Senior Detection and Response Engineer

Responsibilities

• Lead incident response and forensics - Own security incidents from detection through resolution across globally distributed ground stations and cloud infrastructure.
  • Conduct digital forensics, malware analysis, and coordinate response efforts for incidents impacting national security missions.
• Create incident response playbooks - Build runbooks for security incidents specific to satellite ground stations and space communications.
  • Develop escalation procedures and communication protocols for government customers and mission-critical operations.
• Analyze threat intelligence - Research adversary tactics targeting aerospace and defense infrastructure. Integrate threat feeds into detection systems and brief stakeholders on emerging threats to space communications.
• Build security automation - Develop Python/PowerShell scripts for automated incident response, threat hunting workflows, and security orchestration across distributed ground station networks.

Requirements

• Basic Qualifications
• Preferred Qualifications

• 5+ years of hands-on SOC operations, incident response, or threat hunting experience.
• Experience with SIEM platforms (Splunk, Sentinel, Chronicle) including custom rule development and advanced search techniques.
• Digital forensics and malware analysis skills with tools like Volatility, YARA, and hex editors.
• Proficiency in Python, PowerShell, or similar languages for security automation and threat hunting.
• Experience with endpoint security platforms (CrowdStrike, SentinelOne) and network security monitoring.
• Strong Linux forensics and log analysis skills across distributed systems.
• Knowledge of threat intelligence frameworks (MITRE ATT&CK, Diamond Model) and IOC analysis.
• Experience with threat hunting in air-gapped or highly regulated environments.
• Knowledge of RF communications, satellite systems, or space-based asset security.
• Certifications such as GCIH, GCFA, GNFA, or similar incident response credentials.
• Experience building security orchestration and automated response (SOAR) workflows.
• Familiarity with government incident reporting requirements and procedures.

Qualifications

• If you need a reasonable accommodation as part of your application for employment or interviews with us, please let us know.
• To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.
• Northwood Space is an Equal Opportunity Employer; employment with Northwood Space is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.