Vast is developing next-generation space stations and space infrastructure using an incremental, hardware-rich, and capital-efficient approach. Vast is rapidly developing its multi-module Haven Station to support a continuous human presence in space for America and its allies, enabling advanced microgravity research and manufacturing, and supporting a growing space economy for government, corporate, and private customers. Haven Demo’s 2025 success made Vast the only operational commercial space station company to design, build, and operate its own spacecraft in orbit. Next, Haven-1 is targeted to become the world’s first commercial space station, with launch anticipated in 2027, followed by additional Haven modules. Additionally, the company recently announced two new offerings leveraging its space station components and the heritage of Haven Demo: Vast Satellite, a high-power satellite product line; and Vast Lunar Systems, power, communications, and habitats for the Moon.

Headquartered in Long Beach, California, and with more than 1,000 employees and over a billion dollars in private capital, Vast has built the facilities capable of manufacturing America’s next space station. The company plans to develop future habitats and systems for Mars, dedicated modules for government partners, and other crewed systems designed to unlock the expanding long-term space economy.

Vast is seeking an Information Security Analyst to join the Information Security team and report to the Information Security Manager. You will own day-to-day triage, investigation, and response for security alerts across the organization, and help build our security monitoring and detection capabilities. Your work will span alerts from insider risk, EDR, SIEM, DLP, and other detection sources. The role supports both corporate and mission environments.

This will be a full-time, exempt position located in our Long Beach location.

Responsibilities

Monitor and triage alerts from security tooling across corporate and mission environments
Investigate suspicious activity, determine scope and impact, and contain or escalate incidents according to the incident response process
Document incidents, and contribute to post-incident reviews and updates to response procedures
Tune detection rules and reduce false positives across monitoring tools
Develop playbooks and automate repetitive triage steps to speed up response
Carry out vulnerability and exposure checks, and coordinate remediation with system owners
Work with engineering, IT, and mission teams on security implementations and alert follow-ups

Minimum Qualifications

1+ years of hands-on experience in security monitoring, incident response, or a related role
Equivalent internship, lab, or academic project experience will be considered
Experience monitoring and responding to security events on Windows, macOS, and Linux
endpoints
Familiarity tuning security alerts to improve fidelity and reduce false positives
Solid working knowledge of cloud and on prem auditing and alerting
Proficiency in scripting and automation with PowerShell, Bash, or Python
Knowledge of network protocols, firewalls, and intrusion detection and prevention systems
(IDS/IPS)

Preferred Skills & Experience

Interest in mentorship and a willingness to learn incident handling procedures and security best practices from senior team members
Familiarity with adversary tactics and approaches to detecting attacker activity
Exposure to social engineering awareness or testing efforts
Exposure to supporting security audits or assessments
Comfort working in a fast-paced environment

Additional Requirements

Ability to travel up to 10% of the time
Willingness to work overtime, or weekends to support critical mission milestones
Ability to lift up to 25lbs unassisted
Specific certifications, as appropriate

Pay Range: California

$90,000—$158,000 USD

We calibrate level and compensation to the selected candidate's experience and demonstrated capability. We welcome applicants across a range of experience levels to apply.