Insider Threat Analyst

About the role

SpaceX is looking for an analytical and self-directed professional who can thrive in a demanding, fast-moving technical setting. The mission of the team is to protect highly sensitive technologies and operations that support rockets, Dragon human transport missions, interplanetary transportation systems, and the world’s largest satellite communications network. Because the company is seen as a target by both foreign and domestic adversaries, this position plays an important role in defending proprietary information and enabling SpaceX’s long-term goal of advancing human life beyond Earth.

In this position, you will research, evaluate, produce, and share intelligence that helps safeguard personnel, brand reputation, global assets, intellectual property, and company operations. You will review anomalous event data, work with insider-risk datasets, identify threat signals, and combine information from multiple sources using a strong understanding of collection methods and platforms.

Key responsibilities

• Perform detailed investigations and analysis that support security and intellectual property protection efforts.
• Apply high standards of investigative and analytical practice, including confidentiality, objectivity, legality, timeliness, and full use of available information.
• Review program data to assess insider-risk exposure across infrastructure, programs, and operations.
• Examine unusual event data for signs of data theft, destruction, or other concerning activity.
• Work on internal cases with Information Security, HR, Legal, Government Security, Physical Security, and outside partners using both internal and external inputs.
• Use monitoring and analytics tools such as DLP, SIEM, and UEBA platforms to detect abnormal behavior, begin investigations, and identify patterns.
• Organize insider-threat data into metrics, reports, and case studies aligned with business needs and deadlines.
• Present findings clearly and promptly to colleagues, leadership, and other relevant stakeholders.
• Assist with employee training sessions and briefings for internal and external audiences.
• Coordinate with industry and government contacts to benchmark the insider-threat program, exchange threat intelligence, and support investigations.
• Continuously look for ways to improve the program and help put those improvements into practice.
• Protect sensitive material such as case records, employee personal data, and intelligence reports.

Required qualifications

• Bachelor’s degree plus at least 2 years of professional experience in internal investigations, information security, or IT.
• In place of a degree, at least 4 years of professional experience in internal investigations, information security, counterintelligence, or IT.
• Ability to handle sensitive work with discretion and confidentiality.
• Strong organizational habits and close attention to detail.
• Clear written and verbal communication skills, including the ability to produce concise reports.
• Comfort working independently and collaboratively in a high-pressure environment.
• Willingness to adapt quickly to changing priorities, deadlines, tools, and workflows.
• Ability to conduct interviews quickly when needed, following internal procedures.

Preferred experience

• At least 1 year of experience using a SIEM tool such as Splunk, Panther, or Exabeam, or carrying out digital forensic investigations in a government or corporate setting.
• Practical understanding of insider-threat program goals, stakeholders, and common warning signs.
• Experience with Microsoft Purview for eDiscovery.
• Knowledge of continuous assessment methods and detection tuning for insider-risk programs.
• Background in preliminary assessments, investigation scoping, planning, evidence handling, interviewing, and presenting findings to internal and external stakeholders.

Additional requirements

• Availability to work extended hours and weekends when critical work requires it.
• Willingness to travel occasionally on an ad hoc basis.
• Active TS/SCI clearance, or the ability to obtain one.
• If you hold an active clearance, you will also be subject to pre-employment screening, including a background check and drug/alcohol test, along with random drug and alcohol testing during employment.

Compensation and benefits

The pay range for this role depends on level:

• Investigations Analyst / Level I: $85,000 to $100,000 per year.
• Investigations Analyst / Level II: $95,000 to $120,000 per year.

Final leveling and base pay are determined individually and may vary based on job-related knowledge, skills, education, and experience.

In addition to base salary, the total rewards package may include long-term incentives such as company stock, stock options, or long-term cash awards, as well as possible discretionary bonuses and an Employee Stock Purchase Plan with the option to buy additional stock at a discount. Benefits may also include medical, vision, and dental coverage; a 401(k) retirement plan; short- and long-term disability insurance; life insurance; paid parental leave; and access to additional discounts and perks. Employees may accrue 3 weeks of paid vacation, receive 10 or more paid holidays each year, and earn paid sick leave in line with company policy and applicable law.

ITAR and work authorization

• To comply with U.S. export regulations, applicants must be a U.S. citizen or national, a U.S. lawful permanent resident (green card holder), a refugee under 8 U.S.C. 1157, an asylee under 8 U.S.C. 1158, or otherwise eligible to obtain the required authorization from the U.S. Department of State.

Equal opportunity

SpaceX hires based on merit, competence, and qualifications. Employment decisions are made without regard to protected characteristics such as race, color, religion, gender, national origin or ethnicity, veteran status, disability, age, sexual orientation, gender identity, marital status, or any other legally protected status.

Candidates who want a copy of the company’s affirmative action plan for veterans and individuals with disabilities, or who need reasonable accommodation during the application or interview process, should contact the company directly.