Remote Cybersecurity Analyst - SOC & Incident Response

phoenixcybersecurity; United States; Remote; USD 80,000 - 110,000; Full time

Job summary

Phoenix Cyber is seeking a Cybersecurity Analyst to join our client delivery team in a fully remote capacity across the United States. You will monitor network traffic, IDS, and SIEM events, and develop SOC SOPs to ensure rapid detection and response.

The role requires 3+ years in security, incident response experience, and the ability to obtain government clearance. You will support daily and monthly reporting and stay current with vulnerabilities and countermeasures.

Qualifications

• Bachelor's degree required and minimum 3 years in security.
• Experience in handling incident response.
• Ability to obtain government clearance.

Responsibilities

• Monitor and analyze network traffic, IDS, security events and logs; prioritize and differentiate between intrusion attempts and false alarms.
• Develop, maintain, and follow SOC SOPs.
• Support daily and monthly situation reporting per shift.
• Proactively review large data sets for anomalous activity.
• Create detective content for IDS and SIEM and advise on proactive blocks for security architecture.
• Create and track security investigations to resolution.
• Compose security alert notifications and other communications.
• Advise incident responders on steps to investigate and resolve computer security incidents.
• Stay up to date with current vulnerabilities, attacks, and countermeasures.
• This position requires the ability to work a shift schedule.

Skills

Incident response

Network security

IDS/IPS analysis

SIEM monitoring

Security architecture

Education

Bachelor's degree

Tools

IDS

SIEM

Job description

Phoenix Cyber is seeking a Cybersecurity Analyst to join our client delivery team in a fully remote capacity across the United States. You will monitor network traffic, IDS, and SIEM events, and develop SOC SOPs to ensure rapid detection and response.

The role requires 3+ years in security, incident response experience, and the ability to obtain government clearance. You will support daily and monthly reporting and stay current with vulnerabilities and countermeasures.