Senior Security Analyst: Threat Detection & DFIR Lead

Blacksky Holdings LLC; Herndon (VA); On-site; USD 80,000 - 90,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) with matching

Paid time off

Parental leave

Job summary

BlackSky is seeking a Senior Security Analyst to monitor, defend, and secure our enterprise environment. You will analyze logs, perform DFIR, conduct threat hunting, and drive vulnerability remediation in collaboration with IT, product, and security teams.

The role can be based in Herndon, VA or Seattle, WA, with hybrid expectations and travel as needed. A US citizenship is required for ITAR/compliance.

Qualifications

• At least seven (7) years of security analyst and DFIR experience.
• Seven+ years in IT security.
• Candidates should hold at least one listed security certification.
• Must document processes, procedures, and results.

Responsibilities

• Perform security monitoring and DFIR across environments by reviewing events/IOCs/IOAs and CTI.
• Review multiple sources of CTI to inform and secure the enterprise.
• Conduct regular threat hunting across environments.
• Document procedures for job duties to formalize ad-hoc processes.
• Analyze data from logs, network traffic, and SaaS security tools.
• Perform malware analysis using standard sandbox tools.
• Support continuous monitoring to identify security threats.
• Assist vulnerability management with prioritization of critical issues.
• Collaborate with product owners on remediation of vulnerabilities.

Skills

Security analysis

DFIR

Threat hunting

Incident response

Log analysis

Scripting

Education

Security certifications (CISSP, GCIH, CHFI, GCFE, GCFA, GREM, GNFA, GCSA, GCPN, GPCS, GSOC, GCDA, ACE, EnCE, AWS Certified Security - Specialty)

Tools

Cisco Duo

Nessus

OpenSCAP

CrowdStrike XDR/MDR

ManageEngine

Cisco Umbrella

Active Directory / Entra ID

Netskope

Job description

BlackSky is seeking a Senior Security Analyst to monitor, defend, and secure our enterprise environment. You will analyze logs, perform DFIR, conduct threat hunting, and drive vulnerability remediation in collaboration with IT, product, and security teams.

The role can be based in Herndon, VA or Seattle, WA, with hybrid expectations and travel as needed. A US citizenship is required for ITAR/compliance.