Security Operations Center (SOC) Analyst
for each section heading. Use - for any list of duties/requirements/benefits. Use
for prose.
We must preserve all substantive information, not invent or summarize away detail. Remove boilerplate: EEO, equal opportunity, etc. Also remove navigation, cookie, legal, scam-warning, application instructions. The posting includes "Equal Opportunity Employer ..." which we should remove. Also "Compensation Range:" is at end; we can include in Pay section.
We need to extract content.
Let's parse:
First paragraph: "Spacecraft represent the most pressing unmet need across the entire aerospace industry..." This is introductory description about company. Should we include? It's not under a heading; but we can include as part of About the role? The instruction: "Do NOT repeat the job title as a heading (the page already shows it)". The About the role section likely should contain the description of role. The introductory paragraph is more about company mission; maybe we can include it under About the role as prose. However the posting already has an "About The Role" heading after that paragraph. So we can put the introductory paragraph as part of About the role section (maybe before the heading? Actually we need to output only HTML fragment; we can include a
with that intro then
About The Role
then more details? But the instruction: "Use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." So we should have headings exactly those strings (case-insensitive? We'll match exactly as given: "About the role", "Responsibilities", etc). The posting uses "About The Role". We'll convert to lower case? Probably we should output exactly "About the role". The instruction says e.g. About the role (lowercase after About). We'll follow that.
Thus we will have:
About the role
Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge. For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles. Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more. We’d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet.
Then responsibilities: list items.
Responsibilities bullet list:
- Monitor and triage security alerts from CrowdStrike, Elastic SIEM, Microsoft Identity, AWS, and Palo Alto.
- Investigate suspicious logins, phishing emails, privilege changes, and unusual network events.
- Escalate incidents based on affected systems, severity, and CUI impact.
- Work with IT, Cybersecurity, and Network teams on security findings involving our systems and infrastructure.
- Document incidents, required resolutions, and potentially affected assets.
- Maintain recurring logging reviews and incident response documentation with the IT team; collect evidence to support vulnerability management and compliance reporting.
We'll put each as - .
Requirements:
- Active TS/SCI clearance required at time of hire
- US Citizenship required
- 2 or more years of experience in a SOC, incident response, threat detection, endpoint security, vulnerability management, or another hands-on cybersecurity operations role
- Experience investigating events using EDR, SIEM, identity, cloud, or network telemetry
- Working knowledge of Windows and Linux, authentication, endpoint behavior, networking fundamentals, common attacker techniques, and cloud logging
- Ability to write useful search queries and filters in a SIEM or log-analysis platform and document investigations so another analyst can continue the work
- Understanding of incident triage, scoping, containment, evidence preservation, escalation, vulnerability prioritization, and post-incident remediation
We'll list as
- .
Preferred Qualifications (Qualifications section):
- Experience with CrowdStrike Falcon, Palo Alto, Tenable, Elastic Security, Microsoft GCC High, Entra ID, AWS security telemetry, or similar tools
- Experience with detection engineering, threat hunting, MITRE ATT&CK, or scripting in Python, PowerShell, or Bash
- Security+, CySA+, GCIH, GCIA, or a comparable security operations certification
- Experience supporting aerospace, defense, national security, ATO, RMF, or other regulated technical environments
We'll put under
Qualifications
(or maybe "Preferred Qualifications"? The instruction says use headings like Qualifications. We'll use Qualifications.
Benefits: from "Why Join Apex?" paragraph and bullet list.
We need to extract benefits:
Shared upside: Receive equity in Apex, letting you benefit from the work you create
Best-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost
Comprehensive PTO package to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays
Competitive 401(k) plan with generous matching - 100% match on first 3%, 50% on next 2%
8 weeks paid parental leave plus childcare reimbursement up to $350/day for work-related travel
Daily catered lunch and unlimited snacks to keep you fueled throughout the day
Vibrant community: Monthly office socials, pickleball tournaments, run club, and gatherings for you and your family
Your dream desk setup and all the tools you need to be your most productive self
World-class Playa Vista office with the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life
Real impact opportunity: Work alongside experts from aerospace, new space, and other cutting-edge industries to make a lasting difference
We'll put each as - under Benefits.
Pay: compensation range: $88K - $121K.
We'll put
Compensation range: $88K - $121K
under Pay heading.
Schedule: not present, so omit.
We must not include boilerplate like Equal Opportunity Employer etc.
