{"id":2888719,"url":"https://alion.io/job/k2-space-principal-security-engineer-operations","title":"Principal Security Engineer, Operations","company":{"id":171840,"name":"K2 Space","domain":"k2space.com","url":"https://alion.io/company/k2-space","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":85,"open_postings":199,"ghost_share":0.166,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":86,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Los Angeles, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":180000,"max":250000,"currency":"USD","period":"year","gross":null,"usd_annual":250000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"C++","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Python","optional":false},{"name":"Rust","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"ETL/ELT","optional":true},{"name":"GCP","optional":true}],"status":"live","first_seen_at":"2026-10-19T22:59:55Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-22T03:59:16Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":1},"description":"K2 is building the largest and highest-power satellites ever flown, unlocking performance levels previously out of reach across every orbit. Backed by over $1 billion in total funding from leading investors including Altimeter Capital, ICONIQ, Kleiner Perkins, Lightspeed Venture Partners, Redpoint Ventures, and T. Rowe Price - and with over $1 billion in signed contracts across commercial and US government customers, we're mass-producing the highest-power satellite platforms ever built for missions from LEO to deep space.\nThe rise of heavy-lift launch vehicles is shifting the industry from an era of mass constraint to one of mass abundance, and we believe this new era demands a fundamentally different class of spacecraft. Engineered to survive the harshest radiation environments and to fully capitalize on today's and tomorrow's massive rockets, K2 satellites deliver unmatched capability at constellation scale and across multiple orbits.\nWith multiple launches in 2027 and plans to scale to 100 satellites a year, we're Building Bigger - helping develop the solar system and build toward a Kardashev Type II (K2) civilization. If you are a motivated individual who thrives in a fast-paced environment and you're excited about contributing to the success of a high-growth Series D-funded company, we'd love for you to apply.\nThe Role \nK2 is a target for sophisticated adversaries, from nation-state actors to criminal groups, all intent on stealing or disrupting the technology behind a new class of high-powered satellites. This role owns detection and response for our corporate environment: you’ll run and mature our SIEM, build detections against real adversary tradecraft, triage what fires, and drive incidents from first signal through containment, eradication, and lessons learned. You’ll be deeply hands-on across identity, endpoints, SaaS, network, and cloud telemetry, closing the visibility gaps you find rather than simply documenting them. This is a role for someone who thrives on real-world impact and operates with urgency when it counts. Every detection you write and every incident you shut down directly supports our ability to move fast, operate confidently, and deliver breakthrough satellite capabilities. \nResponsibilities \nOwn day-to-day detection and response across the corporate environment, from alert triage and investigation through containment and remediation \nAdminister and mature the SIEM, including log source onboarding, parsing and normalization, telemetry enrichment, rule tuning, and platform health, retention, and cost \nWrite, test, and maintain detection content mapped to MITRE ATT&CK using detection-as-code practices, including version control, peer review, and automated testing \nAct as incident commander for corporate security incidents, coordinating stakeholders and delivering timelines, root cause analysis, and post-incident follow-through \nBuild response playbooks and automation across SOAR, scripting, and vendor APIs to reduce time to detect, triage, and contain \nThreat hunt proactively across endpoint, identity, SaaS, and cloud telemetry using threat intelligence and hypotheses about adversary behavior \nRun adversary emulation and purple team exercises to validate detection coverage, then close the gaps you find \nPerform host, network, and cloud forensics across macOS, Windows, and Linux to reconstruct attacker activity and scope impact \nInvestigate phishing, business email compromise, credential abuse, and insider risk in partnership with IT, HR, and Legal \nPartner with IT and infrastructure teams to harden identity, endpoint, and network controls, including conditional access, EDR policy, MDM baselines, segmentation, and secure remote access, informed by what investigations reveal \nTranslate detection and incident findings into vulnerability management priorities and security architecture improvements \nParticipate in an on-call rotation for security escalations, including occasional after-hours and weekend response \nMaintain runbooks, detection documentation, and standard operating procedures, and mentor junior team members on investigation and response tradecraft \nSupport compliance and audit efforts by producing