Arizona

Cybersecurity Jobs in Arizona

48 jobs found

Include remote jobs

1d ago

Cyber Security Engineer - Application Security Tooling

American Express Phoenix, AZ

Phoenix, AZ

1d ago

$104k - $175k/yr Full time Application Security Application Security Engineering Cyber Security Engineer

Apply Now

Job Description

American Express seeks a Cyber Security Engineer focused on Application Security Tooling in Phoenix, AZ. The role strengthens application security, supports secure engineering at scale, and brings together cybersecurity engineering (including AI/ML), application security, automation, and secure SDLC practices.

Responsibilities

Strengthen application security and help engineering teams build and operate secure technology at scale.
Identify and reduce security risk throughout the application lifecycle.
Partner with software engineers, architects, product teams, and cybersecurity partners to identify and reduce security risk across the application lifecycle.
Contribute to the development and operation of security capabilities.
Integrate security testing and controls into engineering workflows.
Analyze vulnerabilities and emerging threats.
Provide technical guidance that supports effective remediation of security issues.
Address security problems using a mix of software engineering, automation, security testing, research, and collaboration.
Work across modern application architectures, APIs, cloud and container environments, CI/CD pipelines, and application security technologies.
Drive continuous improvement of application security processes, tooling, documentation, and engineering practices to help protect American Express applications, systems, and data.

Required Qualifications

Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, and/or comparable experience; an advanced degree is preferred.
Knowledge of regulatory compliance and security standards.
Knowledge of Application Development & Security.
Knowledge of Data Engineering.
Knowledge of Cloud Security Management.
Knowledge of Data Privacy & Protection (DPP, GDPR).
Knowledge of Data Security Management.
Knowledge of scripting languages such as Python, Bash, or PowerShell for automating security tasks.
Knowledge of distributed (multi-tiered) systems, algorithms, NoSQL and relational databases.
Knowledge of core tools used to plan, analyze, craft, build, test, configure, and maintain assigned application(s).
Knowledge of event driven architecture and messaging; Kafka, web hooks, and asynchronous API design are preferred.
Experience in application design, software development, and automated testing.
Experience in object-oriented design and coding with a variety of languages.
Experience with Agile software development methodologies and practices such as Scrum/Kanban, iterations, and user stories.
Experience with automation testing and documentation (automated, functional, and performance).
Experience with Testing Frameworks, including unit testing and regression testing.
Experience with Java 8+ and the Spring Suite Framework is preferred.
Experience with Python and the Django framework is preferred.
Experience with React JS, Node JS, and Go-lang is preferred.
Experience with Kubernetes, Docker, Jenkins, and cloud deployment (CI/CD) is preferred.
Experience with PostgreSQL, Oracle, or equivalent relational databases is preferred.
Knowledge of AI security concepts, including risks associated with generative AI, model integrity, prompt security, and protection of sensitive enterprise data.
Knowledge of AI-assisted cybersecurity operations and automation frameworks used to enhance detection, response, and security engineering workflows.
At least one security-related certification is preferred, such as CSSLP, GWEB, GCIH, CEH, GSEC, C|ASE, CCNA, etc.
At least one developer-related certification is preferred, such as OCP, OCA, OCM, DCD, DVA-C02, CKAD, ACE, CCSP, Profession Cloud Developer, etc.
Employment eligibility to work with American Express in the United States is required; the company will not pursue visa sponsorship for these positions.

Technologies

AI/ML
Python, Bash, PowerShell
Kafka, web hooks
Java, Spring Suite Framework, Django
React JS, Node JS, Go-lang
Kubernetes, Docker, Jenkins
Cloud deployment (CI/CD)
PostgreSQL, Oracle, NoSQL, relational databases
Scrum, Kanban
Unit testing, Regression Testing, CI/CD
Security certifications (examples listed): CSSLP, GWEB, GCIH, CEH, GSEC, C|ASE, CCNA
Developer certifications (examples listed): OCP, OCA, OCM, DCD, DVA-C02, CKAD, ACE, CCSP, Profession Cloud Developer

Location and Compensation

Location: Phoenix, AZ (onsite)
Salary: USD 103,750 - 174,750 per year

View full job page →

1d ago

Security Analyst Level I

DBM Global Inc. Phoenix, AZ

Phoenix, AZ

1d ago

$95k - $102k/yr Full time Cybersecurity Tools Data Security Information Security

Apply Now

Job Description

The Security Analyst Level I will help safeguard DBM Global Inc.’s digital assets by monitoring online and on-premises environments for unauthorized access. This onsite role in Phoenix, AZ includes incident investigation, security auditing, and support for SOX compliance through testing and reporting.

