Security Analyst (Detection and Incident Response)

A detection and incident response analyst in SpaceX's Security Operations group, working on-site in Hawthorne as a first responder in the Security Operations Center against threats from nation states and others aiming to damage the company.

The analyst triages and remediates detections and anomalies, takes incidents from first signal through root-cause investigation, collects evidence, helps engineering teams harden systems against repeat attacks, builds detections for advanced attacker techniques, and extends endpoint and network visibility and response playbooks. SpaceX asks for a STEM degree or two years in information security, plus experience with operating system auditing and host and network collection tools. Preferred are knowledge of attacker TTPs and IR processes, Elastic or Splunk, scripting, forensics or reverse engineering, cloud security, and GIAC or OSCP certifications. Extended hours and occasional travel may be needed.