Senior Detection Engineer

Axiom Space is a human space exploration company, building era-defining space infrastructure and delivering technology-driven solutions that will empower civilization to transcend Earth. Beginning with Axiom Station, successor to the International Space Station, the company is pioneering a next-generation orbital settlement that will foster groundbreaking innovation and research in microgravity and drive the global space economy of tomorrow. Today, guided by the vision of leading humanity's expansion off planet, Axiom Space is the principal provider of commercial human spaceflight services and developer of advanced spacesuits for the Moon and beyond.

For more information about Axiom Space, visit  Axiom Space fosters a work environment inclusive of all perspectives. We are the pioneers of commercial space, leading the transformation of low-Earth orbit into a global space marketplace. Our mission-driven team is seeking a bold and dynamic Senior Detection Engineer who is fueled by high accountability, execution horsepower, and driven to understand our world, science/technology, and life itself, for the benefit of all on Earth and beyond.

POSITION SUMMARY Since Axiom Space is a very complex work environment, we are looking for a resilient, high-energy Senior Detection Engineer who is a technical lead responsible for designing, building, and maturing a world-class threat detection program. This role ensures the confidentiality, integrity, and availability of mission-critical data by transforming raw telemetry into high-fidelity, actionable intelligence. You will engineer the eyes of our security operations, utilizing the MITRE ATT&CK framework to identify visibility gaps and deploying automated detection logic to defend against sophisticated actors.

You will be the technical authority on monitoring standards, ensuring all systems from orbital modules to terrestrial networks comply with NIST 800-53/171 and ITAR/EAR export control requirements.

• Detection Engineering:
  Lead the end-to-end detection lifecycle, including requirement gathering, log ingestion, query authoring (KQL/SPL), and continuous tuning of alerts in SIEM/EDR platforms
• Adversary Research:
  Proactively research modern adversary Tactics, Techniques, and Procedures (TTPs) and operationalize that knowledge by mapping coverage to the MITRE ATT&CK framework
• Advanced Telemetry Orchestration:
  Design and maintain complex logging pipelines, ensuring that identity, network, and application telemetry are normalized and searchable for rapid investigation
• Security Automation (SOAR):
  Architect and implement automated response playbooks to enrich alerts, reduce false positives, and accelerate containment of potential threats
• Regulatory Monitoring:
  Develop specialized monitoring logic to enforce ITAR/EAR data fencing and ensure technical alignment with NIST 800-53/171 auditing and monitoring controls
• Purple Teaming & Validation:
  Execute atomic red team simulations and breach and attack exercises to verify detection efficacy and identify defensive blind spots
• Threat Hunting:
  Conduct hypothesis driven hunts to find sophisticated threats that evade traditional signature-based security controls
• Incident Escalation:
  Act as a Tier 3 technical subject matter expert during high severity security incidents, providing deep dive forensic log analysis and root-cause reconstruction
• Detection as Code:
  Maintain detection logic using version control and CI/CD pipelines to ensure scalable, peer reviewed, and repeatable security operations
• Communicating project progress, status, and potential issues to stakeholders and leadership
• Implementing and maintaining agile project management methodologies throughout the project lifecycle
• Perform…