Security Operations Engineer

Astranis builds advanced satellites for high orbits, expanding humanity’s reach into the solar system. Today, Astranis satellites provide dedicated, secure networks to highly-sophisticated customers across the globe— large enterprises, sovereign governments, and the US military. With five satellites on orbit and many more set to launch soon, the company is servicing a backlog of more than $1 billion of commercial contracts. Astranis is the preferred satellite communications partner for buyers with stringent requirements for uptime, data security, network visibility, and customization. Astranis has raised over $750 million from some of the world’s best investors, from Andreessen Horowitz to Blackrock and Fidelity, and employs a team of 450 engineers and entrepreneurs. Astranis designs, builds, and operates its satellites out of its 153,000 sq. ft. headquarters in Northern California, USA. Security Operations Engineer Astranis is looking for a Security Operations Engineer who isn’t afraid to dive headfirst into the digital abyss. Our ideal candidate is a seasoned defender with the technical depth to not only triage complex threats but to oversee the very systems that keep us secure. As a Tier 2/3 escalation point, you will be the backbone of our defense, untangling advanced malware, neutralizing sophisticated phishing schemes, and leading high-stakes incident response operations. In an environment where threats evolve at breakneck speed, we need a resourceful engineer who can engineer resilience, mentor junior analysts, and protect our digital frontier with precision. Role Advanced Incident Triage: Act as the Tier 2/3 escalation point for complex security events. Investigate and resolve high-severity incidents escalated from initial monitoring tiers. System Oversight: Oversee and optimize security infrastructure, ensuring that Google SecOps (Chronicle) and other SIEM/SOAR tools are tuned for maximum visibility and efficiency. Incident Leadership: Lead the charge during active incident response operations, coordinating across teams to contain threats and performing deep-dive post-incident forensics. Malware & Threat Analysis: Perform deep-tissue analysis of malware to understand behavior and origins, using that intelligence to build proactive technical controls. Detection Engineering: Create, integrate, and maintain custom security tools and automated playbooks to streamline the "detect-to-remediate" lifecycle. Strategic Defense: Investigate advanced phishing vectors and implement systemic preventive measures; assist in high-level purple team exercises to validate our posture. Operational Excellence: Maintain and mature security documentation, including technical procedures, complex runbooks, and internal security policies. Requirements 3–5 years of experience in a dedicated security operations or engineering role. Tier 2/3 Expertise: Proven track record of handling complex escalations and leading incident response efforts. Technical Depth: Advanced experience in malware analysis, digital forensics, and neutralizing sophisticated phishing campaigns. Systems Mastery: Strong understanding of security standards, hardening principles, and the ability to oversee enterprise-grade security platforms. Problem Solving: Exceptional analytical skills with the ability to think like an attacker to better defend the system. Communication: Excellent written and oral communication skills, with the ability to translate technical findings into actionable leadership briefings. Education/Experience: While we value experience, a degree in CS, Cybersecurity, or a related field is a plus. Bonus Certifications: Advanced certifications such as CISSP, GCIA, GCIH, or OSCP. Platform Experience: Hands-on experience managing and tuning Google SecOps (Chronicle). Automation: Experience with SOAR platforms or scripting (Python, Go) to automate response workflows. What we offer: All our positions offer a compensation package that includes equity and robust benef