Senior Cyber Threat Operations Engineer — Incident Response Lead

Umbra; Virginia (MN); On-site; USD 160,000 - 200,000; Full time

Benefits offered by this job

Flexible Time Off

Medical, Dental, Vision, Life

401k with company contribution

Stock Options

Free parking in the building

Free lunch in office daily

Job summary

Umbra is seeking a Senior Cyber Threat Operations Engineer to strengthen defenses against cyber threats across our satellite-focused platforms. The role involves crafting robust security strategies, performing in-depth threat assessments, and leading incident response initiatives with engineers and analysts to safeguard networks and information systems.

The ideal candidate brings extensive cyber operations experience, threat intelligence expertise, and strong critical thinking to tackle complex

Qualifications

• 5-8+ years of experience in cyber threat operations or related cybersecurity domain.
• Proven incident response, threat hunting, and vulnerability management experience.
• Strong understanding of security frameworks, protocols, and practices.
• Ability to communicate findings to technical and non-technical stakeholders.
• U.S. citizenship required for security clearance eligibility.

Responsibilities

• Lead development of Defensive Cyber Operations and Continuous Monitoring capabilities.
• Monitor signatures and behavioral indicators across divisions daily.
• Oversee threat hunting, detection engineering, and defensive actions.
• Conduct threat analysis, identify risks, and recommend remediation actions.
• Lead incident response and perform root-cause analyses to prevent recurrence.
• Document threat analysis, incident response, and security posture for leadership.

Skills

Cyber threat ops

Incident response

Threat intelligence

SIEM/IDS-IPS tools

End-user protection tools

Education

Technical degree in CS/IT/Cybersecurity

Tools

DLP

UEBA

SIEM

IDS/IPS

Endpoint protection

Job description

Umbra is seeking a Senior Cyber Threat Operations Engineer to strengthen defenses against cyber threats across our satellite-focused platforms. The role involves crafting robust security strategies, performing in-depth threat assessments, and leading incident response initiatives with engineers and analysts to safeguard networks and information systems.

The ideal candidate brings extensive cyber operations experience, threat intelligence expertise, and strong critical thinking to tackle complex