We must not include application instructions like "Ready to join a team..." maybe that's part of Why Join Apex? Actually that paragraph is part of Why Join Apex? It says "Ready to join a team where your contributions matter and your future is bright? Let's build something extraordinary together." That's a call to action; we should remove as application instructions? The instruction says remove application instructions. That line is likely an application instruction. So we should omit it. Also the "Why Join Apex?" heading is not a standard heading; we treat its content as Benefits. We'll not include a heading for Why Join Apex; we just put Benefits.
Thus final HTML:
About the role
Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge. For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles. Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more. We’d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet.
Responsibilities
- Monitor and triage security alerts from CrowdStrike, Elastic SIEM, Microsoft Identity, AWS, and Palo Alto.
- Investigate suspicious logins, phishing emails, privilege changes, and unusual network events.
- Escalate incidents based on affected systems, severity, and CUI impact.
- Work with IT, Cybersecurity, and Network teams on security findings involving our systems and infrastructure.
- Document incidents, required resolutions, and potentially affected assets.
- Maintain recurring logging reviews and incident response documentation with the IT team; collect evidence to support vulnerability management and compliance reporting.
Requirements
- Active TS/SCI clearance required at time of hire
- US Citizenship required
- 2 or more years of experience in a SOC, incident response, threat detection, endpoint security, vulnerability management, or another hands-on cybersecurity operations role
- Experience investigating events using EDR, SIEM, identity, cloud, or network telemetry
- Working knowledge of Windows and Linux, authentication, endpoint behavior, networking fundamentals, common attacker techniques, and cloud logging
- Ability to write useful search queries and filters in a SIEM or log-analysis platform and document investigations so another analyst can continue the work
- Understanding of incident triage, scoping, containment, evidence preservation, escalation, vulnerability prioritization, and post-incident remediation
Qualifications
- Experience with CrowdStrike Falcon, Palo Alto, Tenable, Elastic Security, Microsoft GCC High, Entra ID, AWS security telemetry, or similar tools
- Experience with detection engineering, threat hunting, MITRE ATT&CK, or scripting in Python, PowerShell, or Bash
- Security+, CySA+, GCIH, GCIA, or a comparable security operations certification
- Experience supporting aerospace, defense, national security, ATO, RMF, or other regulated technical environments
Benefits
- Shared upside: Receive equity in Apex, letting you benefit from the work you create
- Best-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost
- Comprehensive PTO package to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays
- Competitive 401(k) plan with generous matching - 100% match on first 3%, 50% on next 2%
- 8 weeks paid parental leave plus childcare reimbursement up to $350/day for work-related travel
- Daily catered lunch and unlimited snacks to keep you fueled throughout the day
- Vibrant community: Monthly office socials, pickleball tournaments, run club, and gatherings for you and your family
- Your dream desk setup and all the tools you need to be your most productive self
- World-class Playa Vista office with the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life
- Real impact opportunity: Work alongside experts from aerospace, new
for prose. We must preserve all substantive information, not invent or summarize away detail. Remove boilerplate: EEO, equal opportunity, etc. Also remove navigation, cookie, legal, scam-warning, application instructions. The posting includes "Equal Opportunity Employer ..." which we should remove. Also "Compensation Range:" is at end; we can include in Pay section. We need to extract content. Let's parse: First paragraph: "Spacecraft represent the most pressing unmet need across the entire aerospace industry..." This is introductory description about company. Should we include? It's not under a heading; but we can include as part of About the role? The instruction: "Do NOT repeat the job title as a heading (the page already shows it)". The About the role section likely should contain the description of role. The introductory paragraph is more about company mission; maybe we can include it under About the role as prose. However the posting already has an "About The Role" heading after that paragraph. So we can put the introductory paragraph as part of About the role section (maybe before the heading? Actually we need to output only HTML fragment; we can include a
with that intro then
About The Role
then more details? But the instruction: "Use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." So we should have headings exactly those strings (case-insensitive? We'll match exactly as given: "About the role", "Responsibilities", etc). The posting uses "About The Role". We'll convert to lower case? Probably we should output exactly "About the role". The instruction says e.g. About the role (lowercase after About). We'll follow that.
Thus we will have:
About the role
Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge. For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles. Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more. We’d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet.
Then responsibilities: list items. Responsibilities bullet list: - Monitor and triage security alerts from CrowdStrike, Elastic SIEM, Microsoft Identity, AWS, and Palo Alto. - Investigate suspicious logins, phishing emails, privilege changes, and unusual network events. - Escalate incidents based on affected systems, severity, and CUI impact. - Work with IT, Cybersecurity, and Network teams on security findings involving our systems and infrastructure. - Document incidents, required resolutions, and potentially affected assets. - Maintain recurring logging reviews and incident response documentation with the IT team; collect evidence to support vulnerability management and compliance reporting. We'll put each as- .
