Lead Cybersecurity Engineer, SOC - Spacecraft

Speedrun Talent Network; Los Angeles (CA); On-site; USD 140,000 - 230,000; Full time

Benefits offered by this job

Equity in company

Best-in-class healthcare

PTO 15-20 days + holidays

401(k) with company match

Parental leave with childcare stipend

Daily catered lunch & snacks

Office in Playa Vista with in-person +

Job summary

Apex Technology, Inc. in Playa Vista, CA, is seeking a Lead Cybersecurity Engineer to oversee the Security Operations Center (SOC), drive proactive threat detection, and coordinate incident response.

You will lead a team of SOC analysts/engineers, tune SIEM and other tools, and contribute to strategic security planning and audits. You will be responsible for 24/7 SOC coverage, building a high-performing team, and interfacing with IT, compliance, and external partners.

Qualifications

• 7+ years of experience in cybersecurity operations, with at least 2-3 years in a leadership role.
• TS/SCI security clearance required.
• Relevant certifications such as CISSP, CISM, GIAC GCIH, or CompTIA Security+.
• Proficiency in security tools (SIEM, EDR/XDR, IDP/IDS, CASB/SASE, Nessus, Burp Suite, firewalls) and scripting languages (Python, PowerShell)

Responsibilities

• Team Leadership and Development: Manage a team of SOC analyst(s) & engineer(s), including hiring, training, performance evaluations, and professional development to build a high-performing security operations unit.
• Incident Detection and Response: Oversee monitoring of security events using SIEM tools and other technologies; coordinate incident response efforts, including triage, escalation, containment, eradication, and post-incident analysis to minimize impact and ensure rapid resolution.
• Threat Intelligence and Hunting: Conduct proactive threat hunting, malware analysis, and deep-dive investigations into escalated incidents; integrate threat intelligence to enhance detection capabilities and stay ahead of emerging cyber risks.
• Process and Tool Optimization: Manage, tune, and optimize SOC tools such as SIEM (Elastic), IDS/IPS, endpoint security, and vulnerability management systems; develop and refine security policies, procedures, playbooks, and automation to improve efficiency and reduce false positives.
• Metrics and Reporting: Develop, track, and report on key performance indicators (KPIs) and metrics for SOC operations via dashboards and reports; prepare executive summaries on threats, incidents, and defensive posture to inform decision-making.
• Strategic Planning and Compliance: Contribute to SOC strategy, including resource allocation, technology evaluations, and integration of new tools; ensure compliance with security standards, conduct tabletop exercises, and collaborate on risk assessments and audits.
• Stakeholder Communication and Escalation: Serve as the primary point of escalation for complex incidents; coordinate with internal teams and external partners during active threats; foster cross-functional relationships to support organizational security goals.
• Operational Oversight: Ensure 24/7 SOC coverage, including staffing and surge support; perform hands-on analysis as needed and drive continuous improvement in processes to enhance overall cybersecurity resilience.
• Assessment & Compliance Support: Assist with achieving CMMC, ISO 27001, and other accreditations; maintain accreditations with continuous monitoring and changes.
• Assist with other duties: Assist with daily IT tickets and projects when needed.

Skills

Leadership

Team management

Threat hunting

Incident response

Security operations

Analytical thinking

Communication

Education

CISSP, CISM, GIAC GCIH, CompTIA Security+ (certifications)

Tools

SIEM (Elastic)

IDS/IPS

EDR/XDR

CASB/SASE

Nessus

Burp Suite

Firewalls

Python

PowerShell

Job description

Apex Technology, Inc. in Playa Vista, CA, is seeking a Lead Cybersecurity Engineer to oversee the Security Operations Center (SOC), drive proactive threat detection, and coordinate incident response.

You will lead a team of SOC analysts/engineers, tune SIEM and other tools, and contribute to strategic security planning and audits. You will be responsible for 24/7 SOC coverage, building a high-performing team, and interfacing with IT, compliance, and external partners.