Senior Security Analyst

BlackSky

. Report to the Manager of Security Analysis Team (SOC), with rollup to the Director of Security .

Posted 10/2/2026full-timeUnited StatesSenior💰 $80,000 - $90,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in security analysis, incident response, and digital forensics, with a strong focus on compliance and vulnerability management. Proficient in utilizing SIEM platforms, endpoint security mechanisms, and cloud security practices to enhance organizational security posture.

Highest-signal resume keywords

Security Analyst ExperienceDigital Forensics ExpertiseIncident Response ProficiencyCISSP CertificationMalware Analysis Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security MonitoringDigital ForensicsIncident ResponseMalware AnalysisNetwork Traffic AnalysisVulnerability ManagementThreat HuntingLog AnalysisAutomation DevelopmentSecure DevOps Processes

Soft Skills

Documentation SkillsAnalytical ThinkingCollaboration

Tools & Technologies

SIEM PlatformsEDRCASBCisco DuoNessusCrowdstrike XDR/MDRActive DirectoryAWS CloudFormationHashiCorp TerraformDocker

Certifications & Qualifications

CISSPGCIHCHFIGCFEGCFAGREMGNFAGCSAGCPNAWS Certified Security - Specialty

Industry Keywords

Cyber Threat IntelligenceCompliance AssessmentsCIS BenchmarksDISA STIGsSOX/ITGCCMMC 2.0 Level 2NIST 800-171 r3UK Cyber EssentialsPCAP AnalysisNetFlow Analysis

Tech Stack

Tools & technologies

AWSCloudDockerJavaJavaScriptLinuxMacOSPythonTerraformVMware

About the role

Key responsibilities & impact

Report to the Manager of Security Analysis Team (SOC), with rollup to the Director of Security
Continuously monitor networks, managed devices and identities, cloud services, business systems, and application traffic
Analyze logs in an integrated SIEM platform and develop searches, dashboards, and alerts to improve detection and response timelines
Perform security monitoring, digital forensics, and incident response across corporate, product, and mission environments
Review events and alerts for indicators of compromise, indicators of attack, cyber threat intelligence, and non-compliance activities
Review cyber threat intelligence and apply insights to secure the enterprise
Conduct regular threat hunting
Document procedures and technical findings, including anomalies, incidents, and concerns
Analyze system/event logs, network traffic, and SaaS security tool data
Perform malware analysis and digital forensics using industry-standard sandbox tools
Monitor network, operating system, and application log traffic for security threats
Support vulnerability management, prioritization, and remediation with IT and product owners
Define offensive testing scope and support vulnerability remediation
Monitor compliance with hardened baseline images against CIS Benchmarks and/or DISA STIGs
Develop automation to improve adversary detection and reduce recurring tasks
Complete compliance assessments and report findings to management
Support security training and manage tabletop scenarios
Support SOX/ITGC, CMMC 2.0 Level 2, NIST 800-171 r3, UK Cyber Essentials, and customer-specific compliance requirements
Perform other responsibilities as assigned

Requirements

What you’ll need

Minimum of seven (7) years’ experience performing security analyst and DFIR activities
Minimum of seven (7) years’ experience in IT security
At least one of the listed security certifications, including CISSP, GCIH, CHFI, GCFE, GCFA, GREM, GNFA, GCSA, GCPN, GPCS, GSOC, GCDA, ACE, EnCE, or AWS Certified Security - Specialty
Ability to document processes, procedures, and results of technical analysis for peer review
Experience implementing, troubleshooting, and sustaining endpoint security mechanisms such as EDR and CASB in Windows, MacOS, and/or Linux
Experience performing Incident Response, Digital Forensics, Malware Analysis, Network Traffic Collection, or Reverse Engineering
Must be a U.S. Citizen
Strong Linux security background with Ubuntu, Amazon Linux, and/or CentOS preferred
Preferred knowledge of endpoint security for Windows, MacOS, and Linux environments
Preferred experience with Cisco Duo, Nessus, OpenSCAP, Crowdstrike XDR/MDR, ManageEngine, Cisco Umbrella, Active Directory / Entra ID, and Netskope
Preferred experience with event log, PCAP, and NetFlow analysis, malware analysis, and data collection
Preferred experience with Microsoft GCC High, AWS Commercial, AWS GovCloud, and VMware ESXi
Preferred experience with AWS CloudFormation and HashiCorp Terraform
Preferred coding and scripting knowledge: Python, Java, JavaScript, BASH, and PowerShell
Preferred knowledge of Secure DevOps Processes
Preferred container technology knowledge: Docker, ECS, Nomad, and HashiCorp product stack

Benefits

Comp & perks

Medical, dental, vision, disability, group term life and AD&D, voluntary life and AD&D insurance
BlackSky pays 100% of employee-only premiums for medical, dental and vision and contributes $100/month for out-of-pocket expenses
15 days of PTO
11 Company holidays
Four Floating Holidays (pro-rated based on hire date)
One day of paid volunteerism leave per year
Parental leave
401(k) pre-tax and Roth deferral options with employer match
Flexible Spending Accounts
Employee Stock Purchase Program
Employee Assistance and Travel Assistance Programs
Employer matching donations
Professional development
Choice of Mac or PC
Awesome swag