Key Responsibilities

Monitor DBMG computer networks for security issues and support the infrastructure team in addressing identified vulnerabilities to maintain strong security standards.
Audit the activities of security administrators across multiple software applications.
Conduct internal and external security audits to inform technology decisions.
Perform operational risk assessment (OSA) for all organizational facilities.
Monitor and help protect information infrastructure using tools and controls such as firewalls, Proxies, SIEM, Antivirus, Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), and data encryption programs.
Investigate security breaches and other cybersecurity incidents to identify root cause.
Document security breaches and evaluate the damage caused or that may occur.
Verify third-party vendor security standards and collaborate to meet security requirements.
Stay current on information technology trends, security standards, and cybersecurity news.
Demonstrate understanding of information security management.

Security and Compliance Focus

This role supports the evaluation of existing security policies through reporting for IT administrators and business managers. The position also assists with testing IT General Controls to help maintain Sarbanes Oxley (SOX) compliance.

Required Qualifications

Protect digital files and information systems against unauthorized access, modification, or destruction.
Maintain data security and monitor security access.
Conduct internal and external security and compliance audits.
Monitor network environments and intrusion detection and prevention systems.
Analyze security breaches and other cybersecurity incidents to determine root cause.
Document security breaches and assess the impact they cause.
Work with the security team to test controls and identify network vulnerabilities.
Review and maintain corporate security policies.
Audit the security awareness training program.
Coordinate security plans with outside vendors.

Experience, Education, and Certification

Experience: 3–5 years.
Minimum experience: 3 years.
Education: BS in Computer Science or related field, or equivalent experience.
Certification: The Information Security Analyst must have a current ISC2 Certified in Cybersecurity. If not currently certified, there is a 6-month period to obtain certification.

Tools and Technologies

MS Windows 10 and/or MS Windows 11
MS Word, MS Excel, MS PowerPoint
MS Teams, MS Outlook
Firewalls, Proxies, SIEM
Antivirus
Intrusion Detection Systems, Intrusion Prevention Systems
Data encryption programs

Specialized Knowledge

Cybersecurity, Firewalls, Network Security, Information Assurance
Security Information and Event Management (SIEM)
Application Security
Security Architecture

Location and Compensation

Location: Phoenix, AZ (onsite)
Salary: USD 95,000 to 102,000 per year

View full job page →

1d ago

Senior Cybersecurity Analyst

Salt River Pima-Maricopa Indian Community Scottsdale, AZ

Scottsdale, AZ

1d ago

$116k - $165k/yr Full time Senior Ai Security Cloud Platforms

Apply Now

Job Description

The Salt River Pima-Maricopa Indian Community is seeking a Senior Cybersecurity Analyst to support and strengthen the organization’s security program in Scottsdale, Arizona. Working under the general supervision of the Cyber Security Manager, you will help implement and maintain security processes and technology improvements aligned to the organization’s Cyber security Strategic Plan.

This onsite role focuses on risk assessment, security system administration and auditing, security architecture development, and ongoing improvements across enterprise and cloud environments. You will also provide guidance to security team members and support investigations, audits, and incident response activities as needed.

