This role pays less than
88%
of similar roles. Most pay
$119,050–$170,000
— the shaded band above.
At the midpoint, this role pays about
$105k
versus about
$145k
for comparable roles.
Based on 240 similar postings.
Employer
About SpaceX
SpaceX designs, manufactures, and launches advanced rockets and spacecraft with the mission of enabling humans to become a multi-planetary species. It operates the Falcon 9, Falcon Heavy, and Starship launch vehicles, as well as the Starlink satellite internet constellation.
SpaceX currently has
720 open roles
on FindRole.
Listed pay typically runs
$130,000–$165,000
across 511 roles with salary data.
Security Analyst (Blue Team) joins the Security Operations Center as a frontline responder tasked with protecting information from unauthorized changes, destruction, loss, or theft. The role involves identifying, triaging, and remediating security detections while providing incident response support from initial detection through root cause analysis. You will collaborate with engineering teams to collect evidence, improve system security, and develop detection capabilities targeting sophisticated attacker tactics, techniques, and procedures. Key responsibilities include enhancing endpoint and network visibility and developing response playbooks. Required skills include experience with operating system auditing for Linux, Windows, or macOS, as well as network and host-based collection tools. Preferred qualifications include proficiency in Elastic, Splunk, scripting languages for automation, reverse engineering, C2 exploitation, network forensics, and cloud infrastructure security to defend against nation-state actors and brand destruction threats.
Identify, triage, and remediate security detections and anomalies as a frontline responder in the SOC.
Investigate security incidents from initial detection through root cause analysis.
Collect evidence and collaborate with engineering teams to proactively secure systems against future attacks.
Develop detection capabilities targeting sophisticated attacker tactics, techniques, and procedures.
Enhance endpoint and network visibility to protect company assets and missions.
Update and improve detection and response playbooks for the security environment.
What we're looking for
Bachelor's degree in cybersecurity, computer science, engineering, information technology, or another STEM discipline, or 2+ years of professional experience in information security.
Experience with operating system auditing for Linux, Windows, or macOS platforms.
Experience with network and host-based collection tools.
Understanding of threat actor tactics, techniques, and procedures (TTPs) and incident response processes (preferred).
Experience using Elastic, Splunk, or other SIEMs (preferred).
Experience with scripting languages for automating security operations and incident response (preferred).
Experience with reverse engineering, C2 exploitation, and system/network forensics (preferred).
Knowledge of cloud infrastructure, security community contributions, and SANS/GIAC/OSCP certifications (preferred).
Must be a U.S. citizen, national, lawful permanent resident, or eligible for required export control authorizations.
Python
SIEM
SPL
KQL
SQL
AWS
Azure
GCP
Detection-as-Code
Incident Response
Threat Hunting
Log Analysis
Data Lake
Windows
Linux
MacOS
Digital Forensics
Reverse Engineering