Principal Security Engineer, Operations (Aerospace)

Location: Los Angeles, CA; the person hired must be a U.S. Person under ITAR or otherwise eligible for a federally issued export control license.

Base salary: $180,000–$250,000 per year, plus equity.

Company

hirify.global develops high-power satellite platforms for commercial and U.S. government missions from low Earth orbit to deep space.

What you will do

• Own detection and response across the corporate environment, from alert triage and investigation through containment, remediation, and lessons learned.
• Administer and mature the SIEM by onboarding, parsing, normalizing, enriching, tuning, and managing telemetry, platform health, retention, and cost.
• Write and maintain MITRE ATT&CK-mapped detection content using detection-as-code, version control, peer review, and automated testing.
• Lead incidents as incident commander, coordinate stakeholders, produce timelines and root-cause analyses, and drive post-incident follow-through.
• Build SOAR, scripting, and vendor-API automation; conduct threat hunts, adversary emulation, purple-team exercises, and host, network, and cloud forensics.
• Investigate phishing, business email compromise, credential abuse, and insider risk; partner with IT, infrastructure, HR, and Legal to harden controls and improve vulnerability management and security architecture.

Requirements

• 10+ years of experience in security operations, detection and response, or incident response, preferably in a fast-paced startup or technology environment.
• Hands-on experience administering and tuning a SIEM such as Splunk, Microsoft Sentinel, Elastic, Panther, or Chronicle, including log-source onboarding, parsing, and detection-rule development.
• Experience leading security incidents end to end, from detection and scoping through containment, eradication, and post-incident review.
• Strong knowledge of attacker tactics, techniques, and procedures, MITRE ATT&CK, and evidence sources used for investigations.
• Experience investigating endpoint, identity, network, and cloud telemetry across macOS, Windows, and Linux, including EDR, identity-provider, and SaaS audit logs.
• Either 2+ years of development experience with a modern programming language used to automate detection, enrichment, and response, in lieu of a degree, or a bachelor’s degree in security engineering, cybersecurity, computer science, engineering, mathematics, or another STEM discipline.
• Knowledge of operating systems, networking, cloud and SaaS platforms, security best practices, and log analysis at scale.
• Ability to work with mission-critical and sensitive systems with an appropriate sense of urgency.
• Excellent interpersonal, attention-to-detail, and problem-solving skills.
• Must be a U.S. Person under ITAR or otherwise eligible for a federally issued export control license.

Nice to have

• Bachelor’s degree or equivalent in computer science or engineering.
• Detection and response certifications such as GCIH, GCFA, GCIA, GCDA, or OSCP, or equivalent hands-on experience.
• Experience building detection-as-code pipelines, security data lakes, or ETL for security telemetry.
• Experience with cloud detection and response in AWS, Azure, or GCP.
• Experience with threat intelligence, malware analysis, or reverse engineering.
• Experience protecting engineering, manufacturing, OT, mission, or ground-segment environments.
• Experience in defense, aerospace, or another ITAR-regulated environment.
• Security community contributions such as tooling, blog posts, conference talks, or CTFs.

Culture & Benefits

• Fast-paced, high-growth Series D environment focused on building high-power satellite platforms.
• Comprehensive benefits including paid time off, medical, dental and vision coverage, life insurance, and paid parental leave.
• Equity in the company.
• Non-traditional career backgrounds and career paths are encouraged.
• Reasonable accommodations are available for applications and interviews.