[Remote] Cyber Operations Analyst – SOC Threat Management (Swing Shift)
Note: The job is a remote job and is open to candidates in USA. phia, LLC is a Northern Virginia based small business focused on Cyber Intelligence and Cyber Security. They are hiring a Cyber Operations Analyst to support a Federal agency Cyber Security Operations Center, focusing on advanced cyber threat monitoring and incident analysis while leveraging AI/ML for enhanced SOC efficiency.
Responsibilities
• Support 24x7 monitoring, detection, and management of advanced cyber threats
• Perform deep-dive incident analysis by correlating data from multiple sources to determine impact on critical systems or datasets
• Execute operational processes in support of response efforts to identified security incidents
• Analyze network traffic to identify exploit or intrusion attempts, and recommend, implement, and tune detection mechanisms
• Provide subject matter expertise on network-based attacks, intrusion methodologies, and threat management
• Escalate complex incidents for further investigation and collaborate with other Threat Management team members
• Utilize AI/ML-based tools to detect anomalies, automate triage, and improve threat intelligence
• Conduct threat intelligence analysis to assess risk and adapt defenses using ML-enhanced tools
• Manage email security using ProofPoint and respond promptly to threats
• Configure and optimize Splunk for log analysis, alerting, and incident investigation
• Deploy and monitor SentinelOne agents, FirePower detection rules and configurations, and enforce robust security measures
• Monitor and respond to alerts across platforms including Microsoft Defender XDR, Defender for Endpoint, Defender for Office 365, Azure Entra ID, and Google Cloud SCC
• Tune security policies, maintain visibility into cloud and endpoint environments, and support continuous improvement of security posture
• Identify and implement automation use cases leveraging AI/ML and SOAR capabilities
• Stay current on cybersecurity trends, threat actors, and AI/ML advancements relevant to SOC operations
Skills
• Experienced in cyber/IT security with at least 3+ years in cybersecurity/SOC analysis and operations
• Familiarity with Artificial Intelligence / Machine Learning (AI/ML) capabilities, and their application to cyber analysis and SOC operations
• Skilled in network traffic analysis and threat detection methodologies
• Strong understanding of Boolean logic, TCP/IP fundamentals, network-level exploits, and IDS/IPS technologies
• Familiar with control frameworks, risk management techniques, and cloud security (AWS, Azure, GCP)
• Hands-on experience with cybersecurity automation and SOAR platforms
• Proficient in using ML frameworks for anomaly detection, threat intelligence, and behavioral analysis
• Excellent communication, organizational, and interpersonal skills
• BA/BS in Computer Science, IT, or related field (or equivalent experience)
• 3+ years of direct experience in cybersecurity and SOC analysis & operations
• U.S. Citizenship required
• Ability to obtain Public Trust clearance
• Experience with Splunk, ProofPoint, Cisco FirePower, SentinelOne, and Microsoft Defender suite
• Expertise with IDS/IPS architectures, signature creation, and anomaly-based detection
• Strong data analysis and feature engineering skills for ML-based security models
• Direct experience with AI/ML applications in SOC environments, including automated threat detection and predictive analytics
Benefits
• Medical Insurance
• Dental Insurance
• Vision Insurance
• Life Insurance
• Short Term & Long Term Disability
• 401k Retirement Savings Plan with Company Match
• Paid Holidays
• Paid Time Off (PTO)
• Tuition and Professional Development Assistance
Company Overview
• phia LLC is a Northern Virginia based small business that was established in 2011. It was founded in 2011, and is headquartered in Fairfax, Virginia, USA, with a workforce of 11-50 employees. Its website is http://phiatech.com.
Apply To this Job
Responsibilities
• Support 24x7 monitoring, detection, and management of advanced cyber threats
• Perform deep-dive incident analysis by correlating data from multiple sources to determine impact on critical systems or datasets
• Execute operational processes in support of response efforts to identified security incidents
• Analyze network traffic to identify exploit or intrusion attempts, and recommend, implement, and tune detection mechanisms
• Provide subject matter expertise on network-based attacks, intrusion methodologies, and threat management
• Escalate complex incidents for further investigation and collaborate with other Threat Management team members
• Utilize AI/ML-based tools to detect anomalies, automate triage, and improve threat intelligence
• Conduct threat intelligence analysis to assess risk and adapt defenses using ML-enhanced tools
• Manage email security using ProofPoint and respond promptly to threats
• Configure and optimize Splunk for log analysis, alerting, and incident investigation
• Deploy and monitor SentinelOne agents, FirePower detection rules and configurations, and enforce robust security measures
• Monitor and respond to alerts across platforms including Microsoft Defender XDR, Defender for Endpoint, Defender for Office 365, Azure Entra ID, and Google Cloud SCC
• Tune security policies, maintain visibility into cloud and endpoint environments, and support continuous improvement of security posture
• Identify and implement automation use cases leveraging AI/ML and SOAR capabilities
• Stay current on cybersecurity trends, threat actors, and AI/ML advancements relevant to SOC operations
Skills
• Experienced in cyber/IT security with at least 3+ years in cybersecurity/SOC analysis and operations
• Familiarity with Artificial Intelligence / Machine Learning (AI/ML) capabilities, and their application to cyber analysis and SOC operations
• Skilled in network traffic analysis and threat detection methodologies
• Strong understanding of Boolean logic, TCP/IP fundamentals, network-level exploits, and IDS/IPS technologies
• Familiar with control frameworks, risk management techniques, and cloud security (AWS, Azure, GCP)
• Hands-on experience with cybersecurity automation and SOAR platforms
• Proficient in using ML frameworks for anomaly detection, threat intelligence, and behavioral analysis
• Excellent communication, organizational, and interpersonal skills
• BA/BS in Computer Science, IT, or related field (or equivalent experience)
• 3+ years of direct experience in cybersecurity and SOC analysis & operations
• U.S. Citizenship required
• Ability to obtain Public Trust clearance
• Experience with Splunk, ProofPoint, Cisco FirePower, SentinelOne, and Microsoft Defender suite
• Expertise with IDS/IPS architectures, signature creation, and anomaly-based detection
• Strong data analysis and feature engineering skills for ML-based security models
• Direct experience with AI/ML applications in SOC environments, including automated threat detection and predictive analytics
Benefits
• Medical Insurance
• Dental Insurance
• Vision Insurance
• Life Insurance
• Short Term & Long Term Disability
• 401k Retirement Savings Plan with Company Match
• Paid Holidays
• Paid Time Off (PTO)
• Tuition and Professional Development Assistance
Company Overview
• phia LLC is a Northern Virginia based small business that was established in 2011. It was founded in 2011, and is headquartered in Fairfax, Virginia, USA, with a workforce of 11-50 employees. Its website is http://phiatech.com.
Apply To this Job