Senior Security Operations Engineer (Threat Hunting & IR)

Karman Space & Defense; Huntington Beach (CA); On-site; USD 106,000 - 135,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with company match

Paid time off

Health Savings Account with companycon

Flexible Spending Accounts

Company‑paid life and AD&D insurance

Short‑ and long‑term disability

Job summary

Karman Space & Defense in Huntington Beach, CA seeks a Security Operations Engineer to monitor, detect, investigate, and respond to cyber incidents across SIEM, endpoints, identities, and cloud services. You will partner with internal teams and external providers to strengthen visibility and containment.

The role requires 4+ years in cybersecurity, experience with Microsoft Defender/Entra ID and Microsoft Sentinel, and the ability to develop detections and drive incident response improvements

Qualifications

• Bachelor's degree in cybersecurity or related field, or equivalent professional experience.
• 4+ years of experience in cybersecurity, security operations, incident response, detection engineering, or related.
• Experience with SIEM or security monitoring platforms such as Microsoft Sentinel or similar technologies.
• Experience working with endpoint, identity, cloud, email, or network security telemetry.
• Familiarity with Microsoft Defender, Microsoft Entra ID, or related Microsoft security technologies.
• Experience developing or tuning alerts, analytics, queries, or detection logic.
• Working knowledge of attacker techniques including credential abuse, privilege escalation, persistence, and lateral movement.

Responsibilities

• Monitors and investigates security activity across SIEM, endpoint, identity, email, cloud, and other telemetry sources.
• Develops, tests, tunes, and documents security detections, analytics, alerting logic, and monitoring capabilities.
• Conducts threat hunting activities, identifies monitoring gaps, and improves visibility across critical environments.
• Investigates identity compromise, malware, phishing, endpoint compromise, unauthorized access, and other cybersecurity events.
• Establishes scope, impact, affected assets, identities, users, data, and containment actions for incidents.
• Coordinates containment and remediation activities with technology teams, system owners, and external providers.
• Preserves technical evidence, documents findings, validates remediation, and escalates exposures as needed.
• Engages stakeholders during investigations and provides technical evidence to support security decisions.
• Collaborates with external SOC and MSSP partners to improve investigation quality and response outcomes.
• Supports security metrics, improvements, and evidence requirements related to cybersecurity obligations.

Skills

SIEM experience

Threat hunting

Endpoint security

Microsoft Defender

Microsoft Entra ID

Alert tuning

Analytical skills

Education

Bachelor's degree in cybersecurity or related field

Tools

Microsoft Sentinel

Kusto Query Language (KQL)

MITRE ATT&CK

Job description

Karman Space & Defense in Huntington Beach, CA seeks a Security Operations Engineer to monitor, detect, investigate, and respond to cyber incidents across SIEM, endpoints, identities, and cloud services. You will partner with internal teams and external providers to strengthen visibility and containment.

The role requires 4+ years in cybersecurity, experience with Microsoft Defender/Entra ID and Microsoft Sentinel, and the ability to develop detections and drive incident response improvements