SalariesSign in
AboutPrivacyTerms
Cyber Security / SOC Analyst (Weekend Nights)
phia, LLC

Cyber Security / SOC Analyst (Weekend Nights)

United StatesRemoteFull-time
Pay Range: $80k - $140k / annual
Posted Oct 2
Apply

Job Description

At phia we hire talented and passionate people who are focused on collaborative, meaningful work, providing technical and operational subject matter expertise and support services to our partners and clients.

phia is hiring a Cyber Operations Analyst (SOC Threat Management) to support 24x7 operations in a large Federal agency Cyber Security Operations Center (CSOC). This role focuses on advanced cyber threat monitoring & detection, incident analysis and management, and leveraging AI/ML and automation to enhance SOC efficiency. The ideal candidate will have expertise in IT and cyber incident management, cyber threat intelligence and intrusion analysis, and hands-on experience with modern security tools and cloud environments.

This shift-based position offers REMOTE work flexibility. Qualified candidates will be U.S. Citizens and located in the United States, able to achieve Public Trust security vetting approval.

This Weekday Night shift position will have the following primary work hours:

  • Initial Temporary Orientation & Qualification: Monday - Friday, 7:00am-3:30pm (ET)
  • Final Assigned Shift: Monday - Friday, 11:00pm-7:30am (ET)

What You’ll Do:

  • Support 24x7 monitoring, detection, and management of advanced cyber threats.
  • Execute operational processes in support of response efforts to identified security incidents.
  • Perform deep-dive incident analysis by correlating data from multiple sources to determine impact on critical systems or datasets.
  • Interpret output from the SIEM, incident reporting platforms and mailboxes, and phone calls to identify potential security incidents.
  • Handle incidents as defined in Playbooks and SOPs.
  • Identify security problems which may require mitigating controls, and advise on remediation actions.
  • Analyze threat intelligence to assess risk and adapt defenses.
  • Provide subject matter expertise on network-based attacks, intrusion methodologies, and threat management.
  • Escalate complex incidents for further investigation and collaborate with other Threat Management team members.
  • Utilize AI/ML-based tools to detect anomalies, automate triage, and improve threat intelligence.
  • Provide input and analysis on how to leverage Artificial Intelligence, Machine Learning, and SOAR capabilities to improve CSOC efficiency and accuracy.
  • Stay current on cybersecurity trends, threat actors, and AI/ML advancements relevant to SOC operations.
  • Tune security policies, maintain visibility into cloud and endpoint environments, and support continuous improvement of the organization’s security posture.
  • Identify and support automation use cases, including the use of AI/ML to enhance SOC capabilities.
  • Collaborate across the larger organization to provide SOC enhancement capabilities through the use of automation and AI.

Who You Are:

  • Experienced in cyber/IT security with at least 3 years of experience in IT and/or SOC operations.
  • Familiar with both command and sophisticated threat actor tools and techniques.
  • Skilled in network traffic analysis and threat detection methodologies.
  • Strong understanding of Boolean logic, TCP/IP fundamentals, network-level exploits, and IDS/IPS technologies and signature development & optimization.
  • Familiar with IT control frameworks, risk management techniques, and cloud security (AWS, Azure, GCP).
  • Hands-on experience with cybersecurity automation and SIEM/SOAR platforms.
  • Proficient in using ML frameworks for anomaly detection, threat intelligence, and behavioral analysis.
  • Skills in data analysis and feature engineering, with the ability to process and transform large datasets from various sources (e.g., logs, network traffic) to extract relevant features for machine learning models aimed at identifying security incidents and vulnerabilities.
  • Familiarity with the application of AI/ML techniques in cybersecurity, including but not limited to automated threat detection, incident response automation, and predictive analytics. Experience in evaluating the effectiveness of AI/ML solutions in a SOC environment is a plus.
  • Excellent communication, organizational, and interpersonal skills.

Preferred Skills:

  • Experience with Splunk, ProofPoint, Cisco FirePower, SentinelOne, Microsoft Defender Microsoft Defender for Cloud Apps, Defender for Endpoint, Defender XDR, Defender for Office 365, Azure Entra ID, and Google Cloud Security Command Center (SCC).
  • Expertise with IDS/IPS architectures, signature creation, and anomaly-based detection.
  • Strong data analysis and feature engineering skills for ML-based security models.
  • Direct experience with AI/ML applications in SOC environments, including automated threat detection and predictive analytics.

