI security

SOC operations

Threat intelligence

Incident response

Network protocols

Operating systems

Cloud platforms

Security architecture

Programming/scripting

API integration

Detection engineering

Security automation

Education

Bachelor's degree

Tools

SentinelOne Singularity Hyperautomation

Splunk Enterprise Security

Splunk SOAR

AWS

Azure

GCP

Job description

phia LLC is seeking a Cyber Threat Analyst to support detection engineering and automation within a Federal agency context. This remote role requires active collaboration with SOC, threat intel, and incident response teams to optimize detections and automate workflows.

The candidate will analyze telemetry, develop automation, and maintain documentation and runbooks, while ensuring compliance with security controls and incident response processes.