Security Analyst (Detection and Incident Response)

United States Digital Space LLC; Hawthorne (CA); On-site; USD 95,000 - 130,000; Full time

Benefits offered by this job

Stock options

Discretionary bonuses

Medical, vision, and dental coverage

401(k)

Job summary

United States Digital Space LLC is seeking a Security Analyst (Detection and Incident Response) to defend our environment and lead incident response from initial detection through root cause analysis. The role focuses on expanding endpoint and network visibility, developing detection capabilities, and collaborating with engineering teams to fortify security postures.

The position requires a bachelor’s in cybersecurity or a related field (or 2+ years of security experience).

Qualifications

• Bachelor's degree in cybersecurity, computer science, engineering, information technology, or other STEM discipline; OR 2+ years of professional information security experience in lieu of a degree.
• Experience with operating system auditing for Linux, Windows, or macOS.
• Experience with network and host-based collection tools.

Responsibilities

• Support the Security Operations Center by triaging and remediating detections and anomalies.
• Provide incident response from detection through root cause.
• Assist in evidence collection and collaborate with engineering teams to improve systems.
• Contribute toward detection capabilities targeting attacker TTPs.
• Enhance visibility and response playbooks to protect people and assets.

Skills

Threat actor TTPs

Incident response processes

SIEM experience

Scripting for security automation

Reverse engineering / forensics

Cloud security knowledge

Security community contributions

Certifications (SANS/GIAC/OSCP)

Education

Bachelor's degree in cybersecurity / STEM or 2+ years security experience

Tools

Elastic

Splunk

Job description

the company was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today the company is actively developing the technologies to make this possible, with the ultimate goal ofenabling human life on Mars.

SECURITY ANALYST (DETECTION AND INCIDENT RESPONSE)

As a Security Analyst at the company, you are on the frontline of our information security operations. You will be responsible for analyzing and responding to threats directed at our environment. As a highly visible and dynamic organization, we are a target of both nation states and actors focused on brand destruction. Information drives our business, and we must protect against unauthorized changes, improper destruction, loss, or theft of that information. It is paramount that we defend against loss of control or confidence in our systems to guarantee the highest probability of mission success.

RESPONSIBILITIES:

• Support the the company Security Operations Center (SOC) as our frontline responder by identifying, triaging, and remediating security detections and anomalies.
• Provide incident response support as a key stakeholder by investigating security incidents from initial detection through root cause.
• Assist in evidence collection and collaboration with the company engineering teams to proactively improve and secure systems from future attacks.
• Contribute towards impactful detection capabilities for the environment targeting sophisticated attacker tactics, techniques, and procedures (TTPs).
• Enhance endpoint and network visibility, along with detection and response playbooks, to protect the company people, missions, and assets.

BASIC QUALIFICATIONS:

• Bachelor's degree in cybersecurity, computer science, engineering, information technology, or other STEM discipline; OR 2+ years of professional experience in information security in lieu of a degree.
• Experience with operating system auditing for Linux, Windows, or macOS platforms.
• Experience with network and host-based collection tools.

PREFERRED SKILLS AND EXPERIENCE:

• Understanding of classic and emerging threat actor tactics, techniques, and procedures in both pre- and post-exploitation phases of attack lifecycles.
• Understanding of incident response processes.
• Experience using Elastic, Splunk and/or other SIEMs.
• Experience with scripting language(s) for the purposes of automating security operations and incident response processes.
• Experience with reverse engineering, C2 exploitation, and broader system/network forensics.
• Knowledge of cloud infrastructure and cloud security.
• Security community contributions (blog posts, conference talks, CTFs, tool development, etc.).
• SANS/GIAC, OSCP or similar certifications.

ADDITIONAL REQUIREMENTS:

• Willingness to work extended hours and weekends as needed.
• This role requires you to be onsite in Hawthorne, CA; remote or hybrid work will not be considered.
• Travel may be required; occasionally visit other the company locations.

COMPENSATION AND BENEFITS:

Pay range:

Security Analyst/Level I: $95,000.00 - $115,000.00/per year

Security Analyst/Level II: $110,000.00 - $130,000.00/per year

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience.

• You may also be eligible for long-term incentives, in the form of company stock or long-term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan.
• You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short and long-term disability insurance, life insurance, paid parental leave, and various other discounts and perks.
• You may also accrue 3 weeks of paid vacation and will be eligible for 10 or more paid holidays per year.
• Employees accrue paid sick leave pursuant to Company policy which satisfies or exceeds the accrual, carryover, and use requirements of the law.

ITAR REQUIREMENTS:

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

the company is an Equal Opportunity Employer; employment with the company is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Applicants wishing to view a copy of the company’s Aff… or applicants requiring reasonable accommodation to the application/interview process should reach out [e-mail]*.*