Required Education + Experience:

  • BA/BS in Computer Science, IT, or related field (or equivalent experience) with 3+ years of direct experience in cybersecurity and SOC analysis & operations

...or...

  • 7+ years of experience in cybersecurity and IT and SOC analysis & operations

Certifications (desired, or similar):

  • CompTIA Security+
  • Certified Ethical Hacker (CEH)
  • GIAC Certified Enterprise Defender (GCED)
  • GIAC Certified Intrusion Analyst (GCIA)
  • GIAC Certified Detection Analyst (GCDA)
  • GIAC Certified Incident Handler (GCIH)
  • GIAC Defending Advanced Threats (GDAT)
  • GIAC Security Operations Certified (GSOC)
  • Certified Information Systems Security Professional (CISSP)

Security Clearance/Vetting:

  • U.S. Citizenship required
  • Ability to obtain Public Trust clearance

WORK LOCATION:Remote
TRAVEL:N/A
TELEWORK ELIGIBILITY:Yes
SECURITY REQUIREMENTS:Public Trust

Who We Are

phia LLC ("phia") is a Northern Virginia based, small business established in 2011 with focus in Cyber Intelligence, Cyber Security/Defense, Intrusion Analysis & Incident Response, Cyber Architecture & Capability Analysis, Cyber Policy & Strategy, Information Assurance/Security, Compliance, Certification & Accreditation, Communications Security, Traditional Security, and Facilities Security. phia also provides cyber operations support functions such as: Program and Process Management, Engineering, Development, and Systems Administration that allows for Cyber Operations to efficiently integrate our customer’s missions and objectives. phia supports various agencies and offices within the Department of Defense (DoD), Federal government, and private/commercial entities.

phia offers excellent benefits to enhance work-life balance, including the following:

  • Medical Insurance
  • Dental Insurance
  • Vision Insurance
  • Life Insurance
  • Short Term & Long Term Disability
  • 401k Retirement Savings Plan with Company Match
  • Paid Holidays
  • Paid Time Off (PTO)
  • Tuition and Professional Development Assistance

phia does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity, or any other reason prohibited by law in the provision of employment opportunities and benefits.

Originally posted on Himalayas

View job

DevSecOps Engineer w/Secret Clearance

TekSynap

  • United States
  • Remote
  • Full-time
Apply
Oct 2
View job

Senior Manager, GRC Engineering

Workstreet

  • United States
  • Remote
  • Full-time
Apply
Oct 2
View job

Energy Storage Backend DevSecOps Solutions Engineer - (Senior - Principal level)

ThinkBAC Consulting

  • United States
  • Remote
  • Full-time
Apply
Oct 2
View job

Principal Product Manager, AI-Powered Security Operations

Motorola Solutions

  • United States
  • Remote
  • Full-time
Apply
Oct 2
View job

Security Consultant

AppGate Cybersecurity, Inc.

  • Mexico
  • Remote
  • Full-time
Apply
Oct 2
View job

Security Researcher

AppGate Cybersecurity, Inc.

  • Colombia
  • Remote
  • Full-time
Apply
Oct 2
View job

Security Researcher

AppGate Cybersecurity, Inc.

  • Argentina
  • Remote
  • Full-time
Apply
Oct 2
View job

Application Security Engineer

Yum! Brands

  • United States
  • Remote
  • Full-time
Apply
Oct 2
View job

Cyber Security / SOC Analyst (Weekend Nights)

phia, LLC

  • United States
  • Remote
  • Full-time
Apply
Oct 2
View job

Staff Security Analyst - GRC

Harness

  • United States
  • Remote
  • Full-time
Apply
Oct 2
View job

Chief Information Security Officer (CISO) — Insurance & Investments

TheHiveCareers

  • Suriname
  • Remote
  • Full-time
Apply
Oct 2
View job

Associate Security Analyst

PM Consulting

  • Philippines
  • Remote
  • Full-time
Apply
Oct 2
View job

Systems Security Administrator - Senior

Experian

  • Costa Rica
  • Remote
  • Full-time
Apply
Oct 2
View job

Senior Offensive Security Engineer (Red Team)

Salesforce

  • United States
  • Remote
  • Full-time
Apply
Oct 2
View job

Cybersecurity Project Manager

9th Way Insignia

  • United States
  • Remote
  • Full-time
Apply
Oct 2
View job

VP, Security

Stord

  • United States
  • Remote
  • Full-time
Apply
Oct 2
View job

AI Security Engineer - Mid-Atlantic region (Remote in VA, MD, PA, NC, DE, NJ, or

GuidePoint Security LLC

  • United States
  • Remote
  • Full-time
Apply
Oct 2
View job

Systems Engineer – Identity & Access Management (IAM)

Sphere, Inc.

