Cyber Operations Analyst

Maxar Intelligence is a provider of secure, precise, geospatial intelligence. We deliver disruptive value to government and commercial customers to help them monitor, understand and navigate our changing planet. Our unique approach combines decades of deep mission understanding and a proven commercial and defense foundation to deploy solutions and deliver insights with unrivaled speed, scale and cost effectiveness.

The Maxar Cybersecurity team is seeking an experienced Cybersecurity Operations Analyst who will provide ongoing support for the Cybersecurity Operations Center (CSOC) in the areas of incident response and investigation. This person will be responsible for providing initial, front-line, analysis and resolution of security alerts as generated by the SIEM and other monitoring solutions capable of generating alerts. This position can be 100% remote.

Life with Us:

There is a reason we boast awards like Best Employer, Best Place to work, Top employer, candidate experience winner. Our strength is in our people. Each team member makes a unique contribution

to our collective mission. So, we recognize that with best-in-class benefits like:

• 401K matching and immediate vesting schedule
• Career growth opportunities
• Family friendly benefits like maternity and paternity leave, adoption reimbursement, flexible hours, hybrid work options
• Programs to help you grow like tuition reimbursement, hackathons, and career development
• Student loan repayment
• Generous time off
• Comprehensive medical, dental and vision at affordable monthly rates

Primary Duties and Responsibilities:

• Monitor security tools and provide appropriate remediation response when necessary.
• Escalate security events as needed and/or driven by process.
• Perform and/or coordinate information gathering and analysis that will be provided to Maxar IT teams responsible for clearing actions.
• Interact with MDR analysts to conduct triage and analysis of real-time data feeds and alerts to detect potential intrusions.
• Work with Cybersecurity Engineering resources to correct issues with log source generation, security tool issues, and building out of automation run books.
• Implement changes to the technologies required, including inclusion of log sources/types and changes to alerts.
• Collaborate and support the vulnerability management team in identification and awareness of zero-day vulnerabilities.
• Participate in Incident Response activities.

Minimum Qualifications:

• Must be a U.S. Citizen
• 2+ years’ experience working in a Security Operations Center environment.
• Bachelors of Science, with a focus on Information Security.
• Professional certifications: CySA+, CISSP or equivalent cybersecurity certification.
• Ability and willingness to share on-call responsibilities, work non-standard hours, and aid cybersecurity investigations.
• Experience with wide range of cybersecurity technologies including SIEM, EDR, Perimeter Email Protection, SOAR, and others.

Preferred Qualifications:

• General network and system/application architecture/administration principles
• General knowledge of monitoring system architecture maintained by Cybersecurity such as SIEM and Log Management architecture.
• Understanding of current trends in attacker and threat actor tools, techniques, and procedures.
• Experience with Windows, Linux and MacOS environments.
• Professional experience with AWS.
• Experience with network security and networking technologies, as well as with system, security, and network monitoring tools.

Maxar Technologies values diversity in the workplace and is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.