Preferred Qualifications (Qualifications section):
- Experience with CrowdStrike Falcon, Palo Alto, Tenable, Elastic Security, Microsoft GCC High, Entra ID, AWS security telemetry, or similar tools
- Experience with detection engineering, threat hunting, MITRE ATT&CK, or scripting in Python, PowerShell, or Bash
- Security+, CySA+, GCIH, GCIA, or a comparable security operations certification
- Experience supporting aerospace, defense, national security, ATO, RMF, or other regulated technical environments
We'll put under
Qualifications
(or maybe "Preferred Qualifications"? The instruction says use headings like Qualifications. We'll use Qualifications. Benefits: from "Why Join Apex?" paragraph and bullet list. We need to extract benefits: Shared upside: Receive equity in Apex, letting you benefit from the work you create Best-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost Comprehensive PTO package to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays Competitive 401(k) plan with generous matching - 100% match on first 3%, 50% on next 2% 8 weeks paid parental leave plus childcare reimbursement up to $350/day for work-related travel Daily catered lunch and unlimited snacks to keep you fueled throughout the day Vibrant community: Monthly office socials, pickleball tournaments, run club, and gatherings for you and your family Your dream desk setup and all the tools you need to be your most productive self World-class Playa Vista office with the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life Real impact opportunity: Work alongside experts from aerospace, new space, and other cutting-edge industries to make a lasting difference We'll put each as - under Benefits.
Pay: compensation range: $88K - $121K.
We'll put
Compensation range: $88K - $121K
under Pay heading. Schedule: not present, so omit. We must not include boilerplate like Equal Opportunity Employer etc. We must not include application instructions like "Ready to join a team..." maybe that's part of Why Join Apex? Actually that paragraph is part of Why Join Apex? It says "Ready to join a team where your contributions matter and your future is bright? Let's build something extraordinary together." That's a call to action; we should remove as application instructions? The instruction says remove application instructions. That line is likely an application instruction. So we should omit it. Also the "Why Join Apex?" heading is not a standard heading; we treat its content as Benefits. We'll not include a heading for Why Join Apex; we just put Benefits. Thus final HTML:About the role
Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge. For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles. Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more. We’d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet.
Responsibilities
- Monitor and triage security alerts from CrowdStrike, Elastic SIEM, Microsoft Identity, AWS, and Palo Alto.
- Investigate suspicious logins, phishing emails, privilege changes, and unusual network events.
- Escalate incidents based on affected systems, severity, and CUI impact.
- Work with IT, Cybersecurity, and Network teams on security findings involving our systems and infrastructure.
- Document incidents, required resolutions, and potentially affected assets.
- Maintain recurring logging reviews and incident response documentation with the IT team; collect evidence to support vulnerability management and compliance reporting.
Requirements
- Active TS/SCI clearance required at time of hire
- US Citizenship required
- 2 or more years of experience in a SOC, incident response, threat detection, endpoint security, vulnerability management, or another hands-on cybersecurity operations role
- Experience investigating events using EDR, SIEM, identity, cloud, or network telemetry
- Working knowledge of Windows and Linux, authentication, endpoint behavior, networking fundamentals, common attacker techniques, and cloud logging
- Ability to write useful search queries and filters in a SIEM or log-analysis platform and document investigations so another analyst can continue the work
- Understanding of incident triage, scoping, containment, evidence preservation, escalation, vulnerability prioritization, and post-incident remediation
Qualifications
- Experience with CrowdStrike Falcon, Palo Alto, Tenable, Elastic Security, Microsoft GCC High, Entra ID, AWS security telemetry, or similar tools
- Experience with detection engineering, threat hunting, MITRE ATT&CK, or scripting in Python, PowerShell, or Bash
- Security+, CySA+, GCIH, GCIA, or a comparable security operations certification
- Experience supporting aerospace, defense, national security, ATO, RMF, or other regulated technical environments
Benefits
- Shared upside: Receive equity in Apex, letting you benefit from the work you create
- Best-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost
- Comprehensive PTO package to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays
- Competitive 401(k) plan with generous matching - 100% match on first 3%, 50% on next 2%
- 8 weeks paid parental leave plus childcare reimbursement up to $350/day for work-related travel
- Daily catered lunch and unlimited snacks to keep you fueled throughout the day
- Vibrant community: Monthly office socials, pickleball tournaments, run club, and gatherings for you and your family
- Your dream desk setup and all the tools you need to be your most productive self
- World-class Playa Vista office with the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life
- Real impact opportunity: Work alongside experts from aerospace, new