At a glance
- Experience
- 1+ years experience
- Location
- Hawthorne
About the role
- SpaceX is seeking an Insider Threat Program Analyst to research, analyze, produce, and disseminate information to protect personnel, assets, intellectual property, and operations. This role involves triaging anomalous event data and analyzing insider threat datasets to respond to security threats in a fast-paced, high-tech environment.
Responsibilities
- Conduct comprehensive investigations and analysis in support of SpaceX intellectual property and security
- Uphold investigation and analytic tradecraft standards including confidentiality, objectivity, lawfulness, timeliness, and use of all available sources of information
- Collect and analyze available program data to evaluate insider threat risk to SpaceX infrastructure, programs, and operations
- Triage anomalous event data associated with indicators of data exfiltration, data destruction and other key indicators of concern
- Conduct internal investigations working with Information Security, HR, Legal, Government Security, Physical Security, and external partners based on information derived from internal and external sources
- Utilize network monitoring, data analytic, and other tools (DLP/SIEM/UEBA) to identify anomalous activity, initiate investigations and decipher underlying trends
- Extract and organize insider threat program data to build metrics, reports and case studies addressing mission requirements and timelines
- Communicate findings in a timely and accurate manner to team members, management, and relevant stakeholders
- Support employee training and briefings for internal and external audiences
- Liaise with external industry and government partners to benchmark insider threat program, share threat intelligence, and further investigations
Requirements
- Bachelor's degree and 2+ years of professional experience in internal investigations, information security, or counterintelligence; OR 4+ years professional experience in information security, internal investigations, or counterintelligence in lieu of a degree
- Must be able to work extended hours and weekends as needed to support critical efforts and operations
- Must be willing to travel ad hoc
- Active TS/SCI clearance, or ability to obtain one
Preferred qualifications
- 1+ year using a SIEM and/or conducting digital forensic investigations in a government or corporate environment
- Working level understanding of insider threat program missions, internal stakeholders, and manifestations of insider threats
- Proficiency in Microsoft Purview for eDiscovery
- Experience performing business process automation or constructing data pipelines
- Familiarity with risk-based alerting, detection, and tuning concepts for insider risk
- Experience conducting preliminary assessments, determining scope, investigation planning, evidence collection/handling, interviewing and reporting findings to internal and external stakeholders
- Ability to conduct interviews on short notice according to established internal guidelines
- Excellent written and oral communication skills, with the ability to produce clear and concise reports
Benefits
- Long-term incentives in the form of company stock or long-term cash awards
- Potential discretionary bonuses
- Ability to purchase additional stock at a discount through an Employee Stock Purchase Plan
- Comprehensive medical, vision, and dental coverage
- Access to a 401(k) retirement plan
- Short and long-term disability insurance
- Life insurance
- Paid parental leave
- Accrue 3 weeks of paid vacation
- 10 or more paid holidays per year
Workplace
- Must be willing to travel ad hoc
Skills
- DLP
- SIEM
- UEBA
- Microsoft Purview
