At a glance
- Experience
- 1+ years experience
- Location
- Hawthorne
About the role
- SpaceX is seeking an Insider Threat Analyst to protect advanced technologies, infrastructure, operations, and personnel.
- This role involves researching, analyzing, producing, and disseminating information to respond to threats and safeguard intellectual property.
- The analyst will triage anomalous event data, execute internal investigations, and collaborate with multidisciplinary internal and external stakeholders.
Responsibilities
- Conduct comprehensive investigations and analysis in support of SpaceX intellectual property and security
- Uphold investigation and analytic tradecraft standards including confidentiality, objectivity, lawfulness, timeliness, and use of all available sources of information
- Collect and analyze available program data to evaluate insider threat risk to SpaceX infrastructure, programs, and operations
- Triage anomalous event data associated with indicators of data exfiltration, data destruction and other key indicators of concern
- Conduct internal investigations working with Information Security, HR, Legal, Government Security, Physical Security, and external partners based on information derived from internal and external sources
- Utilize network monitoring, data analytic, and other tools (DLP/SIEM/UEBA) to identify anomalous activity, initiate investigations and decipher underlying trends
- Extract and organize insider threat program data to build metrics, reports and case studies addressing mission requirements and timelines
- Communicate findings in a timely and accurate manner to team members, management, and relevant stakeholders
- Support employee training and briefings for internal and external audiences
- Liaise with external industry and government partners to benchmark insider threat program, share threat intelligence, and further investigations
Requirements
- Bachelor's degree and 2+ years of professional experience in internal investigations, information security, or counterintelligence; OR 4+ years professional experience in information security, internal investigations, or counterintelligence in lieu of a degree
- Must be able to work extended hours and weekends as needed to support critical efforts and operations
- Must be willing to travel ad hoc
- Active TS/SCI clearance, or ability to obtain one
Preferred qualifications
- 1+ year using a SIEM and/or conducting digital forensic investigations in a government or corporate environment
- Working level understanding of insider threat program missions, internal stakeholders, and manifestations of insider threats
- Proficiency in Microsoft Purview for eDiscovery
- Experience performing business process automation or constructing data pipelines
- Familiarity with risk-based alerting, detection, and tuning concepts for insider risk
- Experience conducting preliminary assessments, determining scope, investigation planning, evidence collection/handling, interviewing and reporting findings to internal and external stakeholders
- Ability to conduct interviews on short notice according to established internal guidelines
- Excellent written and oral communication skills, with the ability to produce clear and concise reports
Benefits
- Long-term incentives in the form of company stock or long-term cash awards
- Potential discretionary bonuses
- Employee Stock Purchase Plan
- Comprehensive medical, vision, and dental coverage
- 401(k) retirement plan
- Short and long-term disability insurance
- Life insurance
- Paid parental leave
- 3 weeks of paid vacation
- 10 or more paid holidays per year
Workplace
- Must be willing to travel ad hoc
Skills
- DLP
- SIEM
- UEBA
- Microsoft Purview