  • United States
  • Remote
  • Full-time
Apply
Oct 2
View job

Cybersecurity Data Analytics Engineer

Danaher

  • Poland
  • Remote
  • Full-time
Apply
Oct 2
View job

Sr DevSecOps Automation Solution Architect

General Dynamics Information Technology

  • United States
  • Remote
  • Full-time
Apply
Oct 2
View job
P

IT Security Consultant / Engineer Network Security (m/w)

protectONE - R. Franz Gödde

  • Germany
  • Remote
  • Full-time
Apply
Oct 2
View job

RMF / Cybersecurity Compliance Specialist (Pipeline)

Lucayan Technology Solutions LLC

  • United States
  • Remote
  • Full-time
Apply
Oct 2
View job

Mid to Senior SAP Auth and GRC Consultant - Remote within South Africa

K5 Business

  • South Africa
  • Remote
  • Full-time
Apply
Oct 2
View job

Senior Security Engineer

HealthMark Group

  • United States
  • Remote
  • Full-time
Apply
Oct 2
View job

VP, Information Security and Compliance

Veritone

  • United States
  • Remote
  • Full-time
Apply
Oct 2
View job
T

Information Systems Security Manager

Technatomy

  • United States
  • Remote
  • Full-time
Apply
Oct 2
View job

IT Audit, Cybersecurity & Risk Senior Consultant

Baker Tilly

  • United States
  • Remote
  • Full-time
Apply
Oct 2
View job
E

Information Security Engineer

Exostar

  • United States
  • Remote
  • Full-time
Apply
Oct 2
View job

Security Engineer

Soteria

  • United States
  • Remote
  • Full-time
Apply
Oct 2
View job
R

Security Analyst, GRC

Radiology Partners

  • United States
  • Remote
  • Full-time
Apply
Oct 2
PreviousPage 71 of 128Next
phia, LLC

Cyber Security / SOC Analyst (Weekend Nights)

United StatesRemoteFull-time
Pay Range: $80k - $140k / annual
Posted Oct 2
Apply

Job Description

At phia we hire talented and passionate people who are focused on collaborative, meaningful work, providing technical and operational subject matter expertise and support services to our partners and clients.

phia is hiring a Cyber Operations Analyst (SOC Threat Management) to support 24x7 operations in a large Federal agency Cyber Security Operations Center (CSOC). This role focuses on advanced cyber threat monitoring & detection, incident analysis and management, and leveraging AI/ML and automation to enhance SOC efficiency. The ideal candidate will have expertise in IT and cyber incident management, cyber threat intelligence and intrusion analysis, and hands-on experience with modern security tools and cloud environments.

This shift-based position offers REMOTE work flexibility. Qualified candidates will be U.S. Citizens and located in the United States, able to achieve Public Trust security vetting approval.

This Weekday Night shift position will have the following primary work hours:

  • Initial Temporary Orientation & Qualification: Monday - Friday, 7:00am-3:30pm (ET)
  • Final Assigned Shift: Monday - Friday, 11:00pm-7:30am (ET)

What You’ll Do:

  • Support 24x7 monitoring, detection, and management of advanced cyber threats.
  • Execute operational processes in support of response efforts to identified security incidents.
  • Perform deep-dive incident analysis by correlating data from multiple sources to determine impact on critical systems or datasets.
  • Interpret output from the SIEM, incident reporting platforms and mailboxes, and phone calls to identify potential security incidents.
  • Handle incidents as defined in Playbooks and SOPs.
  • Identify security problems which may require mitigating controls, and advise on remediation actions.
  • Analyze threat intelligence to assess risk and adapt defenses.
  • Provide subject matter expertise on network-based attacks, intrusion methodologies, and threat management.
  • Escalate complex incidents for further investigation and collaborate with other Threat Management team members.
  • Utilize AI/ML-based tools to detect anomalies, automate triage, and improve threat intelligence.
  • Provide input and analysis on how to leverage Artificial Intelligence, Machine Learning, and SOAR capabilities to improve CSOC efficiency and accuracy.
  • Stay current on cybersecurity trends, threat actors, and AI/ML advancements relevant to SOC operations.
  • Tune security policies, maintain visibility into cloud and endpoint environments, and support continuous improvement of the organization’s security posture.
  • Identify and support automation use cases, including the use of AI/ML to enhance SOC capabilities.
  • Collaborate across the larger organization to provide SOC enhancement capabilities through the use of automation and AI.