Key Responsibilities

Own the implementation and ongoing maintenance of security processes and technology improvements in support of the Cyber security Strategic Plan.
Partner with IT teams and divisions to conduct risk assessments and to administer and audit security systems.
Develop, implement, and maintain security architecture design, while supporting technologies and processes that enable continuous security improvements.
Mentor security team staff to build technical skills and customer service skills needed to work independently and support career progression.
Ensure cross-functional training so primary and secondary support personnel are prepared to support division services.
Assist with routine supervision by prioritizing and coordinating workflow and providing training and assistance as needed.
Help establish criteria for employee performance evaluations based on division and department goals and objectives.
Provide senior leadership for the Security Team and work with other IT divisions to establish and enforce IT standards.
Evaluate and recommend best-in-class security standards, processes, and practices.
Contribute security best practices and technical expertise across security planning, implementation, and incident response activities.
Proactively audit and review network and security infrastructure, including monitoring LAN/WAN, security firewalls, routers, and systems to maintain security standards.
Help ensure scheduled maintenance, patching, and performance monitoring are managed and tracked.
Provide operational reporting that communicates the SRPMIC security posture.
Provide technical input to troubleshoot security issues.
Build and maintain cloud security standards, controls, and processes to support confidentiality, integrity, and availability of cloud-hosted systems and data.
Perform cloud security assessments of infrastructure, services, architectures, and configurations to identify and mitigate risks.
Provide SME support for cloud migrations, implementations, and related technology initiatives.
Monitor cloud environments for threats, vulnerabilities, misconfigurations, and anomalous activity, coordinating remediation efforts.
Partner with IT and business stakeholders to implement controls for identity and access management, logging and monitoring, encryption, network security, and data protection.
Provide reporting and metrics regarding the security posture and risk of cloud environments.
Provide cybersecurity SME leadership for secure adoption, implementation, and use of artificial intelligence technologies, including developing security standards, policies, and guidelines for responsible use.
Perform security and risk assessments of AI solutions, applications, platforms, and third-party AI services, identifying risks such as data exposure, unauthorized access, insecure integrations, prompt injection, data poisoning, model misuse, and third-party risks.
Evaluate AI vendors and services to ensure security, privacy, data protection, and contractual requirements are addressed.
Monitor emerging AI security threats, vulnerabilities, regulatory requirements, and industry best practices, recommending appropriate security controls.
Support security projects and initiatives, including security tool integrations, tool evaluations, and process improvements; participate in audit reviews and support penetration activities with coordination of mitigation and remediation efforts.
Respond to security breaches or personnel investigation requests, including accurate data capture, chain of custody, and reporting.
Maintain confidentiality and integrity of systems, data, and security processes, and perform other duties assigned by the Cyber Security Manager or other IT leadership.

Minimum Qualifications

Bachelor’s degree from an accredited college or university in Information Security, Cyber Security, or a related discipline.
May accept a combination of 7 years direct cyber security experience and industry certifications in lieu of degree.
Five (5) years of direct experience in an IT/Cyber security role, including hands-on work implementing network security, security monitoring, cloud security monitoring, or vulnerability management.
Direct experience supporting Microsoft 365 Cloud security.
Direct experience assessing, evaluating, or supporting secure implementation and use of artificial intelligence technologies, including identification and mitigation of AI-related cybersecurity and data protection risks.
Direct experience with the Elastic log management platform.
Direct experience supporting cyber security incident response.
Direct experience managing and/or mitigating software and system vulnerabilities.
Direct experience conducting security audits, including access control and system configuration.
Direct experience conducting security assessment on third-party integrations.
Direct experience with secure remote access technologies.
Required certification: one of CompTIA Security+, SSCP®, or CISSP.

Technologies

Elastic Stack (Elastic log management platform)
Microsoft 365 Cloud security suites, including 365 Defender and Purview/Compliance
Azure and Defender for Cloud
Microsoft Entra ID
LAN/WAN, network security firewalls, and routers
AI solutions and third-party AI services

Compensation

USD 115,954 - 165,236 per year.

Benefits

Medical, Dental, Vision
Life Insurance
401(k) and Roth Plans (SRPMIC contributes 5% to pre-tax 401(k) and matches up to 3%)
Public Safety Personnel Retirement System (PSPRS)
Arizona State Retirement System (ASRS)
Health Reimbursement Arrangement (HRA)
Annual & Sick Leave
15 paid holidays each year (including two discretionary holidays and one day of birthday leave)
Short-Term Disability, Long-Term Disability
Employee Assistance Program (EAP) through SupportLinc
WellPath Wellness Program
Flexible Spending Accounts (FSA) administered by HealthEquity
Health Savings Account (HSA) for HDHP enrollees
Supplemental Life & AD&D Insurance
Public Service Loan Forgiveness (PSLF) eligibility

Special Requirements and Eligibility Notes

May require work beyond normal hours, including nights, weekends, and holidays.
May require completion of a Salt River Police Department (SRPD) background investigation and polygraph examination.
May require receiving and maintaining Salt River Pima-Maricopa Indian Community, Community Regulatory License, and State Certification (ADOG). Pre-employment drug test and extensive fingerprint and background check apply.
Employees providing services to a campus with children are subject to “Community Code of Ordinances,” Chapter 11 “Minors,” Article X, including random drug testing and completion of a background check every five (5) years.
Prior to hire, applicants will be subject to drug and alcohol testing and must pass a pre-employment background/fingerprint check.
SRPMIC is an equal opportunity/affirmative action employer; preference may be given to qualified Community Member Veteran, Community Member, Spouse of Community Member, qualified Native American, and then other qualified candidates, with documentation requirements by the position closing date.
Plan details and eligibility requirements for benefits are provided upon hire and are subject to change.

