Security Operations Center; SOC) Analyst

Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge.

For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles.

Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more.

We’d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet.

Apex is looking for a SOC Analyst to monitor, investigate, and respond to security activity across endpoints, identity, cloud services, networks, and mission-support environments. You will spend most of your time working directly with alerts, logs, vulnerabilities, and investigations to determine what happened and what needs to happen next.

• Monitor and triage security alerts from Crowd Strike, Elastic SIEM, Microsoft Identity, AWS, and Palo Alto.
• Investigate suspicious logins, phishing emails, privilege changes, and unusual network events.
• Escalate incidents based on affected systems, severity, and CUI impact.
• Work with IT, Cybersecurity, and Network teams on security findings involving our systems and infrastructure.
• Document incidents, required resolutions, and potentially affected assets.
• Maintain recurring logging reviews and incident response documentation with the IT team; collect evidence to support vulnerability management and compliance reporting.

• Active TS/SCI clearance required at time of hire.
• US Citizenship required.
• 2 or more years of experience in a SOC, incident response, threat detection, endpoint security, vulnerability management, or another hands-on cybersecurity operations role.
• Experience investigating events using EDR, SIEM, identity, cloud, or network telemetry.
• Working knowledge of Windows and Linux, authentication, endpoint behavior, networking fundamentals, common attacker techniques, and cloud logging.
• Ability to write useful search queries and filters in a SIEM or log-analysis platform and document investigations so another analyst can continue the work.
• Understanding of incident triage, scoping, containment, evidence preservation, escalation, vulnerability prioritization, and post-incident remediation.

• Experience with Crowd Strike Falcon, Palo Alto, Tenable, Elastic Security, Microsoft GCC High, Entra , AWS security telemetry, or similar tools.
• Experience with detection engineering, threat hunting, MITRE ATT&CK, or scripting in Python, Power Shell, or Bash.
• Security+, CySA+, GCIH, GCIA, or a comparable security operations certification.
• Experience supporting aerospace, defense, national security, ATO, RMF, or other regulated technical environments.

Apex believes in creating a work environment that you look forward to embracing every day. Our employees love working at Apex, and we want you to love it too. We're a fast-growing startup that has raised more than $500M in funding, and we invest heavily in our people from day one.

• Shared upside: Receive equity in Apex, letting you benefit from the work you create
• Best-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost
• Comprehensive PTO package to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10…