Security Analyst (Detection and Incident Response)

SpaceX•Hawthorne, CA

1d•Onsite

About The Position

As a Security Analyst at SpaceX, you are on the frontline of our information security operations. You will be responsible for analyzing and responding to threats directed at our environment. As a highly visible and dynamic organization, we are a target of both nation states and actors focused on brand destruction. Information drives our business, and we must protect against unauthorized changes, improper destruction, loss, or theft of that information. It is paramount that we defend against loss of control or confidence in our systems to guarantee the highest probability of mission success.

Requirements

Bachelor's degree in cybersecurity, computer science, engineering, information technology, or other STEM discipline; OR 2+ years of professional experience in information security in lieu of a degree.
Experience with operating system auditing for Linux, Windows, or macOS platforms.
Experience with network and host-based collection tools.

Nice To Haves

Understanding of classic and emerging threat actor tactics, techniques, and procedures in both pre- and post-exploitation phases of attack lifecycles.
Understanding of incident response processes.
Experience using Elastic, Splunk and/or other SIEMs.
Experience with scripting language(s) for the purposes of automating security operations and incident response processes.
Experience with reverse engineering, C2 exploitation, and broader system/network forensics.
Knowledge of cloud infrastructure and cloud security.
Security community contributions (blog posts, conference talks, CTFs, tool development, etc.).
SANS/GIAC, OSCP or similar certifications.

Responsibilities

Support the SpaceX Security Operations Center (SOC) as our frontline responder by identifying, triaging, and remediating security detections and anomalies.
Provide incident response support as a key stakeholder by investigating security incidents from initial detection through root cause.
Assist in evidence collection and collaboration with SpaceX engineering teams to proactively improve and secure systems from future attacks.
Contribute towards impactful detection capabilities for the environment targeting sophisticated attacker tactics, techniques, and procedures (TTPs).
Enhance endpoint and network visibility, along with detection and response playbooks, to protect SpaceX people, missions, and assets.