View full job page →

3d ago

Principal Classified Cybersecurity Analyst

Northrop Grumman Gilbert, AZ

Gilbert, AZ

3d ago

$98k - $148k/yr Full time Cybersecurity Tools Information Security InfoSec

Apply Now

Job Description

Northrop Grumman’s CIDO Classified Solutions team is seeking a Principal Classified Cybersecurity Analyst (ISSO) to support information systems lifecycle activities in a classified environment. This full-time role is based on-site in Gilbert, AZ and works across audit, monitoring, assessments, and Security Test & Evaluation (ST&E) support, with required compliance and authorization documentation.

Key details: USD 98,400 - 147,600 per year, Top Secret clearance required for start, and up to 10% travel.

Role overview

Support system security lifecycle activities, including audits, continuous monitoring, assessments, A&A support, and ST&E.
Operate within government accreditation requirements by producing and maintaining A&A evidence and related documentation.
Maintain alignment with enclave policy, local policy, and acceptable security configurations.

Responsibilities

Conduct system audits and continuous monitoring across security controls, configurations, and operational processes to evaluate information system security posture.
Perform assessments of systems and networks within a networking environment or enclave, identifying deviations from acceptable configurations, enclave policy, or local policy.
Validate established security requirements through analysis and recommend additional requirements and safeguards.
Assist in implementing required government policy, including recommendations on process tailoring, and participate in and document process activities.
Establish program control processes to support Assessment and Authorization (A&A), including process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
Support formal Security Test and Evaluation (ST&E) for each government accrediting authority through pre-test preparations, test participation, result analysis, and required report preparation.
Document A&A activity outcomes and prepare Risk Management Framework (RMF) body of evidence from technical and coordination efforts.

Requirements

Master’s degree with 3 years relevant technical experience; OR Bachelor’s degree with 5 years; OR Associates degree with 7 years; OR High School Diploma/GED with 9 years relevant technical experience.
Meet U.S. Government 8140 (8570) requirements for a Principal Classified Cybersecurity Analyst IAM level II equivalent (or higher) security certification (examples provided: CAP or CGRC, CASP+ or CompTIA Security X, GSLC, CISSP-Associate, CISM, CISSP, CCISO).
Maintain a current U.S. Government Top Secret clearance (minimum), including a closed investigation date within the last 6 years, OR be enrolled in the U.S. Government Continuous Evaluation (CE) Program to be considered.
Ability to obtain and maintain access to Special Access Programs as a condition of continued employment.

Technologies

ACAS, Nessus, Splunk, Trellix, SCAP, RMF, NIST, JSIG, DAAG

Benefits

Exceptional benefits and healthcare
9/80 work schedule
401k matching program
Eligibility for overtime, shift differential, and a discretionary bonus in addition to base pay (depending on position)
Annual bonuses
Potential Long Term Incentives for Vice President or Director positions
Health insurance coverage
Life and disability insurance
Savings plan
Company paid holidays
Paid time off (PTO) for vacation and/or personal business

Travel and work model

Travel: Yes, 10% of the Time
On-site requirement: This position does not offer virtual or telecommute options due to the classified nature of the work.
Clearance required for start: Yes
Clearance type: Top Secret
Relocation assistance: No relocation assistance available

Preferred qualifications

Bachelor’s degree in Cybersecurity or a related field
CISM / CASP+ / SecurityX
Experience with cybersecurity compliance (example: Assessment & Authorization under RMF)
SAP/SAR access, SCI access, and/or a Polygraph
Knowledge of security tools such as ACAS, Nessus, Splunk, Trellix, and SCAP
Knowledge of security frameworks and documentation such as NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs

View full job page →

4d ago

Cybersecurity Engineer

American Express Phoenix, AZ

Phoenix, AZ

4d ago

$104k - $175k/yr Full time Backend Developer Application Security Engineer

Apply Now

Job Description

American Express is seeking a Cybersecurity Engineer I to build and strengthen secure software capabilities for the AuthBlue Single Sign-On (SSO) platform. This onsite role in Phoenix, AZ will support authentication and Identity & Access Management (IAM) services across the organization, working across frontend and backend components, APIs, integrations, and related services.

Responsibilities

Develop, enhance, test, and support secure software solutions for the AuthBlue Single Sign-On (SSO) platform, enabling authentication and IAM for applications throughout the organization.
Contribute to cybersecurity-focused software engineering across frontend and backend components, including APIs, integrations, and supporting services.
Deliver product features and technical enhancements by resolving software defects, applying secure development practices, and supporting the secure, reliable, scalable, and maintainable operation of the AuthBlue platform.
Collaborate with engineers, cybersecurity teams, product partners, and business stakeholders to deliver solutions aligned to organizational objectives for authentication, authorization, and identity security.

