Sr. Security Analyst (Threat Detection)

SpaceX•Redmond, WA

3d•Onsite

About The Position

SpaceX is hiring a Sr. Security Analyst (Threat Detection) to analyze and respond to threats targeting its environment. The role supports the Security Operations Center as a frontline responder, investigates security incidents from initial detection through root cause, and works with engineering teams to improve system security. The analyst will develop detection capabilities against sophisticated attacker tactics, techniques, and procedures, and enhance endpoint and network visibility and response playbooks to protect SpaceX people, missions, and assets. The position is onsite in Redmond, Washington; remote or hybrid work will not be considered. Travel may be required, including occasional visits to other SpaceX locations. The role requires willingness to work extended hours and weekends as needed. Applicants must meet the stated U.S. export-control eligibility requirements or be eligible to obtain the required authorizations.

Requirements

At least 5 years of information security, networking, and/or systems engineering experience and a bachelor's degree in cybersecurity, computer science, engineering, information technology, or another STEM discipline; or at least 7 years of such experience in lieu of a degree.
Experience with operating system internals and auditing for Linux, Windows, or macOS platforms.
Experience with network and host-based collection tools.
Willingness to work extended hours and weekends as needed.
Must work onsite in Redmond, Washington; remote or hybrid work will not be considered.
Must be a U.S. citizen or national, lawful permanent resident, refugee, or asylee, or be eligible to obtain required U.S. Department of State authorizations.

Nice To Haves

Deep understanding of classic and emerging threat actor tactics, techniques, and procedures in pre- and post-exploitation phases of attack lifecycles.
Deep understanding of incident response processes.
Experience using Elastic, Splunk, and/or other SIEMs.
Experience with scripting languages to automate security operations and incident response processes.
Experience with reverse engineering, C2 exploitation, and broader system and network forensics.
Security community contributions, such as blog posts, conference talks, CTFs, or tool development.
Knowledge of cloud infrastructure and cloud security.
SANS/GIAC, OSCP, or similar certifications.

Responsibilities

Support the SpaceX Security Operations Center as a frontline responder by identifying, triaging, and remediating security detections and anomalies.
Provide incident response support by investigating security incidents from initial detection through root cause.
Assist with evidence collection and collaborate with SpaceX engineering teams to proactively improve and secure systems against future attacks.
Contribute to detection capabilities targeting sophisticated attacker tactics, techniques, and procedures.
Enhance endpoint and network visibility, along with detection and response playbooks, to protect SpaceX people, missions, and assets.

Benefits

May be eligible for long-term incentives in the form of company stock or long-term cash awards.
Potential discretionary bonuses.
Ability to purchase additional stock at a discount through an Employee Stock Purchase Plan.
Comprehensive medical, vision, and dental coverage.
401(k) retirement plan.
Short- and long-term disability insurance.
Life insurance.
Paid parental leave.
Various other discounts and perks.
May accrue 3 weeks of paid vacation.
Eligible for 10 or more paid holidays per year.
Washington State paid sick time in compliance with state and federal law.
Company shuttles for roundtrip travel from select Seattle locations to the SpaceX Redmond office Monday to Friday.