Security Engineer
SimSpace Corporation2 months ago
Remote, Costa RicaMid Level
Responsibilities
- Monitor, triage, investigate, and respond to security alerts across endpoint, network, identity, cloud, and other security platforms.
- Analyze telemetry, logs, endpoint activity, and network traffic to identify anomalous behavior, indicators of compromise, and threats.
- Conduct targeted threat hunting based on threat intelligence, emerging threats, and attacker behavior.
- Develop, test, tune, and maintain SIEM detection rules, correlation logic, and alerting capabilities.
- Configure, integrate, maintain, and improve SIEM, EDR, IDS/IPS, endpoint, and network security controls.
- Support vulnerability scanning, analysis, prioritization, remediation tracking, and finding validation.
- Monitor threat intelligence, vulnerabilities, attacker tactics, techniques, procedures, and emerging security trends.
- Create and maintain incident-response procedures, playbooks, runbooks, investigation guides, and lessons learned.
- Support cybersecurity awareness training, phishing simulations, and awareness-testing campaigns.
Requirements
- Strong bilingual proficiency in English and Spanish for written, virtual, and in-person interactions.
- Bachelor’s degree in information technology, computer science, or a related field.
- 2–4 years of experience in information security roles.
- Knowledge of information security principles, network security monitoring, incident-response triage, and identity management.
- Understanding of attacker tactics, techniques, procedures, and frameworks such as MITRE ATT&CK.
- Working knowledge of TCP/IP, DNS, HTTP/S, firewalls, VPNs, and common network protocols.
- Experience working with Windows, macOS, and Linux, including command-line interfaces.
- Ability to communicate complex technical issues to technical and non-technical stakeholders.
- Strong analytical, time-management, project-management, prioritization, and problem-solving skills.
- Preferred security certifications include CompTIA Security+, GSEC, Associate of ISC2, or equivalent.
- Familiarity with NIST Cybersecurity Framework, NIST SP 800-53, ISO/IEC 27001, SOC 2, or similar frameworks.
- Basic scripting or automation experience with Python, PowerShell, Bash, or similar languages.
- Understanding of AI for security operations, including experience creating or managing AI agents.
- Experience with public-cloud environments such as AWS, Azure, or Google Cloud Platform.
Benefits
- Comprehensive medical, dental, and vision benefits.
- Company-paid counseling, coaching, and family resources through Spring Health.
- Paid parental leave.
- Equity stock options at hire and annual performance-based grants.
- LinkedIn Learning membership for professional development.
- Monthly reimbursements for meaningful teammate connections through the SocialSpace Community.
- The company supports both remote and office-based collaboration.
- Employment in the United States requires identity and work-authorization verification.
About SimSpace Corporation
SimSpace builds cyber ranges and a live-fire simulation platform used by governments, militaries, and large enterprises to train cyber teams, validate defenses, and test AI agents. The company sells software and expert services for training, threat emulation, and technology evaluation in replicas of production environments. Founded in 2015 by veterans of U.S. Cyber Command and MIT Lincoln Laboratory, SimSpace is privately held and headquartered in Orlando, Florida.