Remote Cybersecurity Analyst – SOC & Incident Response

Phoenix Cyber; United States; Remote; USD 90,000 - 120,000; Full time

Job summary

Phoenix Cyber is seeking a Cybersecurity Analyst to join our client delivery team in a remote capacity. The role focuses on monitoring network traffic, IDS, and security events, and to support incident response and security operations.

The ideal candidate has 3+ years in security, with incident response experience and certifications (CySA+/Security+/CISSP). Ability to obtain government clearance is required. This position is remote and supports our national client base.

Qualifications

• Bachelor's degree required.
• 3 years' experience in security.
• Experience in handling incident response.
• Certifications: CySA+, Security+, or CISSP.
• Ability to obtain government clearance.

Responsibilities

• Monitor and analyze network traffic, IDS, security events and logs; prioritize potential intrusions and false alarms.
• Develop, maintain, and follow SOC SOPs.
• Support daily and monthly situation reporting per shift.
• Proactively review large data sets for anomalous activity.
• Create detective content for monitoring devices such as IDS and SIEM and advise on proactive blocks for security architecture.
• Create and track security investigations to resolution.
• Compose security alert notifications and other communications.
• Advise incident responders on steps to investigate and resolve security incidents.
• Stay up to date with vulnerabilities, attacks, and countermeasures.
• This position requires the ability to work a shift schedule.

Skills

Incident response

Security monitoring

Threat analysis

SOC operations

Education

Bachelor's Degree

Tools

IDS/IPS

SIEM

Job description

Phoenix Cyber is seeking a Cybersecurity Analyst to join our client delivery team in a remote capacity. The role focuses on monitoring network traffic, IDS, and security events, and to support incident response and security operations.

The ideal candidate has 3+ years in security, with incident response experience and certifications (CySA+/Security+/CISSP). Ability to obtain government clearance is required. This position is remote and supports our national client base.