Requirements

Bachelor’s degree in computer science, Software Engineering, Information Systems, Cybersecurity, or a related technical discipline, or comparable education and professional experience.
2–4 years of software engineering experience, which may include internships, co-ops, or substantial project experience.
Working knowledge of Java, with experience or familiarity with Spring Boot.
Working knowledge of JavaScript/TypeScript, including experience or familiarity with Node.js.
Experience with Git and collaborative development workflows, including pull requests and code reviews.
Understanding of RESTful APIs, HTTP, JSON, client/server architecture, and common application integration concepts.
Experience with relational (SQL) and NoSQL databases, including basic data modeling, querying, and application integration.
Strong software engineering fundamentals, including object-oriented programming, data structures, error handling, asynchronous programming, and automated testing.
Ability to troubleshoot and debug applications spanning frontend and backend components.
Basic understanding of application security and IAM principles, including authentication, authorization, input validation, and secure handling of sensitive data.
Familiarity with CI/CD, automated testing, Agile development, and modern software delivery practices.
Ability to write readable, maintainable, and well-tested code and incorporate feedback from code reviews and more experienced engineers.
Demonstrated ability to collaborate effectively, communicate clearly, solve problems, ask questions, and learn unfamiliar technologies and concepts.
Ability to understand well-defined requirements and break them into implementation tasks with team support.

Technologies

AuthBlue Single Sign-On (SSO) platform
Identity & Access Management (IAM)
Java, Spring Boot
JavaScript, TypeScript, Node.js
Git
RESTful APIs, HTTP, JSON
Relational databases (SQL), NoSQL databases
CI/CD, Agile development
SAML, OAuth 2.0, OpenID Connect (OIDC)
Vert.x, React
Cloud platforms
Docker, Kubernetes
Application monitoring or observability tools

Preferred Qualifications

Experience with Identity & Access Management, authentication, authorization, or Single Sign-On (SSO) technologies, including familiarity with SAML, OAuth 2.0, or OpenID Connect (OIDC).
Experience with Vert.x, React, or similar application development frameworks.
Exposure to cloud platforms, Docker/containers, Kubernetes, and application monitoring or observability tools.
Experience applying secure coding practices or identifying and remediating application security vulnerabilities.
Relevant certifications in software development, cloud technologies, application security, IAM, or cybersecurity are a plus but not required.

Location and Compensation

Location: Phoenix, AZ (onsite)

Salary: USD 103,750 - 174,750 per yearly

View full job page →

6d ago

Cybersecurity Architect

Banner Health Phoenix, AZ 🇺🇸 Remote

Phoenix, AZ

6d ago

$57 - $95/hr Full time Ai Security Cloud Platforms Cybersecurity Architecture

Apply Now

Job Description

Banner Health is hiring a Cybersecurity Architect to define enterprise security strategy, lead architectural reviews, and ensure cybersecurity requirements are built into the technology landscape.

Responsibilities

Act as the senior-most individual contributor for cybersecurity architecture, defining and driving enterprise security strategy, the architecture roadmap, and long-term vision across major technology platforms.
Provide strategic guidance on security architecture decisions, establish security standards and reference architectures, and embed security throughout the enterprise technology landscape.
Evaluate solution designs and assess security readiness, providing expert guidance for secure implementation in partnership with infrastructure, engineering, cloud, data, AI, and application teams.
Lead architectural reviews for new initiatives, identify security risks and mitigation approaches, and influence enterprise-wide technology decisions.
Create and maintain architectural artifacts, models, patterns, and transition initiatives so strategic goals are achievable, operationally efficient, technically sound, and address cybersecurity considerations.
Ensure stakeholder cybersecurity requirements supporting Banner’s mission and business processes are addressed across enterprise architecture, including reference models, segment and solution architectures, and the systems that support them.
Own one or more cybersecurity areas, including threat & vulnerability management, security operations, and GRC, as well as strategy.
Contribute to the cybersecurity architecture team and center of excellence, developing architectural artifacts, roadmaps, and strategy documentation.
Educate and influence enterprise stakeholders, advocating for and stewarding Banner’s information assets.
Design solutions to resolve complex and highly complex cybersecurity-related technical and business issues.
Analyze the business and IT environment to identify critical cybersecurity deficiencies or redundancies and recommend improvements.
Collaborate with other architects to develop and maintain cybersecurity capability documentation and target cybersecurity architecture, partnering with IT and the business on architectures aligned to strategic initiatives, goals, and industry trends.
Serve as an executive advisor on current and future technology appropriateness, considering TCO, ROI, strategic value, and cybersecurity risk.
Maintain in-depth knowledge of business strategies and goals, regulatory requirements, industry trends, and cybersecurity threats.
Build relationships with business stakeholders and IT leadership; advise functional leaders and executives on investments influenced by architectural development and cybersecurity risk assessment.
Ensure consistent adherence to standards for architectural artifact documentation and implementation.
Perform duties in alignment with established policies, procedures, regulatory and accreditation requirements, and applicable professional standards.

