Security Operations Engineer

<div class="content-intro"><p>Astranis builds advanced satellites for high orbits, expanding humanity’s reach into the solar system. Today, Astranis satellites provide dedicated, secure networks to highly-sophisticated customers across the globe— large enterprises, sovereign governments, and the US military. With five satellites on orbit and many more set to launch soon, the company is servicing a backlog of more than $1 billion of commercial contracts.<br><br>Astranis is the preferred satellite communications partner for buyers with stringent requirements for uptime, data security, network visibility, and customization. Astranis has raised over $750 million from some of the world’s best investors, from Andreessen Horowitz to Blackrock and Fidelity, and employs a team of 450 engineers and entrepreneurs. Astranis designs, builds, and operates its satellites out of its 153,000 sq. ft. headquarters in Northern California, USA.</p></div><p><strong>Security Operations Engineer</strong></p> <p>Astranis is looking for a&nbsp;Security Operations Engineer who isn’t afraid to dive headfirst into the digital abyss. Our ideal candidate is a seasoned defender with the technical depth to not only triage complex threats but to oversee the very systems that keep us secure. As a Tier 2/3 escalation point, you will be the backbone of our defense, untangling advanced malware, neutralizing sophisticated phishing schemes, and leading high-stakes incident response operations.<br>In an environment where threats evolve at breakneck speed, we need a resourceful engineer who can engineer resilience, mentor junior analysts, and protect our digital frontier with precision.<br><br><strong>Role</strong></p> <ul> <li><strong>Advanced Incident Triage:</strong> Act as the Tier 2/3 escalation point for complex security events. Investigate and resolve high-severity incidents escalated from initial monitoring tiers.</li> <li><strong>System Oversight:</strong> Oversee and optimize security infrastructure, ensuring that Google SecOps (Chronicle) and other SIEM/SOAR tools are tuned for maximum visibility and efficiency.</li> <li><strong>Incident Leadership:</strong> Lead the charge during active incident response operations, coordinating across teams to contain threats and performing deep-dive post-incident forensics.</li> <li><strong>Malware &amp; Threat Analysis:</strong> Perform deep-tissue analysis of malware to understand behavior and origins, using that intelligence to build proactive technical controls.</li> <li><strong>Detection Engineering:</strong> Create, integrate, and maintain custom security tools and automated playbooks to streamline the "detect-to-remediate" lifecycle.</li> <li><strong>Strategic Defense:&l