Senior Security Engineer – Detection & Incident Response (Equity)

K2 Space; Los Angeles (CA); On-site; USD 150,000 - 190,000; Full time

Job summary

K2 Space seeks a security operations professional to own detection and response for our corporate environment. You will manage the SIEM, implement detections, and coordinate incidents from discovery to containment. The role spans identity, endpoints, SaaS, network, and cloud telemetry to close visibility gaps.

You will lead incident response, build automation, and collaborate with IT, HR, and Legal to strengthen security posture while supporting a fast-growing space hardware company.

Qualifications

• 5+ years in security operations, detection and response
• Experience leading security incidents end to end
• Knowledge of MITRE ATT&CK and evidence sources for investigations
• Experience with macOS/Windows/Linux telemetry and EDR
• Development experience in Python/Go/C++/Rust for automation
• Bachelor-level STEM or security-related degree or equivalent experience

Responsibilities

• Own day-to-day detection and response across the corporate environment
• Administer and mature the SIEM: log onboarding, parsing, enrichment, rule tuning
• Write/detect content mapped to MITRE ATT&CK with detection-as-code
• Act as incident commander for security incidents
• Build runbooks and automation across SOAR and APIs
• Threat hunt across endpoint, identity, SaaS, and cloud telemetry
• Run adversary emulation and purple team exercises
• Perform host, network, and cloud forensics across OS
• Investigate phishing/bec and insider risk with IT/HR/Legal
• Harden identity, endpoint, and network controls with IT/infrastructure teams
• Translate findings into vulnerability management priorities
• Participate in on-call rotations
• Maintain runbooks and SOPs; mentor juniors
• Support compliance/audit with monitoring evidence

Skills

SIEM administration

Incident response

ATT&CK framework

Threat hunting

EDR knowledge

Python

Go

C++

Rust

Cloud telemetry

Education

Bachelor's degree in security-related field

Tools

Splunk

Microsoft Sentinel

Elastic

Panther

Chronicle

Job description

K2 Space seeks a security operations professional to own detection and response for our corporate environment. You will manage the SIEM, implement detections, and coordinate incidents from discovery to containment. The role spans identity, endpoints, SaaS, network, and cloud telemetry to close visibility gaps.

You will lead incident response, build automation, and collaborate with IT, HR, and Legal to strengthen security posture while supporting a fast-growing space hardware company.