Senior Security Detection & Incident Response Engineer

K2 Space; Los Angeles (CA); Presencial; USD 180 000 - 250 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health insurance

Paid time off

Life insurance

Parental leave

Resumo da oferta

K2 Space is seeking a senior security professional to own detection and response for our corporate environment. You’ll manage the SIEM, develop detections, and drive incidents from first signal through containment and lessons learned.

You will work across identity, endpoints, SaaS, network, and cloud telemetry, collaborating with IT, HR, and Legal to close visibility gaps and strengthen defenses for a fast-growing aerospace company.

Qualificações

• 10+ years in security operations, detection and response, or incident response.
• Hands-on SIEM experience with log onboarding, parsing, and rule development.
• Led security incidents end-to-end from detection to post-incident review.
• Strong knowledge of MITRE ATT&CK and attacker techniques.
• Experience investigating endpoint, identity, network, and cloud telemetry across macOS, Windows, Linux.

Responsabilidades

• Own day-to-day detection and response across the corporate environment from alert triage to remediation.
• Mature the SIEM with log onboarding, parsing, enrichment, rule tuning, and health management.
• Write and maintain detection content mapped to MITRE ATT&CK using detection-as-code practices.
• Act as incident commander coordinating stakeholders and timelines.
• Build automation and playbooks across SOAR, scripting, and vendor APIs.

Conhecimentos

SIEM administration

Incident response

MITRE ATT&CK

EDR/endpoint security

Cloud/SaaS telemetry

Programming (Python/Go/C/C++)

Formação académica

Bachelor's degree in related field

Ferramentas

Splunk

Microsoft Sentinel

Elastic

Panther

Chronicle

Descrição da oferta de emprego

K2 Space is seeking a senior security professional to own detection and response for our corporate environment. You’ll manage the SIEM, develop detections, and drive incidents from first signal through containment and lessons learned.

You will work across identity, endpoints, SaaS, network, and cloud telemetry, collaborating with IT, HR, and Legal to close visibility gaps and strengthen defenses for a fast-growing aerospace company.