Senior Cyber Defense & DFIR Analyst

Logoslabs; San Francisco (CA); Remote; USD 80,000 - 90,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) with employer match

Employee Stock Purchase Program

Paid time off & holidays

Parental leave

Professional development

Flexible Spending Accounts

Swag and perks

Job summary

BlackSky is seeking a Senior Security Analyst to monitor, defend, and secure our enterprise environment. You’ll analyze logs in our SIEM, develop detections, and use CTI with DFIR activities to strengthen the SOC.

The role supports multiple US locations and remote work options. You will work with cross-functional teams to identify threats, coordinate remediation, and ensure compliance with industry standards.

Qualifications

• Minimum seven (7) years in security analyst/DFIR roles.
• Strong Linux security background (Ubuntu, Amazon Linux, CentOS).
• Experience with endpoint security mechanisms on Windows/Mac/Linux.

Responsibilities

• Perform security monitoring and DFIR activities across environments by reviewing events and IOC/IOA indicators.
• Review CTI and apply insights to secure the enterprise.
• Conduct regular threat hunting across environments.
• Document procedures for job duties and standardize processes.
• Analyze data from logs, network traffic, and SaaS security tools.
• Perform malware analysis using sandbox tools.
• Support continuous monitoring to identify threats.
• Prioritize remediation with IT/Product owners.
• Assist with vulnerability management and remediation.
• Define offensive testing scope with product teams to support remediation.
• Monitor compliance with CIS Benchmarks/DISA STIGs.
• Develop automation to improve detections and reduce manual work.
• Complete compliance assessments and share findings with teams.
• Document findings to enhance security posture.

Skills

DFIR experience

Threat hunting

Incident response

Log analysis

Security monitoring

Documentation

Education

Security certifications (CISSP, GCIH, CHFI, GCFE, GCFA, GREM, GNFA, GCSA, GCPN, GPCS, GSOC, GCDA, ACE, EnCE, AWS Security)

Tools

EDR tools

Nessus

CrowdStrike XDR/MDR

OpenSCAP

Active Directory / Entra ID

Job description

BlackSky is seeking a Senior Security Analyst to monitor, defend, and secure our enterprise environment. You’ll analyze logs in our SIEM, develop detections, and use CTI with DFIR activities to strengthen the SOC.

The role supports multiple US locations and remote work options. You will work with cross-functional teams to identify threats, coordinate remediation, and ensure compliance with industry standards.