Security Analyst (Threat Detection)

A threat detection analyst in the SpaceX Security Operations Center in Hawthorne, analysing and responding to threats aimed at the company, including those from nation-state actors. The job is on-site only.

The analyst works detections and anomalies from triage to remediation, supports incident investigations from first indicator to root cause, collects evidence, helps engineering teams make systems harder to attack, develops detections targeting advanced TTPs, and strengthens endpoint and network visibility and response playbooks. The basic bar is a STEM degree or two years in information security, with experience auditing operating systems and using host and network collection tools. Understanding of attack lifecycles, SIEM work in Elastic or Splunk, scripting, reverse engineering or forensics, cloud security, and GIAC or OSCP certifications are preferred. Extended hours and occasional travel may be needed.