Senior Cyber Threat Operations Engineer

Umbra builds next-generation space systems that observe the Earth in unprecedented fidelity.

Our mission is to deliver global omniscience.

To stay ahead of climate change, geopolitical risk, and other major crises and issues, we need a global understanding of what is changing, where, and how fast. Umbra provides easy access to the highest quality commercial satellite data available, which is an indispensable tool for the growing number of organizations monitoring the Earth. We empower our customers to create solutions that inform, inspire, and address our planet’s most pressing needs. We’re helping to create a brand-new industry that has never meaningfully existed before.

We are looking to add a talented Senior Cyber Threat Operations Engineer to become a key player in our vibrant team dedicated to fortifying our defenses against cyber threats. In this pivotal role, you will be tasked with crafting and executing robust security strategies, performing in-depth threat assessments, and spearheading incident response initiatives to safeguard our networks and information systems. As a valued member of the Umbra team, you will collaborate with engineers and analysts to bolster our security posture and ensure that our cutting-edge systems are protected against evolving cyber threats.

The ideal candidate will possess a wealth of experience in cyber operations, a profound grasp of threat intelligence, and strong critical thinking skills to address intricate security challenges. If you are enthusiastic about cybersecurity and eager to contribute significantly to the advancement of secure satellite technology, we would love to hear from you!

Our aim is to hire this position to work in Umbra's Arlington, VA office. However, we also welcome Hybrid applicants located in the VA/DC/MD area, and applicants located in Santa Barbara, CA.

Key Responsibilities

• Spearhead the development of Umbra’s Defensive Cyber Operations and Continuous Monitoring capabilities.
• Enhance our capacity to ensure trustworthiness through the ongoing monitoring of both signature and behavioral indicators within our operational divisions on a daily basis.
• Assist in advancing threat hunting and detection engineering capabilities across all operational segments, as well as oversee the resources required for any necessary defensive actions and responses.
• Manage resources required for any necessary defensive actions, ensuring timely and effective responses to mitigate the impact of any detected cyber threats.
• Analyze cyber threats, vulnerabilities, and risks to the organization’s networks, identifying emerging threats and recommending preventive or remedial actions.
• Partner with engineers, analysts, and other stakeholders to align cybersecurity strategies with overall business objectives and ensure systems are protected against evolving cyber threats.
• Work to create and continuously improve processes and security measures designed to prevent, detect, and respond to cyber incidents, ensuring an agile and adaptive cybersecurity posture.
• Lead incident response efforts and conduct root cause analysis following cyber incidents to identify improvements and prevent recurrence.
• Continuously monitor trends in cybersecurity, including evolving attack vectors, new vulnerabilities, and emerging technologies, and apply this knowledge to improve Umbra’s security posture.
• Maintain comprehensive documentation related to threat analysis, incident response, and security posture, and present findings to senior leadership to inform decision-making.
• Other professional duties as assigned.

Requirements

Required Qualifications

• 5+ years of experience in cyber threat operations or related experience in the cybersecurity domain.
• Technical degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Proven experience with incident response, threat hunting, and vulnerability management.
• Strong understanding of security frameworks, protocols, and practices
• Expertise in using security tools such as DLP, UEBA, SIEM, IDS/IPS, and endpoint protection solutions.
• Ability to conduct in-depth threat analysis and communicate findings effectively to both technical and non-technical stakeholders.
• TS/SCI security clearance, read-in within the past two years, or willingness to acquire one.

Desired Qualifications

• Experience in a space or defense-related organization is a plus.
• Knowledge of current cyber threats, vulnerabilities, and countermeasures specific to the satellite industry.
• Relevant industry certifications such as PMRP, PNPT, OSCP, or SANS certifications are a plus
• Strong analytical and