Threat Detection & Response Engineer III

Description

Space is a warfighting domain, and the company builds the technology to secure it.

The company builds autonomous spacecraft, advanced payloads, mission software, and space-based interceptors that help the U.S. and its Allies keep space secure and counter threats there.

The team favors creative, asymmetric solutions, challenges assumptions to reach ambitious results, and works best together.

You will help build and mature detection capabilities, response processes, and security tooling that support the security operations program.

You will have a high degree of autonomy and ownership, direct access to leadership, and a chance to influence security strategy.

Responsibilities

• Write incident response plans, playbooks, and SOPs, and build processes that can scale as the team grows.
• Create custom detections for corporate and cloud environments, using frameworks such as MITRE ATT&CK.
• Tune detection rules regularly and build threat models that close coverage gaps and raise fidelity.
• Watch security alerts from many platforms and data sources, then triage and respond to them.
• Investigate incidents through technical analysis, containment, eradication, and recovery, and record findings and lessons learned.
• Hunt for threats on your own initiative and use threat intelligence to anticipate adversary TTPs as they emerge.
• Run and improve EDR and SIEM platforms, and connect log sources to sharpen visibility and correlation.
• Build automation and orchestration workflows that make response faster.
• Work with IT, Engineering, Legal, and Compliance, and explain technical findings clearly to different audiences.

Requirements

• You hold an active Secret or TS security clearance and can maintain it.
• You have 3+ years in cybersecurity, with at least 2 years in security operations, detection engineering, incident response, or threat hunting.
• You have built or tuned security detections.
• You understand risk-based alerting and alert tuning, including ways to cut noise, improve fidelity, and prioritize high-signal alerts.
• You have worked with EDR platforms, including basic alert triage and response actions.
• You have working knowledge of endpoint security and common attack techniques on Windows, macOS, or Linux.
• You know SIEM platforms and log analysis, such as Splunk, Elastic, or similar.
• You understand common attack vectors, TTPs, and frameworks such as MITRE ATT&CK and the Cyber Kill Chain.
• You script in Python, PowerShell, or Bash for automation or analysis.
• You communicate clearly in writing and verbally.
• You stay composed during active security incidents and make quick decisions under pressure.
• Preferred: knowledge of digital forensics and malware analysis techniques.
• Preferred: experience building or significantly maturing a detection and response program.
• Preferred: experience in Azure Government Cloud (Azure GovCloud) environments.
• Preferred: experience monitoring cloud security in AWS, GCP, or Azure commercial environments.
• Preferred: familiarity with CMMC, FedRAMP, NIST 800-53, or other federal compliance frameworks.
• Preferred: experience with Detections-as-Code, GitOps, CI/CD, and similar practices.
• Preferred: experience taking part in or supporting red team or purple team exercises.

Conditions

The role is onsite at the Long Beach office.

You join the on-call rotation, including after-hours shifts, to cover incident response.

Base salary is $120,000 - $165,000 in Long Beach.

Final level and base salary are set case by case, based on job-related knowledge and skills, education, location, and experience.

To meet U.S. Government space technology export rules, including ITAR, you must be a U.S. citizen, a lawful permanent resident of the U.S., a protected individual under 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

This is not a fixed-term or temporary role.

The position stays open until it is filled.

The company is committed to equal employment opportunity on any basis protected by state and federal law and provides accommodation for a disability or other need on request.

Benefits

• Medical, dental, and vision coverage at 100% company-paid for you and your dependents, with HSA or HRA options.
• Flexible Time Off for exempt employees, and accrued PTO of up to 25 days for non-exempt employees.
• 12 paid holidays, parental leave, and sick leave.
• Daily catered lunch and unlimited snacks for in-office employees.
• 401(k) retirement plan, fitness reimbursement, and Dog Fridays.
• Equity is part of total compensation.
• Competitive salary.
• Professional development and certification support.
• Challenging, mission-critical security work alongside experienced security professionals.