Senior Security Analyst

BlackSky is a real-time intelligence company that owns and operates a space-based intelligence platform providing satellite imagery, automated analytics and high-frequency monitoring. The Senior Security Analyst reports to the Manager of Security Analysis Team (Security Operations Center) with rollup to the Director of Security and plays a vital role in monitoring, defending, and securing the BlackSky enterprise environment against cyber threats. The role involves continuous monitoring of network, managed devices and identities, cloud services, business systems, and application traffic in support of the SOC, analysis of logs within an integrated SIEM platform, and developing searches, dashboards, and alerts to improve detection and response timelines. The Security Team is geographically distributed across Herndon, VA and Seattle, WA offices; the role can be based at either location, surrounding areas, or anywhere in the United States. The anticipated base salary range for Seattle, WA and Herndon, VA is $80,000 - 90,000 per year, dependent on background and education.

Responsibilities

Perform security monitoring and digital forensics and incident response (DFIR) activities across corporate, product, and mission environments; Review multiple sources of cyber threat intelligence and apply insights to secure the enterprise; Conduct regular threat hunting across corporate, product, and mission environments; Document procedures for performance of job duties to formalize ad-hoc processes; Conduct security analysis of data from system/event logs, network traffic, and SaaS security tools; Perform analysis and digital forensics of potential malware using industry standard sandbox tools; Support continuous monitoring of network, operating system, and application log traffic; Support vulnerability management through identification and prioritization of critical security concerns with IT or Product owners; Work with product owners to define offensive testing scope and support remediation of identified vulnerabilities; Monitor operational systems for continuous compliance with hardened baseline images (CIS Benchmarks and/or DISA STIGs); Develop solutions to automate recurring tasks and improve adversary detection; Complete compliance assessments and report findings to management; Document findings and share widely with security, IT, and product teams; Support security training and manage tabletop scenarios for other employees; Support SOX/ITGC, CMMC 2.0 Level 2, NIST 800-171 r3, UK Cyber Essentials, and customer-specific compliance requirements; Other responsibilities as assigned

Requirements

A minimum of seven (7) years' experience performing security analyst and DFIR activities; A minimum of seven (7) years' experience in IT security; Hold at least one of the following certifications: CISSP, GCIH, CHFI, GCFE, GCFA, GREM, GNFA, GCSA, GCPN, GPCS, GSOC, GCDA, ACE, EnCE, AWS Certified Security - Specialty; Ability to document processes, procedures, and results of technical analysis for review by peers; Experience implementing, troubleshooting, and sustaining endpoint security mechanisms (e.g., EDR, CASB, and others) in at least one of: Windows, MacOS, Linux; Experience performing at least one of: Incident Response, Digital Forensics, Malware Analysis, Network Traffic Collection, Reverse Engineering; Must be a U.S. Citizen

Nice to have

Endpoint Security for Windows, MacOS, and Linux environments; Enterprise security tools (Cisco Duo, Nessus, OpenSCAP, Crowdstrike XDR/MDR, ManageEngine, Cisco Umbrella, Active Directory / Entra ID, Netskope); Extensive incident response, security analysis, and digital forensics experience with event log, PCAP, and NetFlow data analysis, malware analysis, and data collection; Cloud solutions (Microsoft GCC High, AWS Commercial, AWS GovCloud, VMware ESXi); Infrastructure as Code (AWS CloudFormation, HashiCorp Terraform); Coding & scripting (Python, Java, JavaScript, BASH, PowerShell); Knowledge of Secure DevOps processes; Container technologies (Docker, ECS, Nomad, HashiCorp product stack); Strong Linux security background with Ubuntu, Amazon Linux, and/or CentOS

Benefits

Medical, dental, vision, disability, group term life and AD&D, voluntary life and AD&D insurance; BlackSky pays 100% of employee-only premiums for medical, dental and vision and contributes $100/month for out-of-pocket expenses; 15 days of PTO, 11 company holidays, four floating holidays (pro-rated), one day of paid volunteerism leave per year, parental leave; 401(k) pre-tax and Roth deferral options with employer match; Flexible Spending Accounts; Employee Stock Purchase Program; Employee Assistance and Travel Assistance Programs; Employer matching donations; Professional development; Choice of Mac or PC; Swag