Blue Team Security Analyst — Incident Response & SOC

SPACE EXPLORATION TECHNOLOGIES CORP; Hawthorne (CA); On-site; USD 95,000 - 130,000; Full time

Benefits offered by this job

Stock options and equity potential

Comprehensive health coverage

401(k) retirement plan

Job summary

SpaceX is seeking a Security Analyst (Blue Team) to join our Security Operations Center in Hawthorne, CA. You will be on the frontline defending SpaceX environments against threats, investigating incidents from detection through root cause, and collaborating with engineering to harden systems and improve defenses.

The role focuses on enhancing endpoint and network visibility, developing detection capabilities, and supporting incident response processes for mission-critical infrastructure.

Qualifications

• Bachelor's degree in cybersecurity, computer science, engineering, IT, or other STEM discipline or 2+ years of information security experience in lieu of a degree.
• Experience auditing Linux, Windows, or macOS environments.
• Experience with network and host-based collection tools.

Responsibilities

• Support the SpaceX SOC as frontline responder by triaging and remediating detections.
• Provide incident response support from detection through root cause.
• Assist in evidence collection and collaborate with engineering teams to improve security.
• Contribute towards detection capabilities targeting attacker TTPs.
• Enhance visibility and response playbooks to protect SpaceX assets.

Skills

Linux auditing

Windows auditing

Network monitoring

SIEM

Scripting

Cloud security

Education

Bachelor's degree in cybersecurity or STEM

2+ years information security experience in lieu of degree

Tools

Elastic

Splunk

Job description

SpaceX is seeking a Security Analyst (Blue Team) to join our Security Operations Center in Hawthorne, CA. You will be on the frontline defending SpaceX environments against threats, investigating incidents from detection through root cause, and collaborating with engineering to harden systems and improve defenses.

The role focuses on enhancing endpoint and network visibility, developing detection capabilities, and supporting incident response processes for mission-critical infrastructure.