monitoring, detection, and incident response evidence as needed \n\nQualifications \n10+ years of experience in security operations, detection and response, or incident response, preferably in a fast-paced startup or technology environment \nHands-on experience administering and tuning a SIEM (e.g., Splunk, Microsoft Sentinel, Elastic, Panther, or Chronicle), including log source onboarding, parsing, and detection rule development \nDemonstrated experience leading security incidents end to end, from detection and scoping through containment, eradication, and post-incident review \nStrong working knowledge of attacker tactics, techniques, and procedures (TTPs), the MITRE ATT&CK framework, and the evidence sources needed to investigate them \nExperience investigating endpoint, identity, network, and cloud telemetry across macOS, Windows, and Linux, including EDR, identity provider, and SaaS audit logs \n2+ years of development experience with any modern programming language (including but not limited to Python, Go, C++, Rust) used to automate detection, enrichment, and response, in lieu of a degree; OR a bachelor’s degree in security engineering, cyber security, computer science, engineering, math, or other STEM discipline \nKnowledge of operating systems, networking, cloud and SaaS platforms, security best practices, and log analysis at scale \nComfortable working with mission critical and sensitive systems, with a sense of urgency appropriate with responsibilities \nDue to the high visibility of this position, excellent interpersonal skills, attention to detail, and problem-solving skills \nNice to Have \nBachelor’s degree (or equivalent) in computer science or engineering \nDetection and response certifications such as GCIH, GCFA, GCIA, GCDA, or OSCP, or equivalent hands-on experience \nExperience building detection-as-code pipelines, security data lakes, or ETL for security telemetry \nExperience with cloud detection and response in AWS, Azure, or GCP \nExperience with threat intelligence, malware analysis, or reverse engineering \nExperience protecting engineering, manufacturing, OT, or mission and ground segment environments \nPrior experience in a defense, aerospace, or other ITAR-regulated environment \nSecurity community contributions such as tooling, blog posts, conference talks, or CTFs \nCompensation and Benefits: \nBase salary range for this role is $180,000 - $250,000 and equity in the company. \nSalary will be based on several factors including, but not limited to: knowledge and skills, education, and experience level. \nComprehensive benefits package including paid time off, medical/dental/vision coverage, life insurance, paid parental leave, and many other perks. \nIf you don’t meet 100% of the preferred skills and experience, we encourage you to still apply! Building a spacecraft unlike any other requires a team unlike any other and non-traditional career twists and turns are encouraged!\nIf you need a reasonable accommodation as part of your application for employment or interviews with us, please let us know.\nExport Compliance\nAs defined in the ITAR, “U.S. Persons” include U.S. citizens, lawful permanent residents (i.e., Green Card holders), and certain protected individuals (e.g., refugees/asylees, American Samoans). Please consult with a knowledgeable advisor if you are unsure whether you are a “U.S. Person.”\nThe person hired for this role will have access to information and items controlled by U.S. export control regulations, including the export control regulations outlined in the International Traffic in Arms Regulation (ITAR). The person hired for this role must therefore either be a “U.S. person” as defined by 22 C.F.R. § 120.15 or otherwise eligible for a federally issued export control license.\nEqual Opportunity\nK2 Space is an Equal Opportunity Employer; employment with K2 Space is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.","description_format":"text","description_chars":8389,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity","Life insurance","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Satellite Manufacturing"],"lifecycle":[{"event":"open","at":"2026-10-20T01:06:57Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":86,"reasons":["conf:0","velocity","win:early","comp:brand"],"computed_at":"2026-10-21T05:46:15Z"},"pay":{"stated_usd_annual":250000,"is_top_pay":true},"html_url":"https://alion.io/job/k2-space-principal-security-engineer-operations","json_url":"https://alion.io/job/k2-space-principal-security-engineer-operations.json","meta":{"generated_at":"2026-10-22T04:56:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5599,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":171840},"rest":"https://alion.io/mcp/rest/get_company?id=171840"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fk2-space-principal-security-engineer-operations"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fk2-space-principal-security-engineer-operations"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fk2-space-principal-security-engineer-operations"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/k2-space-principal-security-engineer-operations\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fk2-space-principal-security-engineer-operations"}]}