Senior Security Analyst

Join BlackSky as a Senior Security Analyst, where you will play a crucial role in monitoring, defending, and securing our enterprise environment against cyber threats. You will conduct continuous monitoring of various systems, analyze logs, leverage cyber threat intelligence, and perform digital forensics and incident response activities. Additionally, you will support vulnerability management, compliance assessments, and security training. Enjoy competitive compensation, comprehensive health insurance, generous time off, and a flexible work schedule.

• Monitoring and defending the enterprise environment against cyber threats, conducting analysis of logs within a Security Information and Event Management (SIEM) platform.
• Leveraging cyber threat intelligence reporting in conjunction with internal digital forensics and incident response activities to ensure proper defense against security threats.
• Conducting regular threat hunting across corporate, product, and mission environments, and documenting procedures for performance of job duties.

• Experience performing at least one of the following activities - Incident Response, Digital Forensics, Malware Analysis, Network Traffic Collection, or Reverse Engineering
• GIAC Certified Incident Handler (GCIH),
• Access Data Certified Examiner (ACE), and/or
• GIAC Cloud Penetration Tester (GCPN),
• Ability to document processes, procedures, and results of technical analysis for review by peers
• Certified Information Systems Security Professional (CISSP),
• Must be a U.S. Citizen
• GIAC Public Cloud Security (GPCS),
• Experience with implementing, troubleshooting, and sustaining endpoint security mechanisms (e.g., EDR, CASB, and others) in at least one of the following Operating Systems - Windows, MacOS, and/or Linux
• GIAC Security Operations Certified (GSOC),
• GIAC Reverse Engineering Malware (GREM),
• Encase Certified Examiner (EnCE), AWS Certified Security - Specialty
• Computer Hacking Forensic Investigator (CHFI),
• GIAC Certified Detection Analyst (GCDA),
• Candidates should hold at least one of the following security certifications:
• GIAC Certified Forensic Analyst (GCFA),
• GIAC Network Forensic Analyst (GNFA),
• GIAC Cloud Security Automation (GCSA),
• GIAC Certified Forensic Examiner (GCFE),
• A minimum of seven (7) years’ experience performing security analyst and DFIR activities
• A minimum of seven (7) years’ experience in IT security
• Endpoint Security for Windows, MacOS, and Linux environments
• Enterprise Security Tools: Cisco Duo, Nessus, OpenSCAP, Crowdstrike XDR/MDR, ManageEngine, Cisco Umbrella, Active Directory / Entra ID, Netskope
• Extensive incident response, security analysis, and digital forensics experience performing event log, PCAP, and NetFlow data analysis, malware analysis, and data collection
• Cloud Solutions: Microsoft GCC High, AWS Commercial, AWS GovCloud, VMware ESXi
• Infrastructure as Code: AWS CloudFormation, HashiCorp Terraform
• Knowledge of Secure DevOps Processes
• Coding & Scripting: Python, Java, JavaScript, BASH, PowerShell
• Container Technologies: Docker, ECS, Nomad, HashiCorp product stack