Sr. Security Analyst (Detection and Incident Response)

$125,000 - $175,000/Yr

SpaceX - Hawthorne, CA

Full-time - Mid Level

Hawthorne, CA

Transportation Equipment Manufacturing

About the position

As a Senior Security Analyst at SpaceX, you will play a critical role in protecting the organization from various security threats. This position involves analyzing and responding to security incidents, ensuring the integrity and confidentiality of information, and enhancing the overall security posture of the company. You will work closely with the Security Operations Center (SOC) and engineering teams to identify, triage, and remediate security detections and anomalies, contributing to the mission of enabling human life on Mars by safeguarding SpaceX's assets and reputation.

Responsibilities

• Support the SpaceX Security Operations Center (SOC) as the frontline responder by identifying, triaging, and remediating security detections and anomalies.
• Provide incident response support by investigating security incidents from initial detection through root cause.
• Assist in evidence collection and collaborate with SpaceX engineering teams to proactively improve and secure systems from future attacks.
• Contribute towards impactful detection capabilities targeting sophisticated attacker tactics, techniques, and procedures (TTPs).
• Enhance endpoint and network visibility, along with detection and response playbooks, to protect SpaceX people, missions, and assets.

Requirements

• 5+ years of information security, networking and/or systems engineering experience and a Bachelor's degree in cybersecurity, computer science, engineering, information technology, or other STEM discipline; OR 7+ years of information security, networking and/or systems engineering experience in lieu of a degree.
• Experience with operating system internals and auditing for Linux, Windows, or macOS platforms.
• Experience with network and host-based collection tools.

Nice-to-haves

• Deep understanding of classic and emerging threat actor tactics, techniques, and procedures in both pre- and post-exploitation phases of attack lifecycles.
• Deep understanding of incident response processes.
• Experience using Elastic, Splunk and/or other SIEMs.
• Experience with scripting language(s) for automating security operations and incident response processes.
• Experience with reverse engineering, C2 exploitation, and broader system/network forensics.
• Security community contributions (blog posts, conference talks, CTFs, tool development, etc.).
• Knowledge of cloud infrastructure and cloud security.
• SANS/GIAC, OSCP or similar certifications.

Benefits

• Comprehensive medical, vision, and dental coverage.
• 401(k) retirement plan.
• Short and long-term disability insurance.
• Life insurance.
• Paid parental leave.
• Various discounts and perks.
• 3 weeks of paid vacation.
• 10 or more paid holidays per year.
• 5 days of sick leave per year.