Senior Detection and Response Engineer

About the Company

Northwood is a modern space infrastructure company focused on connecting space and Earth. We are building a global network of phased array ground stations that enable real-time, reliable communication for satellite missions such as national security, global connectivity, and disaster response.

Responsibilities

• Lead incident response and forensics across globally distributed ground stations and cloud infrastructure
• Build and tune custom detection rules for SIEM platforms
• Operate 24/7 security monitoring across AWS, Linux-based systems, and satellite networks
• Proactively hunt threats across space infrastructure and RF communications
• Create incident response playbooks and runbooks for satellite ground stations
• Analyze threat intelligence regarding adversary tactics targeting aerospace and defense
• Develop security automation using Python or PowerShell

Requirements

• 5+ years of hands-on SOC operations, incident response, or threat hunting experience
• Experience with SIEM platforms such as Splunk, Sentinel, or Chronicle
• Digital forensics and malware analysis skills using tools like Volatility or YARA
• Proficiency in Python or PowerShell for security automation
• Experience with endpoint security platforms like CrowdStrike or SentinelOne
• Strong Linux forensics and log analysis skills
• Knowledge of threat intelligence frameworks like MITRE ATT&CK
• Ability to obtain and maintain TS/SCI clearance
• Must meet U.S. export control (ITAR) requirements

Preferred Qualifications

• Experience with cloud security monitoring in AWS or Azure
• Background in aerospace, defense, or critical infrastructure security
• Experience with threat hunting in air-gapped or highly regulated environments
• Knowledge of RF communications or satellite systems
• Certifications such as GCIH, GCFA, or GNFA
• Experience building SOAR workflows