Insider Threat Program Analyst (Information Security)

Location: Hawthorne, California, United States; onsite role. Must be able to work extended hours and weekends as needed and travel ad hoc. Applicants must meet U.S. ITAR eligibility requirements and hold or be eligible to obtain the required U.S. authorizations.

Base salary: $85,000–$110,000 annually for Level 1 or $100,000–$135,000 annually for Level 2. Active clearance holders may receive a 10% differential, up to an additional $20,000 annually.

Company

SpaceX develops aerospace technologies, rockets, crewed spacecraft, interplanetary transport vehicles, and satellite communications systems to enable human space exploration.

What you will do

• Investigate and analyze insider-threat risks affecting intellectual property, infrastructure, programs, personnel, and operations.
• Triage anomalous events linked to data exfiltration, data destruction, and other indicators of concern.
• Use network monitoring, SIEM, DLP, UEBA, and other analytic tools to identify anomalous activity and support investigations.
• Collect evidence and conduct internal investigations with Information Security, HR, Legal, Government Security, Physical Security, and external partners.
• Build queries, metrics, reports, and case studies from disparate insider-threat data sources.
• Communicate findings, support training and briefings, coordinate with industry and government partners, and improve the insider-threat program.

Requirements

• Bachelor’s degree and 2+ years of professional experience in internal investigations, information security, or counterintelligence, or 4+ years of equivalent professional experience without a degree.
• Active TS/SCI clearance or ability to obtain one; employment is subject to background screening and drug and alcohol testing.
• Must satisfy U.S. ITAR eligibility requirements: U.S. citizen or national, lawful permanent resident, qualifying refugee or asylee, or eligible to obtain the required authorizations.
• Experience with insider-threat program missions, stakeholders, risk-based alerting, detection, investigation planning, evidence handling, interviews, and reporting.
• Excellent written and oral communication, organization, discretion, and attention to detail.
• Ability to adapt to changing priorities, technical environments, workflows, deadlines, extended hours, weekends, and ad hoc travel.

Nice to have

• At least one year of SIEM use or digital forensic investigation experience in a government or corporate environment.
• Proficiency with Microsoft Purview for eDiscovery.
• Experience with business process automation or data pipeline construction.

Culture & Benefits

• Fast-paced, high-tech environment focused on protecting advanced aerospace and communications technologies.
• Medical, vision, and dental coverage, 401(k), disability and life insurance, paid parental leave, and employee discounts.
• Approximately three weeks of paid vacation, 10 or more paid holidays, and paid sick leave under company policy.
• Potential stock or long-term cash awards, discretionary bonuses, and employee stock purchase plan access.