Hands-On Cyber Defense Analyst II (TS/SCI Eligible)

Blue Origin; Denver (CO); On-site; USD 91,000 - 127,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

401(k) match

Education support program

Stock options

Paid time off

Job summary

Blue Origin in Colorado seeks a Cyber Defense Analyst to monitor, investigate, and respond across classified enclaves and mission systems. This hands-on role involves deploying sensors, tuning detections, and working with senior engineers to improve security tooling.

You'll perform triage, incident response, and structured hunts, while collaborating on audit and insider threat reviews. Onsite, mission-critical shifts and limited travel apply.

Qualifications

• 2+ years of hands-on experience in security operations, incident response, IT operations, or system administration or equivalent military/government cyber experience
• Working knowledge of network protocols and Windows and Linux fundamentals
• Familiarity with SIEM and EDR concepts and the ability to investigate events using them
• Understanding of common attack techniques and exposure to the MITRE ATT&CK framework
• Clear, concise written communication - your investigation notes will be read by senior staff and government customers
• Genuine curiosity and the instinct to keep pulling on a thread when something doesn't add up
• Active U.S. Government Top Secret clearance with SCI eligibility and eligibility for SAP access determination; U.S. citizenship
• DoD 8140 CSSP Analyst or IAT Level II certification (Security+ CE or equivalent) at hire or within 6 months

Responsibilities

• Monitor and triage security events across SIEM, EDR, network sensors, and audit logs
• Investigate by pivoting across host, network, and identity data to build a clear picture
• Respond as first responder during incidents and follow playbooks
• Hunt for threats and learn what normal looks like
• Support audit and insider threat review with privileged user monitoring
• Stand watch during launches and mission operations
• Get hands on tooling: deploy sensors, onboard log sources, and roll out agents
• Tune detections and reduce false positives; improve rule coverage
• Improve and rewrite playbooks based on gaps found
• Automate recurring triage, enrichment, and reporting tasks

Skills

Security operations

Incident response

Windows fundamentals

Linux fundamentals

SIEM/EDR

MITRE ATT&CK

Clear written communication

Curiosity and persistence

US clearance

CSSP/IAT certification

Education

DoD 8140 CSSP Analyst or IAT Level II (Security+ CE or equivalent)

Tools

SIEM

EDR

Job description

Blue Origin in Colorado seeks a Cyber Defense Analyst to monitor, investigate, and respond across classified enclaves and mission systems. This hands-on role involves deploying sensors, tuning detections, and working with senior engineers to improve security tooling.

You'll perform triage, incident response, and structured hunts, while collaborating on audit and insider threat reviews. Onsite, mission-critical shifts and limited travel apply.