Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
$120к-165к/год
$150к$170кмедиана$210к
По похожим ролям (49) ~ $170к/год
76
Хорошая вакансия
развернуть
Обязанности понятны и связаны с важной задачей защиты космической инфраструктуры, но обязательный офисный формат, допуск и дежурства после рабочего дня подойдут не всем.
Кликните для подробной информации
Дежурства вне графикаНужен допускТолько офисКосмическая безопасностьПонятные задачиАкции и льготы
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Threat Detection & Response Engineer III (Cybersecurity): Building and maturing security detections, incident response capabilities, and security tooling across corporate and cloud environments with an accent on detection engineering, threat hunting, and incident investigations. Focus on designing MITRE ATT&CK-aligned detections, optimizing EDR and SIEM platforms, automating response workflows, and handling complex security incidents.
Location: Onsite in the Long Beach, California office; active security clearance required.
Base salary: $120,000–$165,000 per year, plus equity and benefits.
Company
hirify.global develops autonomous spacecraft, advanced payloads, mission software, and space-based interceptors for space superiority and security.
Design, implement, and tune detections across corporate and cloud environments using frameworks such as MITRE ATT&CK.
Monitor, triage, investigate, contain, eradicate, and recover from security incidents, documenting findings and lessons learned.
Conduct threat hunting and use threat intelligence to anticipate adversary tactics, techniques, and procedures.
Administer and optimize EDR and SIEM platforms, integrate log sources, and improve visibility and correlation.
Build automation and orchestration workflows and collaborate with IT, Engineering, Legal, and Compliance.
Requirements
Active Secret or TS security clearance and ability to maintain it.
3+ years of cybersecurity experience, including at least 2 years in security operations, detection engineering, incident response, or threat hunting.
Experience building or tuning security detections, including risk-based alerting and noise reduction.
Familiarity with EDR platforms, alert triage, response actions, SIEM platforms, and log analysis such as Splunk or Elastic.
Working knowledge of Windows, macOS, or Linux endpoint security and common attack techniques.
Understanding of common attack vectors, TTPs, MITRE ATT&CK, and the Cyber Kill Chain.
Experience with Python, PowerShell, or Bash scripting for automation or analysis.
Clear verbal and written communication skills.
Must satisfy U.S. Government ITAR eligibility requirements: U.S. citizenship, U.S. lawful permanent residence, protected individual status, or eligibility to obtain the required authorizations.
Nice to have
Digital forensics and malware analysis knowledge.
Experience building or significantly maturing a detection and response program.
Azure Government Cloud experience and cloud security monitoring in AWS, GCP, or Azure commercial environments.
Familiarity with CMMC, FedRAMP, NIST 800-53, or other federal compliance frameworks.
Experience with Detections-as-Code, GitOps, CI/CD, and red team or purple team exercises.
Culture & Benefits
Fast-paced, high-stakes environment requiring rapid decision-making, adaptability, autonomy, and ownership.
Required on-call rotation, including after-hours incident response coverage, and comfort working under pressure during active incidents.
Direct access to leadership and influence over security strategy, with collaboration among experienced security professionals.
Company-paid medical, dental, and vision coverage with HSA/HRA options, PTO or flexible time off, paid holidays, parental leave, and sick leave.
401(k), fitness reimbursement, professional development and certification support, catered lunch for in-office employees, and equity participation.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →