Security Operations Engineer

Astranis is looking for a Security Operations Engineer who isn't afraid to dive headfirst into the digital abyss. Our ideal candidate is a seasoned defender with the technical depth to not only triage complex threats but to oversee the very systems that keep us secure. As a Tier 2/3 escalation point, you will be the backbone of our defense, untangling advanced malware, neutralizing sophisticated phishing schemes, and leading high-stakes incident response operations.
In an environment where threats evolve at breakneck speed, we need a resourceful engineer who can engineer resilience, mentor junior analysts, and protect our digital frontier with precision.

Role

• Advanced Incident Triage: Act as the Tier 2/3 escalation point for complex security events. Investigate and resolve high-severity incidents escalated from initial monitoring tiers.
• System Oversight: Oversee and optimize security infrastructure, ensuring that Google SecOps (Chronicle) and other SIEM/SOAR tools are tuned for maximum visibility and efficiency.
• Incident Leadership: Lead the charge during active incident response operations, coordinating across teams to contain threats and performing deep-dive post-incident forensics.
• Malware & Threat Analysis: Perform deep-tissue analysis of malware to understand behavior and origins, using that intelligence to build proactive technical controls.
• Detection Engineering: Create, integrate, and maintain custom security tools and automated playbooks to streamline the "detect-to-remediate" lifecycle.
• Strategic Defense: Investigate advanced phishing vectors and implement systemic preventive measures; assist in high-level purple team exercises to validate our posture.
• Operational Excellence: Maintain and mature security documentation, including technical procedures, complex runbooks, and internal security policies.

Requirements

• 3-5 years of experience in a dedicated security operations or engineering role.
• Tier 2/3 Expertise: Proven track record of handling complex escalations and leading incident response efforts.
• Technical Depth: Advanced experience in malware analysis, digital forensics, and neutralizing sophisticated phishing campaigns.
• Systems Mastery: Strong understanding of security standards, hardening principles, and the ability to oversee enterprise-grade security platforms.
• Problem Solving: Exceptional analytical skills with the ability to think like an attacker to better defend the system.
• Communication: Excellent written and oral communication skills, with the ability to translate technical findings into actionable leadership briefings.
• Education/Experience: While we value experience, a degree in CS, Cybersecurity, or a related field is a plus.

Bonus

• Certifications: Advanced certifications such as CISSP, GCIA, GCIH, or OSCP.
• Platform Experience: Hands-on experience managing and tuning Google SecOps (Chronicle).
• Automation: Experience with SOAR platforms or scripting (Python, Go) to automate response workflows.

What we offer:

All our positions offer a compensation package that includes equity and robust benefits.

Base pay is just one component of Astranis's total rewards package. Your compensation also includes a significant equity package via incentive stock options, high-quality company-subsidized healthcare, disability and life insurance, 401(k) retirement planning, flexible PTO, and free on-site catered meals.

Astranis pay ranges are informed and defined through professional-grade salary surveys and compensation data sources. The actual base salary offered to a successful candidate will additionally be influenced by a variety of factors including experience, credentials & certifications, educational attainment, skill level requirements, and the level and scope of the position.

Base Salary

$150,000-$205,000 USD

U.S. Citizenship, Lawful Permanent Residency, or Refugee/Asylee Status Required

(To comply with U.S. Government space technology export regulations, applicant must be a U.S. citizen, lawful permanent resident of the United States, or other protected individual as defined by 8 U.S.C. 1324b(a)(3))