Cyber Defense Analyst II

BLUE ORIGIN • West Melbourne, FL

6d • $90,934 - $138,880 • Onsite

About The Position

Blue Origin is hiring a Cyber Defense Analyst for Blue National Security (BNS), which builds and operates space systems for the Intelligence Community and Department of Defense. The analyst will monitor, investigate, and respond to security events across classified enclaves, mission ground systems, and labs. This is a hands-on operational role involving consoles, terminals, and logging data, as well as supporting deployment of security sensors, log-source onboarding, and detection tuning under senior engineering direction. The team works closely with senior engineers and is intended to help analysts grow toward senior engineering roles.

The position is onsite in classified spaces, with no telework. It includes an on-call rotation supported by senior engineering escalation, heightened monitoring during launches and other mission-critical events, and limited travel of up to 10%. Applicants must be able to obtain and maintain access to classified facilities; periodic polygraph may be required. The posting lists base pay ranges of $90,934.00–$127,307.25 for Colorado applicants and $99,201.00–$138,880.35 for Washington applicants; other site ranges may differ.

Requirements

• At least 2 years of hands-on experience in security operations, incident response, IT operations, or system administration, or equivalent military/government cyber experience.
• Working knowledge of network protocols and Windows and Linux fundamentals.
• Familiarity with SIEM and EDR concepts and ability to investigate events using them.
• Understanding of common attack techniques and exposure to the MITRE ATT&CK framework.
• Clear, concise written communication.
• Genuine curiosity and persistence in investigating inconsistencies.
• Active U.S. Government Top Secret clearance with SCI eligibility and eligibility for SAP access determination; U.S. citizenship.
• DoD 8140 CSSP Analyst or IAT Level II certification, such as Security+ CE or equivalent, at hire or within 6 months.
• Ability to obtain and maintain access to classified facilities; periodic polygraph may be required.

Nice To Haves

• Prior military cyber experience (17C, 1B4, CTN, 1721, or equivalent) or CPT/CST assignment.
• Scripting exposure, such as Python, PowerShell, or Bash.
• Familiarity with query languages such as KQL, SPL, or similar.
• Prior work in classified DoD or Intelligence Community environments.
• Exposure to forensics, malware triage, or detection-rule development.
• Security+, CySA+, GSEC, GCIH, or similar certification.
• Active TS/SCI with polygraph.

Responsibilities

• Monitor and triage security events and alerts across SIEM, EDR, network sensors, and audit logs; distinguish noise and misconfiguration from events requiring escalation.
• Investigate events by pivoting across host, network, and identity data, and document findings clearly.
• Serve as a first responder during incidents; execute containment steps according to playbooks, preserve evidence, build timelines, and support senior engineers leading the response.
• Participate in structured threat hunts, initially alongside senior team members and increasingly using independent hypotheses.
• Support audit and insider-threat reviews through privileged-user activity monitoring and audit-log review in partnership with Security and Counterintelligence.
• Provide heightened monitoring coverage during launches, mission operations, and other critical periods.
• Assist with sensor deployment, log-source onboarding, and agent rollout across enclaves under engineering direction.
• Tune and improve detections by reducing false positives, validating rule coverage, and proposing new detections based on findings.
• Execute response procedures, identify gaps, and provide input to improve playbooks.
• Script recurring triage, enrichment, and reporting tasks.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Basic and supplemental life insurance
• Paid parental leave
• Short- and long-term disability
• 401(k) with company match of up to 5%
• Education Support Program
• Stock options for regular employees working at least 20 hours per week
• Paid time off of up to four weeks per year based on weekly scheduled hours
• Up to 14 company-paid holidays
• Potential role- and level-dependent benefits and bonuses; eligibility and amounts are not guaranteed

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed