Senior Security Analyst

at Blacksky

Seattle, WA, Herndon, VA, Remote, remote, senior, full time, USD 80,000–90,000 / year, 7+ years

posted 02 Oct 2026

Apply for this role Sign in to track your application

Entra ID
Netskope
AWS CloudFormation
Vulnerability Management
Nessus
BASH
Windows
HashiCorp Terraform
Incident Response
Crowdstrike XDR
EDR
Docker
Threat Hunting
JavaScript
ManageEngine
Cisco Duo
AWS
Python
Ubuntu
PowerShell
Java
Cisco Umbrella
OpenSCAP
Crowdstrike MDR
Active Directory
Amazon Linux
Nomad
Malware Analysis
CASB
Linux
ECS
Digital Forensics
MacOS
CentOS
VMware ESXi
AWS GovCloud

About the role

Remote: yes Posted: 2026-10-02

Senior Security Analyst

What you would do

- Perform security monitoring and digital forensics and incident response (DFIR) activities across corporate, product, and mission environments by reviewing events and alerting attributed to indicators of compromise (IOCs), indicators of attack (IOAs), cyber threat intelligence (CTI) reporting, and non-compliance activities

- Review multiple sources of cyber threat intelligence and apply the insights appropriately to inform and secure the enterprise

- Conduct regular threat hunting across the corporate, product, and mission environments

- Document procedures for performance of job duties to formalize ad-hoc processes

- Conduct security analysis of data from many sources - system/event logs, network traffic, and SaaS security tools.

- Perform analysis, and digital forensics of potential malware using Industry standard Sandbox tools.

- Support continuous monitoring of network, operating system, and application log traffic to identify potential security threats related to the industry.

- Support vulnerability management process through identification and prioritization of critical security concerns in collaboration with IT or Product owners to drive vulnerability or misconfiguration remediation activities.

- Work with product owners to define offensive testing scope requirements and constraints and to support the remediation process on any identified vulnerabilities.

- Monitor operational systems for continuous compliance with hardened baseline images against industry checklists such as CIS Benchmarks and/or DISA STIGs,

- Develop solutions to automate reoccurring tasks and improve adversary detection.

- Complete compliance assessments and report findings to management.

- Document findings (anomalies, incidents, concerns) and share widely with security, IT, and product teams as appropriate to enable enhanced understanding of security posture.

- Strong Linux security background with Ubuntu, Amazon Linux, and/or CentOS preferred.

- Support security training and manage tabletop scenarios to other employees

Read from boards.greenhouse.io, last seen 3d ago.

What they are looking for

- A minimum of seven (7) years’ experience performing security analyst and DFIR activities.

- A minimum of seven (7) years’ experience in IT security.

- Candidates should hold at least one of the following security certifications:

- Certified Information Systems Security Professional (CISSP),

- GIAC Certified Incident Handler (GCIH),

- Computer Hacking Forensic Investigator (CHFI),

- GIAC Certified Forensic Examiner (GCFE),

- GIAC Certified Forensic Analyst (GCFA),

- GIAC Reverse Engineering Malware (GREM),

- GIAC Network Forensic Analyst (GNFA),

- GIAC Cloud Security Automation (GCSA),

- GIAC Cloud Penetration Tester (GCPN),

- GIAC Public Cloud Security (GPCS),

- GIAC Security Operations Certified (GSOC),

- GIAC Certified Detection Analyst (GCDA),

- Access Data Certified Examiner (ACE), and/or

- Encase Certified Examiner (EnCE), AWS Certified Security - Specialty.

- Ability to document processes, procedures, and results of technical analysis for review by peers.

- Experience with implementing, troubleshooting, and sustaining endpoint security mechanisms (e.g., EDR, CASB, and others) in at least one of the following Operating Systems - Windows, MacOS, and/or Linux.

- Experience performing at least one of the following activities - Incident Response, Digital Forensics, Malware Analysis, Network Traffic Collection, or Reverse Engineering.

- Must be a U.S. Citizen.

- Endpoint Security for Windows, MacOS, and Linux environments.

- Enterprise Security Tools: Cisco Duo, Nessus, OpenSCAP, Crowdstrike XDR/MDR, ManageEngine, Cisco Umbrella, Active Directory / Entra ID, Netskope.

- Extensive incident response, security analysis, and digital forensics experience performing event log, PCAP, and NetFlow data analysis, malware analysis, and data collection.

- Cloud Solutions: Microsoft GCC High, AWS Commercial, AWS GovCloud, VMware ESXi.

- Infrastructure as Code: AWS CloudFormation, HashiCorp Terraform.

- Coding & Scripting: Python, Java, JavaScript, BASH, PowerShell.

- Knowledge of Secure DevOps Processes.

- Container Technologies: Docker, ECS, Nomad, HashiCorp product stack.

Life at BlackSky for full-time US benefits eligible employees includes:

- Medical, dental, vision, disability, group term life and AD&D, voluntary life and AD&D insurance

- BlackSky pays 100% of employee-only premiums for medical, dental and vision and contributes $100/month for out-of-pocket expenses!

- 15 days of PTO, 11 Company holidays, four Floating Holidays (pro-rated based on hire date), one day of paid volunteerism leave per year, parental leave and more

- 401(k) pre-tax and Roth deferral options with employer match

- Flexible Spending Accounts

- Employee Stock Purchase Program

- Employee Assistance and Travel Assistance Programs

- Employer matching donations

- Professional development

- Mac or PC? Your choice!

- Awesome swag

The anticipated base salary range for candidates in Seattle, WA and Herndon, VA is $80,000 - 90,000 per year. The final compensation package offered to a successful candidate will be dependent on specific background and education. BlackSky is a multi-state employer, and this pay scale may not reflect salary ranges in other states or locations outside of Seattle, WA.

BlackSky is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity Employer. All Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, sexual orientation, gender identity, disability, protected veteran status or any other characteristic protected by law.

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.