Requirements

Bachelor’s degree and strong knowledge of business, information security, and/or computer science.
10+ years of experience, including at least 10 years in a healthcare environment or an equivalent combination of relevant education, technical, business, and healthcare experience.
At least 1 year of experience in cybersecurity architecture at the enterprise scale, preferably in healthcare.
Experience with the acquisition process, including vendor selection, defining requirements, and developing contractual documentation.
Independent judgment, critical decision-making, strong analytical skills, and excellent verbal and written communication.
Ability to think and communicate clearly under difficult or complex conditions.
Ability to balance project workloads with customer support.
Communication and presentation skills for both technical and non-technical audiences.
Ability to communicate and interact across facilities and at multiple levels.
Ability to mentor less experienced team members.

Technologies

Zero trust
Network security
AI security
Data security
Cloud security
Enterprise security architecture
SASE
SD-WAN
ZTNA
Micro-segmentation
AWS
Azure
GCP
CCSP
SSCP
HCISPP
CompTIA Security+
CISSP – Engineering (ISSEP)
CEH
SANS GIAC
CISA
SABSA Chartered Security Architect – Foundation (SCF)
CISSP – Architecture (ISSAP)
TOGAF 9 Foundation

Preferred Qualifications

4+ years technical project experience designing, developing, integrating, and implementing solutions to resolve complex technical and business issues.
Relevant technical and/or professional certification in two or more of the listed areas within one year of entering the position, including: SSCP, HCISPP, CompTIA Security+, CISSP – Engineering (ISSEP), CEH, SANS GIAC, CISA, SABSA Chartered Security Architect – Foundation (SCF) (the remaining certification list is not fully shown in the source).

Compensation & Location

Location: Phoenix, AZ (remote)
Estimated pay range: $57.38 - $95.64 per hour

View full job page →

12d ago

Cybersecurity Analyst

Phoenix Cyber Phoenix, AZ

Phoenix, AZ

12d ago

Full time Analytics Cyber Security Cybersecurity Tools

Apply Now

Job Description

Phoenix Cyber is seeking a Cybersecurity Analyst to support onsite SOC operations at a client location in Chandler, AZ. This role focuses on monitoring, detection, investigation, and incident response activities in a shift-work environment, with requirements that include U.S. citizenship and an active Secret Clearance.

Role Overview

This SOC Analyst position will help the team monitor network traffic and security events, improve day-to-day operational consistency through SOC Standard Operating Procedures (SOPs), and assist with investigation workflows from initial detection through resolution. The role also includes developing detective content for security monitoring tools and advising incident responders on investigation steps.

Responsibilities

Monitor and analyze network traffic, Intrusion Detection Systems (IDS), security events, and logs; prioritize and distinguish potential intrusion attempts from false alarms.
Develop, maintain, and follow SOC Standard Operating Procedures (SOPs).
Support daily and monthly situation reporting per shift.
Proactively review large data sets to identify anomalous activity.
Create detective content for monitoring devices such as IDS and SIEM, and advise on proactive blocks aligned to security architecture.
Create and track security investigations through to resolution.
Compose security alert notifications and other related communications.
Advise incident responders on steps to investigate and resolve computer security incidents.
Stay current on vulnerabilities, attacks, and countermeasures.
Maintain the ability to work a shift schedule.
Manage multiple tasks while providing equal attention to a variety of functions under pressure.

Required Qualifications

High school diploma or GED.
Minimum two (2) years of security experience.
Experience handling incident response.
Certified Ethical Hacking (CEH) or CompTIA CySA+.
Within 6 months of hire, hold any certification from the DoD 8570 CSSP Analyst, Infrastructure Support, or IR lists (or other similar certifications approved by Government).
Active Secret Clearance.