Senior Security Engineer, Operations
K2 Space· IT
Los Angeles, CA$150k - $190kfull-timePosted 2mo ago
About the role
Senior Security Engineer responsible for detection and response across the corporate environment, maturing SIEM capabilities, building detections, leading incident response, and working hands-on across identity, endpoints, SaaS, network, and cloud telemetry at a fast-growing aerospace company.
Responsibilities
- Own day-to-day detection and response across the corporate environment, from alert triage and investigation through containment and remediation
- Administer and mature the SIEM, including log source onboarding, parsing and normalization, telemetry enrichment, rule tuning, and platform health, retention, and cost
- Write, test, and maintain detection content mapped to MITRE ATT&CK using detection-as-code practices, including version control, peer review, and automated testing
- Act as incident commander for corporate security incidents, coordinating stakeholders and delivering timelines, root cause analysis, and post-incident follow-through
- Build response playbooks and automation across SOAR, scripting, and vendor APIs to reduce time to detect, triage, and contain
- Threat hunt proactively across endpoint, identity, SaaS, and cloud telemetry using threat intelligence and hypotheses about adversary behavior
- Run adversary emulation and purple team exercises to validate detection coverage, then close the gaps you find
- Perform host, network, and cloud forensics across macOS, Windows, and Linux to reconstruct attacker activity and scope impact
- Investigate phishing, business email compromise, credential abuse, and insider risk in partnership with IT, HR, and Legal
- Partner with IT and infrastructure teams to harden identity, endpoint, and network controls, including conditional access, EDR policy, MDM baselines, segmentation, and secure remote access
- Translate detection and incident findings into vulnerability management priorities and security architecture improvements
- Participate in an on-call rotation for security escalations, including occasional after-hours and weekend response
- Maintain runbooks, detection documentation, and standard operating procedures, and mentor junior team members on investigation and response tradecraft
- Support compliance and audit efforts by producing monitoring, detection, and incident response evidence as needed
Qualifications
- 5+ years of experience in security operations, detection and response, or incident response, preferably in a fast-paced startup or technology environment
- Hands-on experience administering and tuning a SIEM (e.g., Splunk, Microsoft Sentinel, Elastic, Panther, or Chronicle), including log source onboarding, parsing, and detection rule development
- Demonstrated experience leading security incidents end to end, from detection and scoping through containment, eradication, and post-incident review
- Strong working knowledge of attacker tactics, techniques, and procedures (TTPs), the MITRE ATT&CK framework, and the evidence sources needed to investigate them
- Experience investigating endpoint, identity, network, and cloud telemetry across macOS, Windows, and Linux, including EDR, identity provider, and SaaS audit logs
- 2+ years of development experience with any modern programming language (including but not limited to Python, Go, C++, Rust) used to automate detection, enrichment, and response, in lieu of a degree; OR a bachelor’s degree in security engineering, cyber security, computer science, engineering, math, or other STEM discipline
- Knowledge of operating systems, networking, cloud and SaaS platforms, security best practices, and log analysis at scale
- Comfortable working with mission critical and sensitive systems, with a sense of urgency appropriate with responsibilities
- Excellent interpersonal skills, attention to detail, and problem-solving skills
Skills
Required:SIEM administration and tuningIncident response leadershipThreat huntingDetection content developmentProgramming for automation
Benefits
- Comprehensive benefits package including paid time off, medical/dental/vision coverage, life insurance, paid parental leave, and many other perks
Last updated Aug 26, 2026. Interested? Apply on the company site.
About K2 Space
Build Bigger
Building the largest satellites in orbit. Ultra-powerful, scalable platforms engineered for LEO–cislunar missions. Explore the next-generation of satellites.
SatellitesSpacecraftLEOMEOGEOSatellite Power
More open roles at K2 Space
- Principal Security Engineer, Operations4d agoLos Angeles · IT
- Senior Network Integration Engineer, Top Secret Clearance4d agoLos Angeles, CA · Software
- Senior Supply Chain Operations Engineer4d agoLos Angeles, CA · Supply Chain
- Senior Supply Chain Compliance Manager4d agoLos Angeles, CA · Supply Chain
- COMSEC Certification Lead (TS//SCI)4d agoNational Security Programs