Insider Threat Analyst

VulnU; Hawthorne (CA); Presencial; USD 85 000 - 135 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Stock options

Medical, vision, and dental coverage

401(k) retirement plan

Paid time off and holidays

Life and disability insurance

Resumo da oferta

SpaceX is seeking an Insider Threat Analyst to research, analyze, and disseminate information protecting personnel, brand, assets, and IP. You will triage data, build queries across sources, and coordinate with Security, HR, Legal, and external partners to address threats to SpaceX infrastructure and programs.

The role requires handling sensitive information, adherence to confidentiality and ITAR requirements, and potential travel.

Qualificações

• Bachelor's degree in a relevant field with 2+ years of related experience or 4+ years of experience in information security, internal investigations, or counterintelligence in lieu of a degree.
• Experience using a SIEM and performing digital forensic investigations in government or corporate environments.
• Proficiency with Microsoft Purview for eDiscovery and familiarity with data pipelines and alerting concepts.

Responsabilidades

• Conduct comprehensive insider threat investigations and analyses.
• Uphold investigation tradecraft standards including confidentiality, objectivity, lawfulness, and timeliness.
• Collect and analyze program data to evaluate insider threat risk to SpaceX infrastructure, programs, and operations.
• Triage anomalous event data related to data exfiltration, data destruction, and other indicators of concern.
• Collaborate with Information Security, HR, Legal, Government Security, Physical Security, and external partners.
• Utilize network monitoring, data analytics, and other tools (DLP/SIEM/UEBA) to identify anomalies and drive investigations.
• Extract and organize insider threat program data to build metrics, reports, and case studies for timelines.

Conhecimentos

SIEM usage

Digital forensics

Interviewing

Analytical thinking

Technical communication

Adaptability

Attention to detail

Formação académica

Bachelor's degree + 2+ years experience

4+ years in information security/counterintelligence in lieu of degree

Ferramentas

Microsoft Purview

SIEM

DLP

UEBA

eDiscovery tooling

Descrição da oferta de emprego

INSIDER THREAT ANALYSTSpaceX is seeking a dynamic and driven individual with a demonstrated ability to work independently and as a member of a team in a fast-paced, high-tech environment. Our goal is to protect some of the world’s most advanced technologies including rockets, Dragon capsules for human transport, inter-planetary transport vehicles, the world's largest satellite communications network, etc. As an industry leader, we are a target of adversaries, both foreign and domestic, focused on slowing us down and accessing our proprietary technology. The work we do will literally safeguard mankind becoming an interplanetary species.You will be responsible for the research, analysis, production, and dissemination of information relevant to protecting the safety and security of personnel, brand, global assets, intellectual property, and operations at SpaceX. This role will triage anomalous event data and analyze insider threat program datasets to respond to threats posed to SpaceX. You will use comprehensive understanding of various collection methods and platforms to explore new data sources, build effective queries, and combine information from disparate sources.RESPONSIBILITIES:Conduct comprehensive investigations and analysis in support of SpaceX intellectual property and securityUphold investigation and analytic tradecraft standards including confidentiality, objectivity, lawfulness, timeliness, and use of all available sources of informationCollect and analyze available program data to evaluate insider threat risk to SpaceX infrastructure, programs, and operationsTriage anomalous event data associated with indicators of data exfiltration, data destruction and other key indicators of concernConduct internal investigations working with Information Security, HR, Legal, Government Security, Physical Security, and external partners based on information derived from internal and external sourcesUtilize network monitoring, data analytic, and other tools (DLP/SIEM/UEBA) to identify anomalous activity, initiate investigations and decipher underlying trendsExtract and organize insider threat program data to build metrics, reports and case studies addressing mission requirements and timelinesCommunicate findings in a timely and accurate manner to team members, management, and relevant stakeholdersSupport employee training and briefings for internal and external audiencesLiaise with external industry and government partners to benchmark insider threat program, share threat intelligence, and further investigationsContinuously identify and help implement program improvement methodsManage and safeguard sensitive information, including case files, employee PII, and intelligence reportsBASIC QUALIFICATIONS:Bachelor's degree and 2+ years of professional experience in internal investigations, information security, or counterintelligence; OR 4+ years professional experience in information security, internal investigations, or counterintelligence in lieu of a degreePREFERRED SKILLS AND EXPERIENCE:1+ year using a SIEM and/or conducting digital forensic investigations in a government or corporate environmentWorking level understanding of insider threat program missions, internal stakeholders, and manifestations of insider threatsProficiency in Microsoft Purview for eDiscoveryExperience performing business process automation or constructing data pipelinesFamiliarity with risk-based alerting, detection, and tuning concepts for insider riskExperience conducting preliminary assessments, determining scope, investigation planning, evidence collection/handling, interviewing and reporting findings to internal and external stakeholdersAbility to conduct interviews on short notice according to established internal guidelines.Excellent written and oral communication skills, with the ability to produce clear and concise reportsHighly organized with a strong attention to detailAbility to adapt to changing priorities and deadlinesCan swiftly adapt to new technical environments and workflowsAbility to exercise discretion when conducting confidential investigationsADDITIONAL REQUIREMENTS:Must be able to work extended hours and weekends as needed to support critical efforts and operationsMust be willing to travel ad hocActive TS/SCI clearance, or ability to obtain one. With an active clearance, candidates will be subject to pre-employment screening including background check and drug/alcohol test as well as random drug and alcohol testing during employmentCOMPENSATION AND BENEFITS:Pay Range:Level 1: $85,000 - $110,000Level 2: $100,000 - $135,000Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience.Base salary is just one part of your total rewards package at SpaceX. You may also be eligible for long-term incentives, in the form of company stock or long-term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan. You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short and long-term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation and will be eligible for 10 or more paid holidays per year. Employees accrue paid sick leave pursuant to Company policy which satisfies or exceeds the accrual, carryover, and use requirements of the law.Those with an active clearance will receive a 10% differential, up to an additional $20,000 annually, once officially briefed into a classified program.ITAR REQUIREMENTS:To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.Applicants wishing to view a copy of SpaceX’s Affirmative Action Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should reach out to [e-mail].