Remote Cyber Threat Analyst: Detection & Automation

phia, LLC; Oregon; Híbrido; USD 95.000 - 140.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

401k Matching

Paid Holidays

Paid Time Off

Tuition & Development

Descripción de la vacante

phia LLC is seeking a Cyber Threat Analyst (Detection & Automation Engineering) to support cyber threat analysis and detection engineering for a large Federal agency. The role emphasizes automation, threat intel, incident response, and close collaboration with SOC and IR teams.

This Remote position requires US citizenship and the ability to obtain Public Trust clearance. The candidate will design and maintain AI-enabled detections, strengthen threat workflows, and build integration pipelines

Formación

• Bachelor's degree in cybersecurity or related field and 3–13 years in cybersecurity analysis/engineering.
• Certification or demonstrable proficiency in Python/PowerShell/Bash.
• Experience with detection engineering, automation, incident response, and threat intel workflows.

Responsabilidades

• Design, implement, and maintain automated, AI/SI-enabled security detection and automation across enterprise monitoring.
• Strengthen detection and response through automation, data analysis, and content optimization.
• Build automation/workflows to enhance detection and response and integrate security tech (SIEM, EDR, SOAR).
• Translate operational security needs into technical specs and implement solutions.
• Test, validate, and continuously improve detections and SI/SI workflows based on feedback.

Conocimientos

SOAR platforms

Threat intel lifecycle

Incident response

Python scripting

Educación

Bachelor's degree in cybersecurity

Herramientas

Splunk ES

Splunk SOAR

SentinelOne Singularity

SIEM/EDR/SOAR

Descripción del empleo

phia LLC is seeking a Cyber Threat Analyst (Detection & Automation Engineering) to support cyber threat analysis and detection engineering for a large Federal agency. The role emphasizes automation, threat intel, incident response, and close collaboration with SOC and IR teams.

This Remote position requires US citizenship and the ability to obtain Public Trust clearance. The candidate will design and maintain AI-enabled detections, strengthen threat workflows, and build integration pipelines