Senior AI-Centric Threat Hunter

SimSpace serves as an AI Proving Ground where organizations can confidently train, test, and outmaneuver adversaries in any environment. Trusted by allied governments, militaries, enterprises, and research institutions worldwide, SimSpace enables adaptive, AI-ready defenses that stay ahead of evolving threats. Founded in 2015 by experts from U.S. Cyber Command and MIT Lincoln Laboratory, the platform unifies training, testing, and validation in a realistic, live-fire simulation—helping teams evaluate security investments, optimize performance, and compress cyber readiness cycles from months to days.

We are looking for a Senior AI-Centric Threat Hunter to support mentorship and assessment of global security teams in basic to advanced cybersecurity skill areas. The ideal candidate has a strong technical background, is enthusiastic, is good at problem-solving, has a strong desire to learn, prefers to be hands-on technically, and constantly strives for excellence.

The Senior AI-Centric Threat Hunter will be part of a team developing methodologies of incorporating AI agents into cybersecurity workflows, designing experiments to help develop/test AI agents and models, delivering instructional content to customers, and facilitating a variety of Blue Team exercises for SimSpace and our customers. When facilitating exercises, you will be responsible for teaching security concepts, demonstrating practical/hands-on use of open-source and commercial security tools; referencing both well-established and cutting-edge techniques that Cybersecurity Incident Response Teams might use to effectively defend their networks from advanced cyber threats.

Key Responsibilities:

• Lead an internal initiative to research and integrate candidate agentic capabilities into test environments.
• Serve as a consultant to customers looking to integrate agentic capabilities into their cybersecurity enterprise in identifying, integrating, and testing capabilities prior to deployment.
• Keep up with industry evolution around AI and cybersecurity by reviewing publications and standards.
• Provide world-class mentorship of advanced threat hunting tactics and strategy for global clients and international organizations.
• Utilize 6+ years of Blue Teaming experience to establish parsing rules, dashboards, and tuning of numerous enterprise security tools in our cyber range platform to exceed client goals and objectives.
• Work with the range operations team to develop toolsets and scenarios within a cybersecurity range to model real-world threat defense scenarios.
• Utilize foresight and awareness of overall business priorities when dealing with competing requirements and needs from across the organization to build consensus and drive results.
• Take initiative in day-to-day tasks, lead projects, and mentor other team members.
• Navigate and work effectively across a complex, geographically dispersed organization.
• Support assessment of customer security teams and customer events (travel estimated up to 25-30%).

Qualifications:

• Demonstrated proficiency in AI/ML engineering, including practical application and experimentation with AI agents, LLM APIs.
• Deep understanding of AI agents, specializing in orchestration of agent decision loops, tool access frameworks, and memory systems optimized for threat hunting and proactive security operations.
• Hands-on experience designing and deploying Retrieval-Augmented Generation (RAG) pipelines to ground LLMs in internal threat intelligence, historical incident data, and enterprise security policies while eliminating hallucinations.
• Advanced proficiency in Python and standard data science/AI libraries, alongside strong scripting skills for data manipulation (Pandas, Numpy).
• Familiarity with open-source AI ecosystems (Hugging Face) and frameworks for running local, privacy-safe LLMs (Ollama, vLLM).
• 6+ years of experience in a technical role in the areas of Security Operations, Incident Response, Detection Engineering, Offensive Security/Red Team, or Cyber Threat Intelligence.
• Experience analyzing host, network, and application telemetry for indicators of attack across the stages of the cyber kill chain.
• Direct experience working with very large datasets and log analysis tools including Splunk, Elastic, Python, Pandas, SQL, Hadoop, Hue.
• Ability to apply Cyber Threat Intelligence through enrichment, correlation, and attribution.
• Experience with setup and/or troubleshooting of security stacks.
• Familiarity with offensive security strategies and assessment methodology.
• Experience explaining threat hunt objectives to mixed technical and non-technical audiences and ability to communicate associated risk by distilling complex content into digestible information.
• Hands-on technical experience and ability to demonstrate hunting for indicators of compromise in numerous enterprise-scale EDR and SIEM tools to include Splunk, Elastic, CrowdStrike, and many other major vendors.
• Previous experience performing digital forensics or incident response on major security incidents.
• Demonstrated self-starter with a constant desire to help others improve and build the team.