Senior Cyber Defense Analyst

BlackSky; Virginia; Hybrid; USD 80,000 - 90,000; Full time

Benefits offered by this job

Medical, dental, vision benefits

401(k) match

PTO 15 days + holidays

Employee stock purchase program

Job summary

BlackSky seeks a Senior Security Analyst to join our Security Operations Center and defend the enterprise from cyber threats. You will monitor networks, cloud services, and endpoints, analyze logs in a SIEM, and develop detections and alerts integrating CTI and DFIR workflow.

The role supports Herndon, VA and Seattle, WA offices and may be based anywhere in the United States. A 7+ year track record in security and relevant certifications is required.

Qualifications

• Seven years of experience performing security analyst and DFIR activities.
• Seven years in IT security.
• Candidates should hold at least one of the listed security certifications (see above).
• Ability to document processes, procedures, and results of technical analysis for review by peers.
• Experience with endpoint security mechanisms (EDR, CASB) on Windows, MacOS, and/or Linux.
• U.S. citizenship required.

Responsibilities

• Monitor security operations across corporate, product, and mission environments.
• Review cyber threat intelligence to secure the enterprise.
• Conduct regular threat hunting and DFIR activities.
• Document procedures and share findings with security and IT teams.
• Develop automation to improve detection and response timelines.
• Support compliance with CIS benchmarks and DISA STIGs.

Skills

Threat hunting

DFIR

SIEM analysis

Network security

Documentation

Education

CISSP

GCIH

CHFI

GCFE

GCFA

GREM

GNFA

GCSA

GCPN

GPCS

GSOC

GCDA

ACE

EnCE

AWS Certified Security - Specialty

Tools

Nessus

CrowdStrike XDR/MDR

OpenSCAP

Cisco Duo

Active Directory / Entra ID

Job description

BlackSky seeks a Senior Security Analyst to join our Security Operations Center and defend the enterprise from cyber threats. You will monitor networks, cloud services, and endpoints, analyze logs in a SIEM, and develop detections and alerts integrating CTI and DFIR workflow.

The role supports Herndon, VA and Seattle, WA offices and may be based anywhere in the United States. A 7+ year track record in security and relevant certifications is required.