Security Engineer

SimSpace serves as an AI Proving Ground where organizations can confidently train, test, and outmaneuver adversaries in any environment. Trusted by allied governments, militaries, enterprises, and research institutions worldwide, SimSpace enables adaptive, AI-ready defenses that stay ahead of evolving threats. Founded in 2015 by experts from U.S. Cyber Command and MIT Lincoln Laboratory, the platform unifies training, testing, and validation in a realistic, live-fire simulation—helping teams evaluate security investments, optimize performance, and compress cyber readiness cycles from months to days. Why join SimSpace? We are an organization that is focused on building our culture and mindfully enhancing our atmosphere every day which is why we have collaborated on an integral value system. Our governing philosophy of being Human Centered is deeply embedded within our value system. We apply this philosophy to every one of our internal team members, external clients, and their customers. How Do We Work? We believe that people are at the center of everything we do. SimSpace fosters a culture of continuous learning, curiosity, and professional growth. That belief shows up in action: in-house training, internal and external learning platforms, cyber conferences, industry events, and dedicated time for skill development. Our people are empowered to shape their careers - and it shows. Year over year, SimSpace consistently outperforms industry benchmarks in internal mobility, promotions, and total rewards growth. Who Thrives Here? We are a team of innovators, protectors, and problem-solvers. We believe diversity of thought and experience fuels better solutions, and we’re committed to building teams that reflect the communities we serve. Whether you’re remote or office-based, you’ll collaborate with talented colleagues across departments and time zones, united by the mission to create a safer digital world. We invite you to apply today! The Security Analyst supports the security team in protecting the organization's information systems, applications, and data. Working under the guidance of the Director of IT Security and senior security operations staff, this role contributes to the daily technical operations of the Security Operations Center (SOC). The ideal candidate combines a strong foundation in information security with sound analytical judgment, clear communication, and a collaborative approach. This person will monitor and triage security activity, investigate potential threats, improve security operations, and work across infrastructure and business teams to strengthen security practices and adherence to established policies. What You Will Do • Security Monitoring & Incident Response: Serve as a front-line SOC analyst responsible for monitoring, triaging, investigating, and responding to alerts across endpoint, network, identity, cloud, and other security platforms. Determine scope, severity, and potential impact; take appropriate initial containment actions and escalate complex or high-impact incidents as needed. • Threat Analysis & Hunting: Analyze security telemetry, logs, endpoint activity, network traffic, and related data sources to identify anomalous behavior, indicators of compromise, and potential threats. Conduct targeted threat-hunting activities based on emerging threats, intelligence, and observed attacker behavior. • Detection Engineering: Assist with developing, testing, tuning, and maintaining SIEM detection rules, correlation logic, and alerting capabilities to improve detection coverage, reduce false positives, and address emerging attack techniques. • Security Tool Administration: Support the configuration, integration, maintenance, and operational effectiveness of technologies including SIEM, EDR, IDS/IPS, and related endpoint and network security controls. • Vulnerability Management: Assist with vulnerability scanning, analysis, prioritization, and remediation tracking across systems, applications, and infrastructure. Partner with technical teams to validate findings and support timely remediation. • Threat Intelligence: Monitor relevant threat intelligence, vulnerabilities, attacker tactics, techniques, and procedures (TTPs), and emerging security trends. Apply relevant intelligence to investigations, threat hunting, and detection improvements. • Documentation & Process Improvement: Develop and maintain incident-response procedures, playbooks, runbooks, investigation guides, and lessons learned. Identify opportunities to improve SOC processes, detection capabilities, and response procedures. • Security Awareness & Testing: Support enterprise cybersecurity awareness programs, including training, phishing simulations, and other awareness-testing campaigns. Analyze results and help identify opportunities to strengthen employee security awareness. What You Will Bring Strong bilingual proficiency in English and Spanish skills required across written, virtual, and in-person interactions Education & Experience: Bachelor's degree in Information Technology, Computer Science, or a related field, plus 2-4 years of experience in information security roles. Security Fundamentals: Knowledge of information security principles, tools, and technologies, including network security monitoring, incident-response triage, and identity management. Threat Frameworks: Understanding of common attacker tactics, techniques, and procedures and frameworks such as MITRE ATT&CK. Networking: Working knowledge of TCP/IP, DNS, HTTP/S, firewalls, VPNs, and common network protocols. Operating Systems: Experience working with Windows, macOS, and Linux, including command-line interfaces. Communication & Collaboration: Ability to communicate complex technical issues clearly to both technical and non-technical stakeholders and work effectively across departments. Execution & Problem Solving: Strong analytical, time-management, and project-management skills, with the ability to manage multiple priorities, solve complex technical issues, and operate effectively in a fast-paced environment. Mindset: A proactive approach, enthusiasm for continuous learning, and willingness to take ownership and contribute across a dynamic, multifaceted team. Preferred Qualifications • Certifications: Professional security certifications such as CompTIA Security+, GSEC, Associate of ISC2, or equivalent. • Security Frameworks: Familiarity with cybersecurity and risk-management frameworks and standards such as NIST Cybersecurity Framework, NIST SP 800-53, ISO/IEC 27001, SOC 2, or similar frameworks. • Scripting & Automation: Basic scripting or automation experience with Python, PowerShell, Bash, or similar languages. • AI for Security Operations: Understanding of how AI can improve security monitoring, troubleshooting, investigation, and operational efficiency, including experience creating or managing AI agents. • Cloud: Experience working with public-cloud environments such as AWS, Azure, or Google Cloud Platform. We’re proud to offer a competitive and comprehensive package designed to support your well-being, growth, and success: Health & Wellness. Comprehensive medical, dental, and vision benefits. Mental Health Support. Access to company-paid counseling, coaching, and resources for you and your family through Spring Health. Parental Leave. Paid leave plans to support you and your loved ones during life’s most important moments. Ownership Opportunities. Equity stock options at hire, with annual performance-based grants—become an invested stakeholder in our shared success. Continuous Learning. Access a LinkedIn Learning membership to prioritize your personal and professional development. Social Connections: Monthly reimbursements for meaningful connections with teammates through our SocialSpace Community. SimSpace is an Equal Opportunity Employer: In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire. SimSpace is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws. We are committed to providing an inclusive and welcoming environment for all members of our staff, clients, volunteers, subcontractors, vendors, and clients. Research shows that women and people from underrepresented groups only apply to jobs if they meet all of the qualifications. However, no one ever meets 100% of the qualifications. SimSpace encourages you to break that statistic and to apply. We look forward to your application! We also consider qualified applicants regardless of criminal histories, in accordance with applicable law. We are committed to providing reasonable accommodations for qualified individuals with disabilities in our job application procedures. If you need assistance or accommodation due to a disability, please contact careers@simspace.com . SimSpace does not accept unsolicited resumes from employment agencies. Actual compensation for the position is based on a variety of factors, including, but not limited to affordability, skills, qualifications and experience, and may vary from the range.