← All roles

Principal Security Engineer, Operations

K2 Space· IT
Apply on company site
Los Angeles$180k - $250kfull-timePosted 4d ago

About the role

Senior-level security operations role focusing on detection and response for a corporate environment, with hands-on management of SIEM, threat detection, incident response, and collaboration across IT, infrastructure, and security teams in a fast-paced aerospace startup.

Responsibilities

  • Own day-to-day detection and response across the corporate environment, from alert triage and investigation through containment and remediation
  • Administer and mature the SIEM, including log source onboarding, parsing and normalization, telemetry enrichment, rule tuning, and platform health, retention, and cost
  • Write, test, and maintain detection content mapped to MITRE ATT&CK using detection-as-code practices, including version control, peer review, and automated testing
  • Act as incident commander for corporate security incidents, coordinating stakeholders and delivering timelines, root cause analysis, and post-incident follow-through
  • Build response playbooks and automation across SOAR, scripting, and vendor APIs to reduce time to detect, triage, and contain
  • Threat hunt proactively across endpoint, identity, SaaS, and cloud telemetry using threat intelligence and hypotheses about adversary behavior
  • Run adversary emulation and purple team exercises to validate detection coverage, then close the gaps you find
  • Perform host, network, and cloud forensics across macOS, Windows, and Linux to reconstruct attacker activity and scope impact
  • Investigate phishing, business email compromise, credential abuse, and insider risk in partnership with IT, HR, and Legal
  • Partner with IT and infrastructure teams to harden identity, endpoint, and network controls, including conditional access, EDR policy, MDM baselines, segmentation, and secure remote access
  • Translate detection and incident findings into vulnerability management priorities and security architecture improvements
  • Participate in an on-call rotation for security escalations, including occasional after-hours and weekend response
  • Maintain runbooks, detection documentation, and standard operating procedures, and mentor junior team members on investigation and response tradecraft
  • Support compliance and audit efforts by producing monitoring, detection, and incident response evidence as needed

Qualifications

  • 10+ years of experience in security operations, detection and response, or incident response, preferably in a fast-paced startup or technology environment
  • Hands-on experience administering and tuning a SIEM (e.g., Splunk, Microsoft Sentinel, Elastic, Panther, or Chronicle), including log source onboarding, parsing, and detection rule development
  • Demonstrated experience leading security incidents end to end, from detection and scoping through containment, eradication, and post-incident review
  • Strong working knowledge of attacker tactics, techniques, and procedures (TTPs), the MITRE ATT&CK framework, and the evidence sources needed to investigate them
  • Experience investigating endpoint, identity, network, and cloud telemetry across macOS, Windows, and Linux, including EDR, identity provider, and SaaS audit logs
  • 2+ years of development experience with any modern programming language (Python, Go, C++, Rust) used to automate detection, enrichment, and response, in lieu of a degree; OR a bachelor’s degree in security engineering, cyber security, computer science, engineering, math, or other STEM discipline
  • Knowledge of operating systems, networking, cloud and SaaS platforms, security best practices, and log analysis at scale
  • Comfortable working with mission critical and sensitive systems, with a sense of urgency appropriate with responsibilities
  • Excellent interpersonal skills, attention to detail, and problem-solving skills

Skills

Required:SIEM administration and tuningIncident response leadershipThreat huntingMITRE ATT&CK

Benefits

  • Comprehensive benefits package including paid time off, medical/dental/vision coverage, life insurance, paid parental leave, and many other perks
  • Base salary range for this role is $180,000 – $250,000 and equity in the company
Last updated Oct 21, 2026. Interested? Apply on the company site.

About K2 Space

Build Bigger

Building the largest satellites in orbit. Ultra-powerful, scalable platforms engineered for LEO–cislunar missions. Explore the next-generation of satellites.

SatellitesSpacecraftLEOMEOGEOSatellite Power
Company profileWebsite

More open roles at K2 Space