Security Operations Engineer

• Advanced Incident Triage: Act as the Tier 2/3 escalation point for complex security events. Investigate and resolve high-severity incidents escalated from initial monitoring tiers. - System Oversight: Oversee and optimize security infrastructure, ensuring that Google SecOps (Chronicle) and other SIEM/SOAR tools are tuned for maximum visibility and efficiency. - Incident Leadership: Lead the charge during active incident response operations, coordinating across teams to contain threats and performing deep-dive post-incident forensics. - Malware & Threat Analysis: Perform deep-tissue analysis of malware to understand behavior and origins, using that intelligence to build proactive technical controls. - Detection Engineering: Create, integrate, and maintain custom security tools and automated playbooks to streamline the "detect-to-remediate" lifecycle. - Strategic Defense: Investigate advanced phishing vectors and implement systemic preventive measures; assist in high-level purple team exercises to validate our posture. - Operational Excellence: Maintain and mature security documentation, including technical procedures, complex runbooks, and internal security policies. Requirements

• 3–5 years of experience in a dedicated security operations or engineering role. - Tier 2/3 Expertise: Proven track record of handling complex escalations and leading incident response efforts. - Technical Depth: Advanced experience in malware analysis, digital forensics, and neutralizing sophisticated phishing campaigns. - Systems Mastery: Strong understanding of security standards, hardening principles, and the ability to oversee enterprise-grade security platforms. - Problem Solving: Exceptional analytical skills with the ability to think like an attacker to better defend the system. - Communication: Excellent written and oral communication skills, with the ability to translate technical findings into actionable leadership briefings. - Education/Experience: While we value experience, a degree in CS, Cybersecurity, or a related field is a plus. Bonus

• Certifications: Advanced certifications such as CISSP, GCIA, GCIH, or OSCP. - Platform Experience: Hands-on experience managing and tuning Google SecOps (Chronicle). - Automation: Experience with SOAR platforms or scripting (Python, Go) to automate response workflows. What we offer:

All our positions offer a compensation package that includes equity and robust benefits. Base pay is just one component of Astranis’s total rewards package. Your compensation also includes a significant equity package via incentive stock options, high-quality company-subsidized healthcare, disability and life insurance, 401(k) retirement planning, flexible PTO, and free on-site catered meals. Astranis pay ranges are informed and defined through professional-grade salary surveys and compensation data sources. The actual base salary offered to a successful candidate will additionally be influenced by a variety of factors including experience, credentials & certifications, educational attainment, skill level requirements, and the level and scope of the position. Base Salary

$150,000—$205,000 USD

U.S. Citizenship, Lawful Permanent Residency, or Refugee/Asylee Status Required

(To comply with U.S. Government space technology export regulations, applicant must be a U.S. citizen, lawful permanent resident of the United States, or other protected individual as defined by 8 U.S.C. 1324b(a)(3))

Our mission and our products are meant to connect the world and everyone in it, regardless of gender, race, creed, or any other distinction. We believe in a diverse and inclusive workplace, and we encourage all people to join our team and bring their unique perspective to help make us stronger.