Security Analyst

SimSpace serves as an AI Proving Ground where organizations can confidently train, test, and outmaneuver adversaries in any environment. Trusted by allied governments, militaries, enterprises, and research institutions worldwide, SimSpace enables adaptive, AI-ready defenses that stay ahead of evolving threats. Founded in 2015 by experts from U.S. Cyber Command and MIT Lincoln Laboratory, the platform unifies training, testing, and validation in a realistic, live-fire simulation—helping teams evaluate security investments, optimize performance, and compress cyber readiness cycles from months to days.

The Security Analyst supports the security team in protecting the organization's information systems, applications, and data. Working under the guidance of the Director of IT Security and senior security operations staff, this role contributes to the daily technical operations of the Security Operations Center (SOC).

The ideal candidate combines a strong foundation in information security with sound analytical judgment, clear communication, and a collaborative approach. This person will monitor and triage security activity, investigate potential threats, improve security operations, and work across infrastructure and business teams to strengthen security practices and adherence to established policies.

What You Will Do

• Security Monitoring & Incident Response: Serve as a front-line SOC analyst responsible for monitoring, triaging, investigating, and responding to alerts across endpoint, network, identity, cloud, and other security platforms. Determine scope, severity, and potential impact; take appropriate initial containment actions and escalate complex or high-impact incidents as needed.

• Threat Analysis & Hunting: Analyze security telemetry, logs, endpoint activity, network traffic, and related data sources to identify anomalous behavior, indicators of compromise, and potential threats. Conduct targeted threat-hunting activities based on emerging threats, intelligence, and observed attacker behavior.

• Detection Engineering: Assist with developing, testing, tuning, and maintaining SIEM detection rules, correlation logic, and alerting capabilities to improve detection coverage, reduce false positives, and address emerging attack techniques.

• Security Tool Administration: Support the configuration, integration, maintenance, and operational effectiveness of technologies including SIEM, EDR, IDS/IPS, and related endpoint and network security controls.

• Vulnerability Management: Assist with vulnerability scanning, analysis, prioritization, and remediation tracking across systems, applications, and infrastructure. Partner with technical teams to validate findings and support timely remediation.

• Threat Intelligence: Monitor relevant threat intelligence, vulnerabilities, attacker tactics, techniques, and procedures (TTPs), and emerging security trends. Apply relevant intelligence to investigations, threat hunting, and detection improvements.

• Documentation & Process Improvement: Develop and maintain incident-response procedures, playbooks, runbooks, investigation guides, and lessons learned. Identify opportunities to improve SOC processes, detection capabilities, and response procedures.

• Security Awareness & Testing: Support enterprise cybersecurity awareness programs, including training, phishing simulations, and other awareness-testing campaigns. Analyze results and help identify opportunities to strengthen employee security awareness.

What You Will Bring

• Strong bilingual proficiency in English and Spanish skills required across written, virtual, and in-person interactions.

• Education & Experience: Bachelor's degree in Information Technology, Computer Science, or a related field, plus 2-4 years of experience in information security roles.

• Security Fundamentals: Knowledge of information security principles, tools, and technologies, including network security monitoring, incident-response triage, and identity management.

• Threat Frameworks: Understanding of common attacker tactics, techniques, and procedures and frameworks such as MITRE ATT&CK.

• Networking: Working knowledge of TCP/IP, DNS, HTTP/S, firewalls, VPNs, and common network protocols.

• Operating Systems: Experience working with Windows, macOS, and Linux, including command-line interfaces.

• Communication & Collaboration: Ability to communicate complex technical issues clearly to both technical and non-technical stakeholders and work effectively across departments.

• Execution & Problem Solving: Strong analytical, time-management, and project-management skills, with the ability to manage multiple priorities, solve complex technical issues, and operate effectively in a fast-paced environment.

• Mindset: A proactive approach, enthusiasm for continuous learning, and willingness to take ownership and contribute across a dynamic, multifaceted team.

Preferred Qualifications

• Certifications: Professional security certifications such as CompTIA Security+, GSEC, Associate of ISC2, or equivalent.

• Security Frameworks: Familiarity with cybersecurity and risk-management frameworks and standards such as NIST Cybersecurity Framework, NIST SP 800-53, ISO/IEC 27001, SOC 2, or similar frameworks.

• Scripting & Automation: Basic scripting or automation experience with Python, PowerShell, Bash, or similar languages.

• AI for Security Operations: Understanding of how AI can improve security monitoring, troubleshooting, investigation, and operational efficiency, including experience creating or managing AI agents.

• Cloud: Experience working with public-cloud environments such as AWS, Azure, or Google Cloud Platform.