Security Operations Lead - Incident Response & Detection

The Phoenix Group; Arlington (VA); On-site; USD 90,000 - 120,000; Full time

Job summary

The Phoenix Group is seeking an experienced Security Operations Analyst to join our security operations center in Arlington, VA. You will monitor cloud and hybrid environments, lead incident response efforts, and drive continuous improvement in detection and alerting.

You will mentor junior analysts, coordinate escalations, and document incidents and runbooks to support FedRAMP-compliant operations and enterprise security posture.

Qualifications

• 3+ years in security operations, SOC/NOC or similar environments.
• Experience investigating alerts, managing escalations, and coordinating incident response in enterprise or cloud.
• Certifications such as Security+ (CompTIA), CySA+, SSCP preferred.

Responsibilities

• Serve as a senior analyst on shift, overseeing security operations, threats, escalations, and incident response.
• Investigate alerts and events using SIEM, cloud tools, and network monitoring; perform root cause analysis.
• Make informed escalation decisions to contain threats and coordinate with stakeholders.
• Document security incidents, maintain shift logs, update runbooks, and ensure clear handoffs.
• Monitor enterprise and cloud environments for malicious activity using SIEM, CSPM, and EDR tools.
• Collaborate to improve detection rules, alert accuracy, escalation procedures, and incident response."
• Contribute to incident reviews, security process improvements, and FedRAMP evidence documentation.
• Mentor junior analysts and build team capability in troubleshooting and threat analysis.
• Support shift leadership by developing escalation standards and operational best practices.

Skills

Incident response

Threat detection

Escalation decisions

Mentoring teammates

Documentation

Education

Security+ (CompTIA)

CySA+

SSCP

Tools

ArcSight

Splunk

QRadar

CrowdStrike

Carbon Black

Defender ATP

AWS Security Hub

Azure Security Center

GCP Security Command Center

SOAR platforms

Job description

The Phoenix Group is seeking an experienced Security Operations Analyst to join our security operations center in Arlington, VA. You will monitor cloud and hybrid environments, lead incident response efforts, and drive continuous improvement in detection and alerting.

You will mentor junior analysts, coordinate escalations, and document incidents and runbooks to support FedRAMP-compliant operations and enterprise security posture.