At a glance
- Experience
- 1+ years experience
- Location
- Hawthorne
About the role
- SpaceX is seeking an Investigations Analyst to protect advanced technologies, personnel, brand, global assets, intellectual property, and operations.
- The role involves researching, analyzing, producing, and disseminating threat intelligence, triaging anomalous event data, and analyzing insider threat program datasets.
Responsibilities
- Conduct comprehensive investigations and analysis in support of SpaceX intellectual property and security
- Uphold investigation and analytic tradecraft standards including confidentiality, objectivity, lawfulness, timeliness, and use of all available sources of information
- Collect and analyze available program data to evaluate insider threat risk to SpaceX infrastructure, programs, and operations
- Triage anomalous event data associated with indicators of data exfiltration, data destruction and other key indicators of concern
- Conduct internal investigations working with Information Security, HR, Legal, Government Security, Physical Security, and external partners based on information derived from internal and external sources
- Utilize network monitoring, data analytic, and other tools (DLP/SIEM/UEBA) to identify anomalous activity, initiate investigations and decipher underlying trends
- Extract and organize insider threat program data to build metrics, reports and case studies addressing mission requirements and timelines
- Communicate findings in a timely and accurate manner to team members, management, and relevant stakeholders
- Support employee training and briefings for internal and external audiences
- Liaise with external industry and government partners to benchmark insider threat program, share threat intelligence, and further investigations
Requirements
- Bachelor's degree and 2+ years of professional experience in internal investigations, information security, or counterintelligence; OR 4+ years professional experience in information security, internal investigations, or counterintelligence in lieu of a degree
- Active TS/SCI clearance, or ability to obtain one
- Must be able to work extended hours and weekends as needed to support critical efforts and operations
- Must be willing to travel ad hoc
Preferred qualifications
- 1+ year using a SIEM and/or conducting digital forensic investigations in a government or corporate environment
- Working level understanding of insider threat program missions, internal stakeholders, and manifestations of insider threats
- Proficiency in Microsoft Purview for eDiscovery
- Experience performing business process automation or constructing data pipelines
- Familiarity with risk-based alerting, detection, and tuning concepts for insider risk
- Experience conducting preliminary assessments, determining scope, investigation planning, evidence collection/handling, interviewing and reporting findings to internal and external stakeholders
- Ability to conduct interviews on short notice according to established internal guidelines
- Ability to exercise discretion when conducting confidential investigations
Benefits
- Company stock or long-term cash awards
- Discretionary bonuses
- Employee Stock Purchase Plan
- Medical, vision, and dental coverage
- 401(k) retirement plan
- Short and long-term disability insurance
- Life insurance
- Paid parental leave
- Paid vacation
- Paid holidays and paid sick leave
Workplace
- Must be willing to travel ad hoc
Skills
- DLP
- SIEM
- UEBA
- Microsoft Purview