layiq

/la·yiq/adjective

worthy; deserving; fitting; suitable.

A role, opportunity, or path that merits attention, time, and pursuit.

Cyber Defense Analyst at Blue Origin | LAYIQ

Monitor and triage. Work security events and alerts across SIEM, EDR, network sensors, and audit logs. Determine what's noise, what's misconfiguration, and what warrants escalation.
Investigate. Pull the threads — pivot across host, network, and identity data to build a picture of what actually happened, and document it clearly.
Respond. Serve as first responder during incidents. Execute containment steps per playbook, preserve evidence, build timelines, and support senior engineers leading the response.
Hunt. Participate in structured hunts, initially alongside senior team members and increasingly on your own hypotheses as you learn what "normal" looks like here.
Support audit and insider threat review. Perform privileged user activity monitoring and audit log review in partnership with Security and Counterintelligence.
Stand watch during mission events. Provide heightened monitoring coverage during launches, mission operations, and other critical windows.
Get hands on the tooling. Assist with sensor deployment, log source onboarding, and agent rollout across enclaves under engineering direction.
Tune and improve detections. Reduce false positives, validate rule coverage, and propose new detections based on what you find in the data.
Improve the playbooks. Execute response procedures and flag every gap you hit — you'll be the first to find them, and your input drives the rewrites.
Automate what you repeat. Script recurring triage, enrichment, and reporting tasks. We'll help you build this skill if you don't have it yet.
Required Qualifications
Entry level hands-on experience in security operations, incident response, IT operations, or system administration or equivalent military/government cyber experience
Working knowledge of network protocols and Windows and Linux fundamentals
Familiarity with SIEM and EDR concepts and the ability to investigate events using them
Understanding of common attack techniques and exposure to the MITRE ATT&CK framework
Clear, concise written communication — your investigation notes will be read by senior staff and government customers
Genuine curiosity and the instinct to keep pulling on a thread when something doesn't add up
Active U.S. Government Top Secret clearance with SCI eligibility and eligibility for SAP access determination
DoD 8140 CSSP Analyst or IAT Level II certification (Security+ CE or equivalent) at hire or within [6] months
A degree is not required. Equivalent military, government, or hands-on technical experience is fully accepted.

Benefits

Benefits include: Medical, dental, vision, basic and supplemental life insurance, paid parental leave, short and long-term disability, 401(k) with a company match of up to 5%, and an Education Support Program.
Stock Options for all regular employees (working at least 20 hours/week)
Paid Time Off: Up to four (4) weeks per year based on weekly scheduled hours, and up to 14 company-paid holidays.
Dependent on role type and job level, employees may be eligible for benefits and bonuses based on the company's intent to reward individual contributions and enable them to share in the company's results, or other factors at the company's sole discretion. Bonus amounts and eligibility are not guaranteed and subject to change and cancellation. Please check with your recruiter for more details.
Equal Employment Opportunity
Blue Origin is proud to be an Equal Opportunity/Affirmative Action Employer and is committed to attracting, retaining, and developing a highly qualified and dedicated work force. Blue Origin hires and promotes people on the basis of their qualifications, performance, and abilities. We support the establishment and maintenance of a workplace that fosters trust, equality, and teamwork. We provide all qualified applicants for employment and employees with equal opportunities for hire, promotion, and other terms and conditions of employment, regardless of their race, color, religion, sex, sexual orientation, gender identity, national origin/ethnicity, age, physical or mental disability, genetic factors, military/veteran status, or any other status or characteristic protected by federal, state, and/or local law. Blue Origin will consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state, and local laws, including the Washington Fair Chance Act, the California Fair Chance Act, the Los Angeles Fair Chance in Hiring Ordinance, and other applicable laws. For more information on “Know Your Rights,” please see here .
Affirmative Action and Disability Accommodation
Applicants wishing to receive information on Blue Origin’s Affirmative Action Plans, or applicants requiring a reasonable accommodation in order to participate in the application and/or interview process, please contact us at EEOCompliance@blueorigin.com . Please note this is a publicly managed inbox. Please do not include any personal medical information in your request.

Cyber Defense Analyst

Employer job description

Application close date:

What You'll Do

Preferred Qualifications

Logistics

Benefits

About this listing