Cyber Defense Analyst II: Hands-on Incident Hunter

Blue Origin; Seattle (WA); On-site; USD 105,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) with company match

Paid time off

Education support program

Job summary

Blue Origin is seeking a Cyber Defense Analyst to monitor, investigate, and respond across classified enclaves, mission systems, and labs. You’ll work hands-on with security tooling, deploy sensors, onboard log sources, and tune detections under senior engineers.

This role emphasizes growth into senior engineering positions within a tight team. The position requires 2+ years in security operations or related fields, DoD/IC experience, and an active TS clearance with SCI eligibility.

Qualifications

• 2+ years in security operations, incident response, IT ops, or equivalent military/government cyber experience
• Familiarity with SIEM/EDR concepts and investigating events
• Understanding of ATT&CK framework and common attack techniques
• Clear written communication and curiosity to investigate complex threads
• Active U.S. Government TS clearance with SCI eligibility and SAP access eligibility; U.S. citizenship
• DoD 8140 CSSP Analyst or IAT Level II certification at hire or within 6 months

Responsibilities

• Monitor and triage security events across SIEM, EDR, network sensors, and logs.
• Investigate by pivoting across host, network, and identity data.
• Serve as first responder during incidents per playbooks and preserve evidence.
• Hunt for threats, initially with seniors, then independently.
• Support audit and insider threat reviews with security teams.
• Stand watch during launches and mission operations.
• Assist with sensor deployment, log source onboarding, and agent rollout.
• Tune detections and reduce false positives; improve playbooks.
• Automate recurring triage, enrichment, and reporting tasks.

Skills

Security operations

Incident response

Windows & Linux

SIEM/EDR concepts

Threat hunting

Clear communication

Top Secret clearance

DoD 8140 certification

Tools

Splunk

EDR tools

Job description

Blue Origin is seeking a Cyber Defense Analyst to monitor, investigate, and respond across classified enclaves, mission systems, and labs. You’ll work hands-on with security tooling, deploy sensors, onboard log sources, and tune detections under senior engineers.

This role emphasizes growth into senior engineering positions within a tight team. The position requires 2+ years in security operations or related fields, DoD/IC experience, and an active TS clearance with SCI eligibility.