Senior Security Analyst – SIEM, DFIR & Threat Hunting

BlackSky Global; Seattle (WA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health insurance

401(k) with employer match

Paid time off

On-site gym

Casual offices

Stock Purchase Program

Job summary

BlackSky Global in Seattle, WA is seeking a Senior Security Analyst to join our Security Operations Center. You will monitor, defend, and secure our enterprise environment, analyzing logs from networks, devices, and cloud services in an integrated SIEM.

You will perform DFIR analyses, threat hunting, and develop detections and dashboards to accelerate response. Strong Linux/Windows security background and relevant certifications are expected.

Qualifications

• Experience performing IR, DFIR, malware analysis, and threat hunting.
• CISSP and/or GIAC certifications or equivalent security credentials.
• Extensive experience with Windows, MacOS, and Linux security operations.
• Ability to document processes and results of technical analysis for peers.

Responsibilities

• Monitor, defend, and secure BlackSky’s enterprise environment.
• Analyze logs from networks, devices, cloud services, and applications in a SIEM.
• Develop searches, dashboards, and alerts to improve detection and response.
• Perform DFIR across corporate, product, and mission environments.
• Lead threat hunting and coordinate remediation with IT and product owners.
• Ensure compliance with CIS, STIGs, NIST, and customer-specific requirements.
• Document findings and share with security, IT, and product teams.

Skills

Incident Response

Digital Forensics

Malware Analysis

Network Traffic Analysis

Threat Hunting

Education

GIAC Certified Incident Handler (GCIH)

CISSP

AWS Certified Security - Specialty

GIAC Cloud Penetration Tester (GCPN)

EnCase Certified Examiner (EnCE)

Tools

SIEM

Job description

BlackSky Global in Seattle, WA is seeking a Senior Security Analyst to join our Security Operations Center. You will monitor, defend, and secure our enterprise environment, analyzing logs from networks, devices, and cloud services in an integrated SIEM.

You will perform DFIR analyses, threat hunting, and develop detections and dashboards to accelerate response. Strong Linux/Windows security background and relevant certifications are expected.