Security Engineer

📋 Job Overview

SimSpace serves as an AI Proving Ground where organizations can confidently train, test, and outmaneuver adversaries in any environment. Trusted by allied governments, militaries, enterprises, and research institutions worldwide, SimSpace enables adaptive, AI-ready defenses that stay ahead of evolving threats. Founded in 2015 by experts from U.S. Cyber Command and MIT Lincoln Laboratory, the platform unifies training, testing, and validation in a realistic, live-fire simulation—helping teams evaluate security investments, optimize performance, and compress cyber readiness cycles from months to days.

🏢 About SimSpace

We are an organization that is focused on building our culture and mindfully enhancing our atmosphere every day which is why we have collaborated on an integral value system. Our governing philosophy of being Human Centered is deeply embedded within our value system. We apply this philosophy to every one of our internal team members, external clients, and their customers.

🎯 The Role

The Security Analyst supports the security team in protecting the organization's information systems, applications, and data. Working under the guidance of the Director of IT Security and senior security operations staff, this role contributes to the daily technical operations of the Security Operations Center (SOC).

✅ Key Responsibilities

• Security Monitoring & Incident Response: Serve as a front-line SOC analyst responsible for monitoring, triaging, investigating, and responding to alerts across endpoint, network, identity, cloud, and other security platforms. Determine scope, severity, and potential impact; take appropriate initial containment actions and escalate complex or high-impact incidents as needed.
• Threat Analysis & Hunting: Analyze security telemetry, logs, endpoint activity, network traffic, and related data sources to identify anomalous behavior, indicators of compromise, and potential threats. Conduct targeted threat-hunting activities based on emerging threats, intelligence, and observed attacker behavior.
• Detection Engineering: Assist with developing, testing, tuning, and maintaining SIEM detection rules, correlation logic, and alerting capabilities to improve detection coverage, reduce false positives, and address emerging attack techniques.
• Security Tool Administration: Support the configuration, integration, maintenance, and operational effectiveness of technologies including SIEM, EDR, IDS/IPS, and related endpoint and network security controls.
• Vulnerability Management: Assist with vulnerability scanning, analysis, prioritization, and remediation tracking across systems, applications, and infrastructure. Partner with technical teams to validate findings and support timely remediation.
• Threat Intelligence: Monitor relevant threat intelligence, vulnerabilities, attacker tactics, techniques, and procedures (TTPs), and emerging security trends. Apply relevant intelligence to investigations, threat hunting, and detection improvements.
• Documentation & Process Improvement: Develop and maintain incident-response procedures, playbooks, runbooks, investigation guides, and lessons learned. Identify opportunities to improve SOC processes, detection capabilities, and response procedures.
• Security Awareness & Testing: Support enterprise cybersecurity awareness programs, including training, phishing simulations, and other awareness-testing campaigns. Analyze results and help identify opportunities to strengthen employee security awareness.

📌 Required Qualifications

• Strong bilingual proficiency in English and Spanish skills required across written, virtual, and in-person interactions
• Education & Experience: Bachelor's degree in Information Technology, Computer Science, or a related field, plus 2-4 years of experience in information security roles.
• Security Fundamentals: Knowledge of information security principles, tools, and technologies, including network security monitoring, incident-response triage, and identity management.
• Threat Frameworks: Understanding of common attacker tactics, techniques, and procedures and frameworks such as MITRE ATT&CK.
• Networking: Working knowledge of TCP/IP, DNS, HTTP/S, firewalls, VPNs, and common network protocols.
• Operating Systems: Experience working with Windows, macOS, and Linux, including command-line interfaces.
• Communication & Collaboration: Ability to communicate complex technical issues clearly to both technical and non-technical stakeholder

⭐ Desirable Experience

🎁 Benefits

🛂 Visa & Eligibility