[Hiring] Security Engineer @SimSpace Corporation

Role Description

The Security Analyst supports the security team in protecting the organization's information systems, applications, and data. Working under the guidance of the Director of IT Security and senior security operations staff, this role contributes to the daily technical operations of the Security Operations Center (SOC).

The ideal candidate combines a strong foundation in information security with sound analytical judgment, clear communication, and a collaborative approach. This person will monitor and triage security activity, investigate potential threats, improve security operations, and work across infrastructure and business teams to strengthen security practices and adherence to established policies.

What You Will Do

• Security Monitoring & Incident Response: Serve as a front-line SOC analyst responsible for monitoring, triaging, investigating, and responding to alerts across endpoint, network, identity, cloud, and other security platforms. Determine scope, severity, and potential impact; take appropriate initial containment actions and escalate complex or high-impact incidents as needed.
• Threat Analysis & Hunting: Analyze security telemetry, logs, endpoint activity, network traffic, and related data sources to identify anomalous behavior, indicators of compromise, and potential threats. Conduct targeted threat-hunting activities based on emerging threats, intelligence, and observed attacker behavior.
• Detection Engineering: Assist with developing, testing, tuning, and maintaining SIEM detection rules, correlation logic, and alerting capabilities to improve detection coverage, reduce false positives, and address emerging attack techniques.
• Security Tool Administration: Support the configuration, integration, maintenance, and operational effectiveness of technologies including SIEM, EDR, IDS/IPS, and related endpoint and network security controls.
• Vulnerability Management: Assist with vulnerability scanning, analysis, prioritization, and remediation tracking across systems, applications, and infrastructure. Partner with technical teams to validate findings and support timely remediation.
• Threat Intelligence: Monitor relevant threat intelligence, vulnerabilities, attacker tactics, techniques, and procedures (TTPs), and emerging security trends. Apply relevant intelligence to investigations, threat hunting, and detection improvements.
• Documentation & Process Improvement: Develop and maintain incident-response procedures, playbooks, runbooks, investigation guides, and lessons learned. Identify opportunities to improve SOC processes, detection capabilities, and response procedures.
• Security Awareness & Testing: Support enterprise cybersecurity awareness programs, including training, phishing simulations, and other awareness-testing campaigns. Analyze results and help identify opportunities to strengthen employee security awareness.

Qualifications

• Strong bilingual proficiency in English and Spanish skills required across written, virtual, and in-person interactions.
• Bachelor's degree in Information Technology, Computer Science, or a related field, plus 2-4 years of experience in information security roles.
• Knowledge of information security principles, tools, and technologies, including network security monitoring, incident-response triage, and identity management.
• Understanding of common attacker tactics, techniques, and procedures and frameworks such as MITRE ATT&CK.
• Working knowledge of TCP/IP, DNS, HTTP/S, firewalls, VPNs, and common network protocols.
• Experience working with Windows, macOS, and Linux, including command-line interfaces.
• Ability to communicate complex technical issues clearly to both technical and non-technical stakeholders and work effectively across departments.
• Strong analytical, time-management, and project-management skills, with the ability to manage multiple priorities, solve complex technical issues, and operate effectively in a fast-paced environment.
• A proactive approach, enthusiasm for continuous learning, and willingness to take ownership and contribute across a dynamic, multifaceted team.

Preferred Qualifications

• Professional security certifications such as CompTIA Security+, GSEC, Associate of ISC2, or equivalent.
• Familiarity with cybersecurity and risk-management frameworks and standards such as NIST Cybersecurity Framework, NIST SP 800-53, ISO/IEC 27001, SOC 2, or similar frameworks.
• Basic scripting or automation experience with Python, PowerShell, Bash, or similar languages.
• Understanding of how AI can improve security monitoring, troubleshooting, investigation, and operational efficiency, including experience creating or managing AI agents.
• Experience working with public-cloud environments such as AWS, Azure, or Google Cloud Platform.

Benefits

• Comprehensive medical, dental, and vision benefits.
• Access to company-paid counseling, coaching, and resources for you and your family through Spring Health.
• Paid leave plans to support you and your loved ones during life’s most important moments.
• Equity stock options at hire, with annual performance-based grants—become an invested stakeholder in our shared success.
• Access a LinkedIn Learning membership to prioritize your personal and professional development.
• Monthly reimbursements for meaningful connections with teammates through our SocialSpace Community.