{bc}
Apply
greenhouse

Principal Security Engineer, Operations

K2 Space
Los Angeles, USA
Lead · 10+ years experience
Onsite
Discovered 2 weeks ago
PythonAWSAzureGCP

Full Job Posting

Responsibilities

  • Own day-to-day detection and response across the corporate environment, from alert triage and investigation through containment and remediation
  • Administer and mature the SIEM, including log source onboarding, parsing and normalization, telemetry enrichment, rule tuning, and platform health, retention, and cost
  • Write, test, and maintain detection content mapped to MITRE ATT&CK using detection-as-code practices, including version control, peer review, and automated testing
  • Act as incident commander for corporate security incidents, coordinating stakeholders and delivering timelines, root cause analysis, and post-incident follow-through
  • Build response playbooks and automation across SOAR, scripting, and vendor APIs to reduce time to detect, triage, and contain
  • Threat hunt proactively across endpoint, identity, SaaS, and cloud telemetry using threat intelligence and hypotheses about adversary behavior
  • Run adversary emulation and purple team exercises to validate detection coverage, then close the gaps you find
  • Perform host, network, and cloud forensics across macOS, Windows, and Linux to reconstruct attacker activity and scope impact
  • Investigate phishing, business email compromise, credential abuse, and insider risk in partnership with IT, HR, and Legal
  • Partner with IT and infrastructure teams to harden identity, endpoint, and network controls, including conditional access, EDR policy, MDM baselines, segmentation, and secure remote access, informed by what investigations reveal
  • Translate detection and incident findings into vulnerability management priorities and security architecture improvements
  • Participate in an on-call rotation for security escalations, including occasional after-hours and weekend response
  • Maintain runbooks, detection documentation, and standard operating procedures, and mentor junior team members on investigation and response tradecraft
  • Support compliance and audit efforts by producing monitoring, detection, and incident response evidence as needed

Qualifications

  • 10+ years of experience in security operations, detection and response, or incident response, preferably in a fast-paced startup or technology environment
  • Hands-on experience administering and tuning a SIEM (e.g., Splunk, Microsoft Sentinel, Elastic, Panther, or Chronicle), including log source onboarding, parsing, and detection rule development
  • Demonstrated experience leading security incidents end to end, from detection and scoping through containment, eradication, and post-incident review
  • Strong working knowledge of attacker tactics, techniques, and procedures (TTPs), the MITRE ATT&CK framework, and the evidence sources needed to investigate them
  • Experience investigating endpoint, identity, network, and cloud telemetry across macOS, Windows, and Linux, including EDR, identity provider, and SaaS audit logs
  • 2+ years of development experience with any modern programming language (including but not limited to Python, Go, C++, Rust) used to automate detection, enrichment, and response, in lieu of a degree; OR a bachelor’s degree in security engineering, cyber security, computer science, engineering, math, or other STEM discipline
  • Knowledge of operating systems, networking, cloud and SaaS platforms, security best practices, and log analysis at scale
  • Comfortable working with mission critical and sensitive systems, with a sense of urgency appropriate with responsibilities
  • Due to the high visibility of this position, excellent interpersonal skills, attention to detail, and problem-solving skills

Nice to Have

  • Bachelor’s degree (or equivalent) in computer science or engineering
  • Detection and response certifications such as GCIH, GCFA, GCIA, GCDA, or OSCP, or equivalent hands-on experience
  • Experience building detection-as-code pipelines, security data lakes, or ETL for security telemetry
  • Experience with cloud detection and response in AWS, Azure, or GCP
  • Experience with threat intelligence, malware analysis, or reverse engineering
  • Experience protecting engineering, manufacturing, OT, or mission and ground segment environments
  • Prior experience in a defense, aerospace, or other ITAR-regulated environment
  • Security community contributions such as tooling, blog posts, conference talks, or CTFs
  • Compensation and Benefits:
  • Base salary range for this role is $180,000 – $250,000 and equity in the company.
  • Salary will be based on several factors including, but not limited to: knowledge and skills, education, and experience level.
  • Comprehensive benefits package including paid time off, medical/dental/vision coverage, life insurance, paid parental leave, and many other perks.
  • If you don’t meet 100% of the preferred skills and experience, we encourage you to still apply! Building a spacecraft unlike any other requires a team unlike any other and non-traditional career twists and turns are encouraged!
  • If you need a reasonable accommodation as part of your application for employment or interviews with us, please let us know.
  • Export Compliance
  • As defined in the ITAR, “U.S. Persons” include U.S. citizens, lawful permanent residents (i.e., Green Card holders), and certain protected individuals (e.g., refugees/asylees, American Samoans). Please consult with a knowledgeable advisor if you are unsure whether you are a “U.S. Person.”
  • The person hired for this role will have access to information and items controlled by U.S. export control regulations, including the export control regulations outlined in the International Traffic in Arms Regulation (ITAR). The person hired for this role must therefore either be a “U.S. person” as defined by 22 C.F.R. § 120.15 or otherwise eligible for a federally issued export control license.
  • Equal Opportunity
  • K2 Space is an Equal Opportunity Employer; employment with K2 Space is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at K2 Space

Senior Solar Equipment Engineer

Los Angeles, USA

Discovered 5 days ago

Solar Equipment Engineer

Los Angeles, USA

Discovered 5 days ago

Principal Ground Integration Engineer, Top Secret Clearance

Los Angeles, USA

Discovered 1 weeks ago

Senior Photonics Engineer, Free-Space Optics

Los Angeles, USA

Discovered 1 weeks ago

Photonic IC Design Engineer, Design Automation & Modeling

Seattle, USA

Discovered 1 weeks ago

Photonic IC Design Engineer, Chip-to-System Integration

Seattle, USA

Discovered 1 weeks ago

Senior Photonics Test & Automation Engineer

Los Angeles, USA

Discovered 1 weeks ago

Senior Solar Production Technician

Los Angeles, USA

Discovered 1 weeks ago