K2 Space
Principal Security Engineer, Operations
$180K–$250K
Los Angeles, CA +1 · Principal · Full-time · Posted Oct 19, 2026
- Location
- Los Angeles, CA
Los Angeles - Experience
- 10+ years in security operations, detection and response, or incident response; alternatively for the stated education requirement, 2+ years of programming experience used for security automation in lieu of a degree.
- Education
- 2+ years of modern programming-language development used for automation in lieu of a degree; OR a bachelor’s degree in security engineering, cyber security, computer science, engineering, math, or another STEM discipline. Bachelor’s degree (or equivalent) in computer science or engineering is nice to have.
- Visa sponsorship
- Must be a “U.S. person” as defined by 22 C.F.R. § 120.15 or otherwise eligible for a federally issued export control license.
About the job
Owns and improves corporate security detection and incident response, from SIEM operations and threat hunting to incident containment and post-incident follow-through.
What you'll do
- Lead alert triage, investigations, incident response, containment, and remediation across the corporate environment.
- Administer and mature the SIEM; develop and test MITRE ATT&CK-mapped detections and response automation.
- Conduct threat hunts, adversary emulation, and forensics, and improve security controls based on findings.
What they ask for
- 10+ years of experience in security operations, detection and response, or incident response.
- Hands-on SIEM administration and tuning, including log onboarding, parsing, and detection rule development.
- Experience leading security incidents end to end and investigating endpoint, identity, network, and cloud telemetry across macOS, Windows, and Linux.
- 2+ years of modern programming-language development used for security automation in lieu of a degree; OR a bachelor’s degree in security engineering, cyber security, computer science, engineering, math, or another STEM discipline.
Nice to have
- Detection and response certifications (GCIH, GCFA, GCIA, GCDA, or OSCP), or equivalent hands-on experience.
- Experience with detection-as-code pipelines, security data lakes, security telemetry ETL, cloud detection and response, threat intelligence, malware analysis, reverse engineering, or defense/aerospace/ITAR-regulated environments.
Pay
$180,000 – $250,000 USD base salary
Tools
SIEM, Splunk, Microsoft Sentinel, Elastic, Panther, Chronicle, MITRE ATT&CK, SOAR
Model-written summary · the original posting is authoritative