Senior Security Research Engineer

Who is SimSpace:

SimSpace launched in 2015 with a singular purpose – addressing the most urgent and sophisticated cybersecurity challenges to reduce risk for our most vulnerable and valuable infrastructure. The organizations around the world that we depend on every day to keep our loved ones safe and secure. Our healthcare facilities, schools, financial institutions, transit centers, grocery stores, and workplaces just to name a few. To deliver global resiliency, we provide an elite cyber range platform to curate unassailable cyber defenses, data driven decisions, cutting edge training labs, live attack scenarios, and extensive individual and dynamic team readiness training. 

SimSpace works as OneTeam to elevate humanity around the world. We are committed to continuously improving and delivering a cultivated member experience whether that is accomplished through focusing on supporting our client’s teams or our own mission driven SimSpacers. 

We are an international company headquartered in Boston's Fort Point in the U.S. If you are interested in elevating the technology and creative solutions necessary to secure and safeguard our future while working alongside others who share your passion for purpose and development, we want to meet you!

Why should you choose a career at SimSpace?

We are an organization that is focused on building our culture and mindfully enhancing our atmosphere everyday which is why we have collaborated on an integral value system. Our governing philosophy of being Human Centered is deeply embedded within our value system. We apply this philosophy to every one of our internal team members, external clients, and their customers.

Our core values:

• Serve to Protect – We provide safe space, deliver on the mission, and elevate humanity
• Acquire Understanding – We seek and provide clarity 10x, cultivate comprehension, and believe information goes both all ways
• Operate as Innovators – We stay curious, practice consistency over intensity, and continue to be the change we need in the world
• Teamwork Without Borders – We are never alone, we solve for all, and keep people at the heart of everything we do

• Develop educational curriculum that encompasses a range of foundational to advanced red team/offensive tactics and/or blue team DFIR/investigative strategies specific to cloud (Azure, AWS, or GCP) technologies.
• Create learning materials in the form of functional exercises, written lessons, simulated attack scenarios, and assessments.
• Architect cyber range scenarios that include adversarial tactics, techniques, and procedures (TTPs), advanced detection and investigative strategies.
• Install and baseline security monitoring, detection, and response technologies in enterprise-scaled cyber ranges.
• Stay abreast of the latest in offensive strategies and cybersecurity defenses, technologies, methodologies, policy, and breaches.
• Assess the cloud cybersecurity knowledge, skills and abilities of individuals and teams.

• You should be proficient in general cloud computing and security concepts.
• In-depth understanding of Azure or AWS. Knowledge of both is a big plus. Experience with GCP is not required but may be used as a differentiator.
• For Azure, experience with conditional access policies, Defender for Cloud, network security groups, and Azure Firewall.
• And for AWS, experience with IAM, VPC security, Security Groups, NACLs, Config, CloudTrail, and WAF.
• Solid knowledge of tactics and techniques used during offensive cloud-based operations and the ability to modify them to subvert defensive countermeasures.
• A clear understanding of the current state-of-the-art security practices and research in computer and network, including: exploit mitigation, countermeasures, detection, forensic, auditing, and other defensive tools.
• Experience developing written training material, hands-on labs, and assessments for technical audiences.
• Experience collaborating with e-learning specialists or working in environments that leverage interactive training solutions.
• Complete understanding of adversary kill-chain and exploitation scenarios.
• Basic knowledge of one or more scripting languages such as PowerShell, Bash, or Python.
• Experience in various tech areas. These include dealing with incidents, checking for vulnerabilities, handling risks, protecting information, scripting, threat analysis, digital evidence investigation, malware inspection, and network or computer monitoring.
• Desire to learn, fostering a growth mindset, and sharing knowledge to others on the team.
• U.S. citizenship as required by our U.S. Government contracts.

SimSpace is an Equal Opportunity Employer:

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire. 

SimSpace does not and shall not discriminate based on race, color, religion (creed), gender, gender expression and identity, age, national origin (ancestry), disability, marital status, sexual orientation, or military/veteran status, in any of its activities or operations. We are committed to providing an inclusive and welcoming environment for all members of our staff, clients, volunteers, subcontractors, vendors, and clients.

Research shows that women and people from underrepresented groups only apply to jobs if they meet all of the qualifications. However, no one ever meets 100% of the qualifications. SimSpace encourages you to break that statistic and to apply. We look forward to your application!

We also consider qualified applicants regardless of criminal histories, in accordance with applicable law. We are committed to providing reasonable accommodations for qualified individuals with disabilities in our job application procedures. If you need assistance or accommodation due to a disability, please contact careers@simspace.com.

SimSpace does not accept unsolicited resumes from employment agencies.

Actual compensation for the position is based on a variety of factors, including, but not limited to affordability, skills, qualifications and experience, and may vary from the range.