jobapplier

Senior Security Analyst

BlackSky Global

Skills

Required

  • GIAC
  • incident response
  • digital forensics
  • AWS
  • Windows / MacOS / Linux
  • malware analysis
  • HashiCorp
  • Public Cloud Security
  • Terraform
  • Python
  • Java
  • JavaScript
  • BASH
  • PowerShell

Preferred

  • Docker
  • ECS
  • Nomad
  • Network Traffic Collection / Reverse Engineering
  • conducting analysis of logs
  • Event Management
  • SIEM
  • security threats
  • Cloud Security Automation

Join BlackSky as a Senior Security Analyst, where you will play a crucial role in monitoring, defending, and securing our enterprise environment against cyber threats. You will conduct continuous monitoring of various systems, analyze logs, leverage cyber threat intelligence, and perform digital forensics and incident response activities. Additionally, you will support vulnerability management, compliance assessments, and security training. Enjoy competitive compensation, comprehensive health insurance, generous time off, and a flexible work schedule.

About BlackSky Global

  • GIAC Security Operations Certified (GSOC),
  • GIAC Reverse Engineering Malware (GREM),
  • Encase Certified Examiner (EnCE), AWS Certified Security - Specialty

Responsibilities

  • Monitoring and defending the enterprise environment against cyber threats, conducting analysis of logs within a Security Information and Event Management (SIEM) platform.
  • Leveraging cyber threat intelligence reporting in conjunction with internal digital forensics and incident response activities to ensure proper defense against security threats.
  • Conducting regular threat hunting across corporate, product, and mission environments, and documenting procedures for performance of job duties.
  • Experience performing at least one of the following activities - Incident Response, Digital Forensics, Malware Analysis, Network Traffic Collection, or Reverse Engineering
  • GIAC Certified Incident Handler (GCIH),

Access Data Certified Examiner (ACE), and/or

  • GIAC Cloud Penetration Tester (GCPN),
  • Ability to document processes, procedures, and results of technical analysis for review by peers
  • Computer Hacking Forensic Investigator (CHFI),
  • GIAC Certified Forensic Analyst (GCFA),
  • GIAC Network Forensic Analyst (GNFA),
  • GIAC Cloud Security Automation (GCSA),
  • GIAC Certified Forensic Examiner (GCFE),
  • Enterprise Security Tools: Cisco Duo, Nessus, OpenSCAP, Crowdstrike XDR/MDR, ManageEngine, Cisco Umbrella, Active Directory / Entra ID, Netskope

Requirements

  • Certified Information Systems Security Professional (CISSP),

Must be a U.S. Citizen

  • GIAC Public Cloud Security (GPCS),
  • Experience with implementing, troubleshooting, and sustaining endpoint security mechanisms (e.g., EDR, CASB, and others) in at least one of the following Operating Systems - Windows, MacOS, and/or Linux
  • GIAC Certified Detection Analyst (GCDA),
  • Candidates should hold at least one of the following security certifications:
  • A minimum of seven (7) years’ experience performing security analyst and DFIR activities
  • A minimum of seven (7) years’ experience in IT security

Endpoint Security for Windows, MacOS, and Linux environments

  • Extensive incident response, security analysis, and digital forensics experience performing event log, PCAP, and NetFlow data analysis, malware analysis, and data collection
  • Cloud Solutions: Microsoft GCC High, AWS Commercial, AWS GovCloud, VMware ESXi
  • Infrastructure as Code: AWS CloudFormation, HashiCorp Terraform
  • Knowledge of Secure DevOps Processes
  • Coding & Scripting: Python, Java, JavaScript, BASH, PowerShell

Preferred

  • Container Technologies: Docker, ECS, Nomad, HashiCorp product stack

Pay

USD 80,000 - 90,000