Security Research Engineer 2 - Remote

We are looking for:

A Security Research Engineer / Content Developer at SimSpace, who will design, develop and execute network intrusions on live ranges using real-world adversary tactics coupled with modern security defense and investigative strategies. You will join a team of experienced offensive operators and strategic defenders to develop world-class skills assessments and training, critical in shaping information security professionals of tomorrow. As a Security Research Engineer, you will author challenges and training modules to assess and develop foundational to advanced skill levels, providing customers hands-on opportunities to train like they fight, refining their competencies at effectively defending their networks from advanced cyber threats

What will you be doing as a Security Research Engineer at SimSpace?

• Architect cyber range scenarios that include adversarial tactics, techniques, and procedures (TTPs) and advanced detection and investigative strategies.
• Develop educational curriculum that encompasses a range of foundational to advanced red team/offensive tactics and/or blue team EDR/investigative strategies.
• Create learning materials in the form of briefings, white papers, practical exercises, and games.
• Work with our range-operations and DevOps teams to develop toolsets and scenarios within a cybersecurity range to model real-world threat offense or defense scenarios.
• Install and baseline security monitoring, detection, and response technologies in enterprise-scaled cyber ranges.
• Assess the skills and level of cyber defense of individuals and teams.
• Stay abreast of the latest in offensive strategies and cybersecurity defenses, technologies, methodologies, policy, and breaches.

What are the qualifications to apply? To be successful as a Security Research Engineer, you need to have:

• Reverse Engineering
• Ability to develop and present your own course materials based on your assessment of participant needs.
• Complete understanding of adversary kill-chain and exploitation scenarios.
• Network Forensics
• U.S. citizenship as required by our existing U.S. Government contracts.
• Incident Response
• Red Teaming or Penetration Testing
• Can build and operate one's own defensive toolsets.
• Windows Domain Security
• Linux Security
• Experience in multiple technical areas to include incident response, vulnerability assessment, risk management, information assurance, scripting, cyber intelligence, forensics, malware analysis, network and/or host-based monitoring.
• Experience with the commonly used attack frameworks (Cobalt Strike, Metasploit, CANVAS, Empire, Core Impact, etc.).
• Basic understanding of one or more scripting languages such as PowerShell, Bash, and Python.
• Host Forensics
• Experience as a practitioner of cyber red-blue exercise concepts as a learning technique.
• A clear understanding of the current state-of-the-art in computer and network security practices and research, to include exploit mitigation, countermeasures, detection, forensic, auditing, and other defensive tools.
• Solid understanding of tactics and techniques used during offensive network operations and the ability to modify them to subvert defensive countermeasures.
• Broad knowledge of standard cyber defense tools and offensive cyber techniques, along with deep specialization knowledge in at least one of the following domains:
  • Windows Domain Security
  • Application Security
  • Host Forensics
  • Linux Security
  • Network Forensics
  • Threat Hunting
  • Incident Response
  • Malware Analysis and Triage
  • Red Teaming or Penetration Testing
  • Reverse Engineering
• Malware Analysis and Triage
• Desire to learn, fostering a growth mindset, and sharing knowledge to others on the team.
• Application Security
• Threat Hunting

We also provide the following:

• Semi-flexible hours, with the expectation that you overlap the main part of the day to meet deadlines, collaborate with colleagues and attend key meetings.
• Salary Range $90,000-$135,000
• Benefits that start on first day of hire (medical, dental, company-paid vision, savings and spending accounts, Employee Assistance Program, company-paid Life and AD&D Insurance)
• Unlimited paid time off
• Equity options at hire and potential for additional based on performance
• Peloton Interactive Wellness Program
• 401k with immediate vesting
• Generous employee referral bonus program