Phoenix Cyber Tech Stack
Security services firm delivering incident response, SOAR, and threat hunting for enterprise and federal clients
Phoenix Cyber operates a services-led security practice built on Python, Bash, PowerShell, and a deep SOAR/SIEM stack (Swimlane, Splunk, Elastic). The hiring mix—security roles outnumbering engineering 25:11, skewed toward senior and mid-level—reflects a services delivery model where implementation and advisory drive revenue. Active projects cluster around automation (incident response, security orchestration, endpoint DLP integration) and detection (STIG development, rule tuning for IDS/SIEM), suggesting the firm is moving clients from manual triage toward operationalized response workflows.
Tech Stack 50 technologies
What Phoenix Cyber Is Building
◆Challenges
- Data loss prevention configuration
- Email data protection design
- Complex cybersecurity assessment
- Automating incident response
- Manual incident response
- Reducing false alarms
- Detecting anomalous activity in large data sets
- Developing detection rules for ids and siem
- Security operations process enhancement
- Secure data exchange
▲Active Projects
- Custom plugin development
- Endpoint data protection program
- Security incident automations
- Endpoint dlp design and integration
- Incident response automation
- Security orchestrations
- Data ingestion pipeline
- Security orchestration design
- Stigs development
- Software tool requirements
Hiring Activity
Department
Seniority
Notable leadership hires: Training Lead