Who You Are:

  • Experienced in cyber/IT security with at least 3 years of experience in IT and/or SOC operations.
  • Familiar with both command and sophisticated threat actor tools and techniques.
  • Skilled in network traffic analysis and threat detection methodologies.
  • Strong understanding of Boolean logic, TCP/IP fundamentals, network-level exploits, and IDS/IPS technologies and signature development & optimization.
  • Familiar with IT control frameworks, risk management techniques, and cloud security (AWS, Azure, GCP).
  • Hands-on experience with cybersecurity automation and SIEM/SOAR platforms.
  • Proficient in using ML frameworks for anomaly detection, threat intelligence, and behavioral analysis.
  • Skills in data analysis and feature engineering, with the ability to process and transform large datasets from various sources (e.g., logs, network traffic) to extract relevant features for machine learning models aimed at identifying security incidents and vulnerabilities.
  • Familiarity with the application of AI/ML techniques in cybersecurity, including but not limited to automated threat detection, incident response automation, and predictive analytics. Experience in evaluating the effectiveness of AI/ML solutions in a SOC environment is a plus.
  • Excellent communication, organizational, and interpersonal skills.

Preferred Skills:

  • Experience with Splunk, ProofPoint, Cisco FirePower, SentinelOne, Microsoft Defender Microsoft Defender for Cloud Apps, Defender for Endpoint, Defender XDR, Defender for Office 365, Azure Entra ID, and Google Cloud Security Command Center (SCC).
  • Expertise with IDS/IPS architectures, signature creation, and anomaly-based detection.
  • Strong data analysis and feature engineering skills for ML-based security models.
  • Direct experience with AI/ML applications in SOC environments, including automated threat detection and predictive analytics.

Required Education + Experience:

  • BA/BS in Computer Science, IT, or related field (or equivalent experience) with 3+ years of direct experience in cybersecurity and SOC analysis & operations

...or...

  • 7+ years of experience in cybersecurity and IT and SOC analysis & operations

Certifications (desired, or similar):

  • CompTIA Security+
  • Certified Ethical Hacker (CEH)
  • GIAC Certified Enterprise Defender (GCED)
  • GIAC Certified Intrusion Analyst (GCIA)
  • GIAC Certified Detection Analyst (GCDA)
  • GIAC Certified Incident Handler (GCIH)
  • GIAC Defending Advanced Threats (GDAT)
  • GIAC Security Operations Certified (GSOC)
  • Certified Information Systems Security Professional (CISSP)

Security Clearance/Vetting:

  • U.S. Citizenship required
  • Ability to obtain Public Trust clearance

WORK LOCATION:Remote
TRAVEL:N/A
TELEWORK ELIGIBILITY:Yes
SECURITY REQUIREMENTS:Public Trust

Who We Are

phia LLC ("phia") is a Northern Virginia based, small business established in 2011 with focus in Cyber Intelligence, Cyber Security/Defense, Intrusion Analysis & Incident Response, Cyber Architecture & Capability Analysis, Cyber Policy & Strategy, Information Assurance/Security, Compliance, Certification & Accreditation, Communications Security, Traditional Security, and Facilities Security. phia also provides cyber operations support functions such as: Program and Process Management, Engineering, Development, and Systems Administration that allows for Cyber Operations to efficiently integrate our customer’s missions and objectives. phia supports various agencies and offices within the Department of Defense (DoD), Federal government, and private/commercial entities.

phia offers excellent benefits to enhance work-life balance, including the following:

  • Medical Insurance
  • Dental Insurance
  • Vision Insurance
  • Life Insurance
  • Short Term & Long Term Disability
  • 401k Retirement Savings Plan with Company Match
  • Paid Holidays
  • Paid Time Off (PTO)
  • Tuition and Professional Development Assistance

phia does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity, or any other reason prohibited by law in the provision of employment opportunities and benefits.

Originally posted on Himalayas