Senior Space Security & Incident Response Engineer

Northwood; Torrance (CA); On-site; USD 140,000 - 190,000; Full time

Job summary

Northwood is building a global network of phased array ground stations for mission-critical space communications. We seek a Senior Detection and Response Engineer to lead our security operations center, hunt threats across distributed satellite infrastructure, and drive incident response for systems that can’t go down.

You will develop detection logic for SIEM, conduct forensics and malware analysis, and automate IR workflows across AWS multi-cloud and Linux-based ground stations.

Qualifications

• 5+ years in SOC operations, IR, or threat hunting.
• Experience with SIEM platforms (Splunk, Sentinel, Chronicle) including custom rule development.
• Digital forensics and malware analysis using Volatility and YARA.
• Programming in Python, PowerShell, or similar for automation.
• Experience with endpoint security (CrowdStrike, SentinelOne) and network monitoring.
• Strong Linux forensics and log analysis across distributed systems.
• Ability to obtain TS/SCI clearance.

Responsibilities

• Lead incident response and forensics - manage incidents from detection to resolution across distributed ground stations and cloud.
• Build and tune detection rules - develop custom detection logic for SIEM platforms and threat hunting queries.
• Operate 24/7 security monitoring - monitor events in AWS multi-cloud and ground systems; triage and escalate threats.
• Hunt threats across space infrastructure - search for APTs affecting satellite ground stations and RF networks.
• Create incident response playbooks - build runbooks and escalation protocols for government customers.
• Analyze threat intelligence - research adversary tactics; integrate feeds into detection systems.
• Build security automation - develop Python/PowerShell scripts for automated IR and SOAR workflows.

Skills

SIEM platforms

Threat hunting

Python

PowerShell

Linux forensics

Incident response

Tools

Volatility

YARA

Hex editors

CrowdStrike

SentinelOne

Job description

Northwood is building a global network of phased array ground stations for mission-critical space communications. We seek a Senior Detection and Response Engineer to lead our security operations center, hunt threats across distributed satellite infrastructure, and drive incident response for systems that can’t go down.

You will develop detection logic for SIEM, conduct forensics and malware analysis, and automate IR workflows across AWS multi-cloud and Linux-based ground stations.