Threat Detection & Response Engineer III
True Anomaly13 days ago
Long Beach, CA, USASenior
Base Salary
$120k - $165k/yr
Responsibilities
- Develop incident response plans, playbooks, standard operating procedures, and scalable security processes.
- Design, implement, and tune security detections across corporate and cloud environments using frameworks such as MITRE ATT&CK.
- Develop threat models, improve detection fidelity, reduce alert noise, and address coverage gaps.
- Monitor, triage, and respond to security alerts across multiple platforms and data sources.
- Investigate incidents through technical analysis, containment, eradication, and recovery, and document findings and lessons learned.
- Conduct proactive threat hunting and use threat intelligence to anticipate emerging adversary tactics, techniques, and procedures.
- Administer and optimize EDR and SIEM platforms and integrate log sources for improved visibility and correlation.
- Build automation and orchestration workflows to improve incident response efficiency.
- Partner with IT, Engineering, Legal, and Compliance teams and communicate technical findings to diverse stakeholders.
- Participate in an after-hours on-call rotation for incident response coverage.
Requirements
- Active Secret or TS security clearance and the ability to maintain a security clearance.
- At least 3 years of cybersecurity experience, including at least 2 years in security operations, detection engineering, incident response, or threat hunting.
- Experience building or tuning security detections and using risk-based alerting and alert-tuning strategies.
- Familiarity with EDR platforms, endpoint security for Windows, macOS, or Linux, and common attack techniques.
- Familiarity with SIEM platforms and log analysis, including Splunk, Elastic, or similar tools.
- Basic understanding of attack vectors, adversary tactics, techniques, procedures, MITRE ATT&CK, and the Cyber Kill Chain.
- Experience scripting in Python, PowerShell, or Bash for automation or analysis.
- Preferred knowledge of digital forensics, malware analysis, detection and response program development, Azure Government Cloud, and cloud security monitoring in AWS, GCP, or Azure.
- Preferred familiarity with CMMC, FedRAMP, NIST 800-53, detection-as-code, GitOps, CI/CD, and red or purple team exercises.
- Clear verbal and written communication skills and comfort working autonomously under pressure during active security incidents.
Benefits
- 100% company-paid medical, dental, and vision coverage for employees and dependents, with HSA/HRA options.
- Flexible Time Off for exempt employees or accrued PTO of up to 25 days for non-exempt employees, plus 12 paid holidays, parental leave, and sick leave.
- Daily catered lunch and unlimited snacks for in-office employees.
- 401(k), fitness reimbursement, Dog Fridays, equity participation, and professional development and certification support.
- The role is onsite in the Long Beach office and includes an after-hours on-call rotation.
- Base salary is $120,000-$165,000, with equity and benefits.
Tech Stack
Categories
About True Anomaly
True Anomaly builds spacecraft and software for space defense, including autonomous satellites, precision-sensing payloads, mission command-and-control software, and space-based interceptors for national security and commercial operators. Founded in 2022 by former U.S. Space Force members, it is privately held and headquartered in Englewood, Colorado. The company sells hardware, AI-enabled flight software, and mission operations services to U.S. and allied defense programs and space infrastructure providers.