Cyber Security, SOC Analyst – Weekend Nights

🔥 19 minutes ago

🇺🇸 United States – Remote

💵 $80k - $140k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🛡️ Security Operations

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

phia, LLC

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2011

💼 Consulting

🎖️ Defense

📦 Logistics

Consulting • Defense • Logistics

<phia, LLC> is a cybersecurity firm that provides cyber assessments, cybersecurity operations, security engineering and development, and advisory services to help clients defend against advanced threats. The company leverages threat intelligence, operations-informed techniques, and industry standards to build resilient solutions and support mission success for its clients and partners.

📋 Description

• Support 24x7 monitoring, detection, and management of advanced cyber threats • Execute operational processes supporting responses to identified security incidents • Perform deep-dive incident analysis by correlating data from multiple sources to determine impact on critical systems or datasets • Interpret SIEM output, incident reporting platforms and mailboxes, and phone calls to identify potential security incidents • Handle incidents according to playbooks and SOPs • Identify security problems requiring mitigating controls and advise on remediation actions • Analyze threat intelligence to assess risk and adapt defenses • Provide subject matter expertise on network-based attacks, intrusion methodologies, and threat management • Escalate complex incidents and collaborate with Threat Management team members • Use AI/ML-based tools to detect anomalies, automate triage, and improve threat intelligence • Provide input on leveraging AI, ML, and SOAR capabilities to improve CSOC efficiency and accuracy • Stay current on cybersecurity trends, threat actors, and AI/ML advancements • Tune security policies and maintain visibility into cloud and endpoint environments • Support continuous improvement of the organization’s security posture • Identify and support automation use cases, including AI/ML enhancements • Collaborate across the organization to provide SOC enhancement capabilities through automation and AI • Work initial temporary orientation and qualification hours Monday–Friday, 7:00am–3:30pm ET • Work final assigned weekday night shift Monday–Friday, 11:00pm–7:30am ET

🎯 Requirements

• At least 3 years of experience in IT and/or SOC operations • BA/BS in Computer Science, IT, or related field, or equivalent experience • Alternatively, 7+ years of experience in cybersecurity and IT and SOC analysis & operations • U.S. Citizenship required • Ability to obtain Public Trust clearance • Experience in cyber/IT security • Familiarity with command and sophisticated threat actor tools and techniques • Network traffic analysis and threat detection methodologies • Understanding of Boolean logic, TCP/IP fundamentals, network-level exploits, and IDS/IPS technologies and signature development and optimization • Familiarity with IT control frameworks, risk management techniques, and cloud security (AWS, Azure, GCP) • Hands-on experience with cybersecurity automation and SIEM/SOAR platforms • Proficiency using ML frameworks for anomaly detection, threat intelligence, and behavioral analysis • Data analysis and feature engineering skills for processing large datasets • Familiarity with AI/ML techniques in cybersecurity • Excellent communication, organizational, and interpersonal skills • Preferred: Experience with Splunk, ProofPoint, Cisco FirePower, SentinelOne, Microsoft Defender, Defender for Cloud Apps, Defender for Endpoint, Defender XDR, Defender for Office 365, Azure Entra ID, and Google Cloud Security Command Center (SCC) • Preferred: Expertise with IDS/IPS architectures, signature creation, and anomaly-based detection • Preferred: Direct experience with AI/ML applications in SOC environments

🏖️ Benefits

• Medical Insurance • Dental Insurance • Vision Insurance • Life Insurance • Short Term & Long Term Disability • 401k Retirement Savings Plan with Company Match • Paid Holidays • Paid Time Off (PTO) • Tuition and Professional Development Assistance • Remote work flexibility