Skip to content
Northwood SpaceNorthwood SpaceLos Angeles, CA

Senior Detection and Response Engineer

Leads security operations center for space infrastructure, building detection rules, hunting threats across satellite ground stations and cloud environments, and managing incident response for mission-critical systems. Requires 5+ years SOC experience, SIEM proficiency, and scripting skills.

160k – 220k/yr
On-site5+ YOESecurity Engineering

About the role

Responsibilities

  • Lead incident response and forensics across globally distributed ground stations and cloud infrastructure. Conduct digital forensics, malware analysis, and coordinate response efforts.
  • Build and tune detection rules for SIEM platforms to identify threats specific to satellite communications and ground station operations. Create behavioral analytics and threat hunting queries.
  • Operate 24/7 security monitoring across AWS multi-cloud environments, Linux-based ground station systems, and satellite communication networks. Triage alerts and investigate suspicious activity.
  • Hunt threats across space infrastructure, including satellite ground stations, RF communications, and space-based assets.
  • Create incident response playbooks and runbooks for security incidents specific to satellite ground stations and space communications.
  • Analyze threat intelligence, integrate threat feeds, and brief stakeholders on emerging threats.
  • Build security automation with Python/PowerShell scripts for incident response, threat hunting, and orchestration.

Basic Qualifications

  • 5+ years of hands-on SOC operations, incident response, or threat hunting experience
  • Experience with SIEM platforms (Splunk, Sentinel, Chronicle) including custom rule development and advanced search techniques
  • Digital forensics and malware analysis skills with tools like Volatility, YARA, and hex editors
  • Proficiency in Python, PowerShell, or similar for security automation and threat hunting
  • Experience with endpoint security platforms (CrowdStrike, SentinelOne) and network security monitoring
  • Strong Linux forensics and log analysis skills
  • Knowledge of threat intelligence frameworks (MITRE ATT&CK, Diamond Model) and IOC analysis
  • Ability to obtain and maintain TS/SCI clearance

Preferred Qualifications

  • Experience with cloud security monitoring in AWS, Azure, or multi-cloud environments
  • Background in aerospace, defense, or critical infrastructure security operations
  • Experience with threat hunting in air-gapped or highly regulated environments
  • Knowledge of RF communications, satellite systems, or space-based asset security
  • Certifications such as GCIH, GCFA, GNFA, or similar
  • Experience building SOAR workflows
  • Familiarity with government incident reporting requirements

Skills

SplunkMicrosoft SentinelGoogle ChronicleCrowdstrikeSentinelonePythonPowerShellVolatilityYaraMitre Att&CkLinuxAWSSIEMSoarDigital Forensics

Similar roles

Security Engineering jobs
Metropolis

Senior Security Engineer, Infrastructure & Network Security

MetropolisLos Angeles, CA

Lead AWS and network security infrastructure, zero-trust initiatives, and cloud automation for enterprise environments. Requires strong AWS, networking, IAM, and scripting experience.

160k – 215k/yr
On-site5+ YOESecurity Engineering
Commure

Senior Software Engineer, Information Security

CommureMountain View, CA

Senior Software Engineer architects scalable detection frameworks, integrates threat intelligence into automated security pipelines, and builds AI-driven security operations using Python, Java, and tools like Splunk and AWS. Requires 6+ years experience, bachelor's in CS/cybersecurity, and expertise in SIEMs, cloud security, and compliance.

160k – 190k/yr
Hybrid6+ YOESecurity Engineering
Applied Intuition

Risk and Compliance Lead

Applied IntuitionSunnyvale, CA

Leads security GRC program, conducts enterprise risk assessments, manages compliance audits like SOC2/ISO 27001/TISAX, drives TPRM, and builds GRC infrastructure. Requires 6+ years in security compliance with hands-on audit and tooling experience.

160k – 190k/yr
On-site6+ YOESecurity Engineering
Northwood Space

Senior Security Engineer (Space Communications)

Northwood SpaceLos Angeles, CA +2

Designs and implements security architectures for global phased array ground stations and space communication protocols. Owns full-stack security, compliance (FedRAMP, NIST 800-171), incident response for mission-critical satellite infrastructure requiring 5+ years IaC experience and TS/SCI eligibility.

160k – 220k/yr
Hybrid5+ YOESecurity Engineering
Ramp

Senior Detection Engineer, Federal

RampNew York, NY

Senior Detection Engineer responds to security incidents, triages alerts, tunes runbooks, and builds automation for threat detection in federal environments. Requires 3-4 years IT experience, SOC background, and log analysis tools like ELK/Datadog.

160k – 221k/yr
Hybrid3+ YOESecurity Engineering