Sr. Security Analyst

SpaceX
Redmond, WA
On-site

Who this role is best for

Strong fit for security professionals with hands-on incident response experience who can work onsite in Redmond, WA and contribute to proactive threat detection and system hardening.

Best fit for

  • Candidates with 5+ years in information security and experience in operating system auditing
    — “5+ years of information security, networking and/or systems engineering experience”
  • Candidates with a background in network and host-based collection tools and a desire to work in a high-stakes, mission-critical environment
    — “Experience with network and host-based collection tools”

Things to consider

  • Onsite presence in Redmond, WA is mandatory with no remote or hybrid work options
    — “This role requires you to be onsite in Redmond, WA; remote or hybrid work will not be considered”
  • Candidates must meet ITAR export regulations, primarily requiring U.S. citizenship or residency
    — “To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident”

How to stand out

  • Highlight experience with Linux, Windows, or macOS platform auditing in your resume and interviews
    — “Experience with operating system internals and auditing for Linux, Windows, or macOS platforms”
  • Emphasize contributions to detection capabilities or threat intelligence in your application materials
    — “Contribute towards impactful detection capabilities for the environment targeting sophisticated attacker tactics, techniques, and procedures (TTPs)”
  • Demonstrate familiarity with SIEM tools like Elastic or Splunk in your resume and interview responses
    — “Experience using Elastic, Splunk and/or other SIEMs”
  • Showcase reverse engineering or system/network forensics experience to align with the role's demands
    — “Experience with reverse engineering, C2 exploitation, and broader system/network forensics”
Pace · Fast PacedCollaboration · HighAutonomy · MediumDecision Impact · Company

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • successful mitigation of security threats
  • enhanced detection capabilities
Typical background
information securitynetworking

Skills & requirements

Required

Incident ResponseSecurity DetectionNetwork SecurityOperating System Internals

Preferred

Cloud SecurityReverse EngineeringScripting For Security Operations

Stack & domain

LinuxWindowsMacosElasticSplunkScriptingReverse EngineeringC2 ExploitationSystem/network ForensicsCloud InfrastructureCloud SecuritySans/giacOSCP

About the role

Original posting from SpaceX via Greenhouse

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.

SR. SECURITY ANALYST

We are a target of both nation states and actors focused on brand destruction. Information drives our business, and we must protect against unauthorized changes, improper destruction, loss, or theft of that information. As a highly visible and dynamic organization, we must also value and guard against damage to our reputation and brand. Finally, it is paramount that we defend against loss of control or confidence in our systems to guarantee the highest probability of mission success. As a SpaceX Security Analyst, you will be responsible for analyzing and responding to threats directed at our environment.

RESPONSIBILITIES:

Support the SpaceX Security Operations Center (SOC) as our frontline responder by identifying, triaging, and remediating security detections and anomalies.

Provide incident response support as a key stakeholder by investigating security incidents from initial detection through root cause.

Assist in evidence collection and collaboration with SpaceX engineering teams to proactively improve and secure systems from future attacks.

Contribute towards impactful detection capabilities for the environment targeting sophisticated attacker tactics, techniques, and procedures (TTPs).

Enhance endpoint and network visibility, along with detection and response playbooks, to protect SpaceX people, missions, and assets.

BASIC QUALIFICATIONS:

5+ years of information security, networking and/or systems engineering experience and a Bachelor's degree in cybersecurity, computer science, engineering, information technology, or other STEM discipline; OR 7+ years of information security, networking and/or systems engineering experience in lieu of a degree.

Experience with operating system internals and auditing for Linux, Windows, or macOS platforms.

Experience with network and host-based collection tools.

PREFERRED SKILLS AND EXPERIENCE:

Deep understanding of classic and emerging threat actor tactics, techniques, and procedures in both pre- and post-exploitation phases of attack lifecycles.

Deep understanding of incident response processes.

Experience using Elastic, Splunk and/or other SIEMs.

Experience with scripting language(s) for the purposes of automating security operations and incident response processes.

Experience with reverse engineering, C2 exploitation, and broader system/network forensics.

Security community contributions (blog posts, conference talks, CTFs, tool development, etc.).

Knowledge of cloud infrastructure and cloud security.

SANS/GIAC, OSCP or similar certifications.

ADDITIONAL REQUIREMENTS:

Willingness to work extended hours and weekends as needed.

This role requires you to be onsite in Redmond, WA; remote or hybrid work will not be considered.

Travel may be required; occasionally visit other SpaceX locations.

COMPENSATION AND BENEFITS:

Pay Range:

Level 3: $130,000.00 - $195,000.00

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience.

Base salary is just one part of your total rewards package at SpaceX. You may also be eligible for long-term incentives, in the form of company stock or long-term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan. You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short and long-term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation and will be eligible for 10 or more paid holidays per year. Employees in Washington State accrue paid sick time in compliance with state and federal law. Company shuttles are offered to employees for roundtrip travel from select Seattle locations to the SpaceX Redmond office Monday to Friday.

ITAR REQUIREMENTS:

To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.  

SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Applicants wishing to view a copy of SpaceX’s Affirmative Action Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should reach out to EEOCompliance@spacex.com. 

Source: SpaceX careers (Greenhouse)

Similar roles