Offensive Security Engineer, SimSpace
$105-140k
+ Opportunity for annual bonuses tied to company performance and individual contributions; + Equity stock options
More information about location
Cyber security training & insights
Be an early applicant
Cyber security training & insights
101-200 employees
Be an early applicant
$105-140k
+ Opportunity for annual bonuses tied to company performance and individual contributions; + Equity stock options
More information about location
101-200 employees
Company mission
To work on solutions that drive better cybersecurity across the world to ensure a secure future for us all.
Role
Who you are
- Existing experience with penetration testing suites such as Metasploit, Cobalt Strike, and similar C2 frameworks is preferred, but not required
- Understanding of tactics and techniques used during offensive network operations and the ability to modify them to subvert defensive countermeasures
- Demonstrated experience emulating real-world cyber threats, covering full attack chains and the application of threat intelligence
- Demonstrated experience with Git, GitHub, Docker, CI/CD and modern team software development and testing tools and practices, including Secure SDLC approaches
- Demonstrated experience with distributed systems, communication frameworks (RESTful API and rMQ), network protocols and configuration, data handling, and the proper use of security constructs
- Professional experience in Python, PowerShell, or other scripted languages (Ruby, Bash, Batch, PHP, etc.) and compiled languages (C/C++, Golang, etc.)
- General cybersecurity knowledge including familiarity with industry standards like MITRE ATT&CK and D3FEND, the NIST Cybersecurity Framework, STIX/TAXII, and OpenIOC
- Experience with defensive tools/techniques such as industry standard host-based, network analysis, incident response, and forensics tools
- Experience with the commonly-used attack frameworks (Metasploit, Cobalt Strike, CANVAS, Empire, Merlin, etc.)
- Relevant certifications from organizations like Offensive Security (OSCP / OSCE), SANS (GPEN / GXPN), or equivalent experience with demonstrable requisite skills is a bonus
- Experience working with virtualization solutions
What the job involves
- We are looking for an Offensive Security Engineer to work on the Scenario Development team
- The Scenario Development team is charged with creating advanced, compelling automated attack scenarios for use in the SimSpace Platform
- As an Offensive Security Engineer, you will have the opportunity to work with distributed systems, ensuring that each component and the system as a whole reliably emulate real-world threat actors at each step in the kill chain
- SimSpace is growing its portfolio of offensive security content by integrating external tools as well as creating our own APT-inspired campaigns
- We deliver a catalog of automated attack scenarios and the ability to create new attack components and scenarios from scratch, emulating a wide range of adversary behaviors
- The SimSpace Platform provides full control of multi-step attacks along with detailed visualization and reporting
- SimSpace follows the Agile process for development and utilizes modern toolchains and methods to develop our frameworks and services in teams
- Research, implement, integrate, and automate new attack content (attack tools, attack scenarios, etc.) into the Scenario Development portfolio
- Perform end-to-end testing of attack content to ensure functionality in common environments and the ability to evade common defensive tools
Our take
Founded by experts from the US Military’s Cyber Command and MIT Lincoln Laboratory, SimSpace is a cyber training platform that provides users with simulations, training exercises and rehearsals that act as stress tests for the cyber security of tech and its users.
At a time when cybersecurity is becoming a military and corporate priority, SimSpace’s Cyber Force Platform helps train sophisticated tech enterprises, governments and national infrastructure companies to become more resilient. Its comprehensive medley of stack optimization tools, attack simulations, actionable analysis, and “live fire” exercises are built to both strengthen cybersecurity and increase the efficiency of a company’s tech.
With the founding team's background in the military and government research and development sectors, the company has a good foundation of expertise surrounding its target market. Substantial funding from L2 Point, that was awarded in 2023, is also aiding its growth as it accelerates expansion into new territories.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (1 round)
Dec 2023
$45m
GROWTH EQUITY VC
Total funding: $45m
Company benefits
- Owner & Investor: By offering company equity, employees can own part of the business, aligning their interests with the company’s success and rewarding their dedication as the company grows
- Flexible PTO: With flexible PTO, you can take the time you need, whenever you need it, to ensure you are at your best and fully recharge
- Wellbeing Focused: Enjoy access to the Peloton Interactive Wellness Program, where you can prioritize your health and wellness through a variety of engaging and personalized fitness classes
- Ongoing Learning: Embrace a growth mindset with our comprehensive Learning & Development benefits, which include an enterprise LinkedIn Learning membership
- Health Benefits: Enjoy a comprehensive benefits package starting on day one, including medical, dental, and vision coverage, savings and spending accounts, an Employee Assistance Program, company-paid life and AD&D insurance, and long-term disability coverage
- Retirement Savings Plan: Secure your future with our 401(k) plan, featuring a company match to help you invest in the next chapters of your story
- Customized Interview Journey: Your candidate experience is crucial to us which is why you will have a dedicated career partner that will guide you through the interview process and provide 1:1 support and advisement
- Community & Connection: We prioritize building meaningful connections in a flexible work environment. Our employee resource groups, dedicated wellness committee, and monthly reimbursements for team activities help foster a supportive and engaging community
Company HQ
Fort Point Channel Landmark District, Boston, MA
Leadership
Lee Rossey
(Co-Founder & CTO)Former Group Leader at MIT Lincoln Lab, and Member of Engineering Staff at L-3 Communications.
Peter Lee
(CEO & President)Previously spent over 7 years at RapidMiner as the CEO, over 4 years at TIBCO Software as an Executive VP, and 8 years at JP Morgan as a VP. They also co-founded DataSynapse and served as the CEO for 9 years.
Clint S.
(CPO)Previously an Advisor at Smart Hive and Darkbit. They also served as the SVP of Product at Corelight and VP of Product at Malwarebytes and NortonLifeLock. Alongside this, they spent over 16 years at Symantec in various roles, including CPO of Cyber Security Services.
Roger Blanchette
(CFO)Previously CFO at Broadvoice, 360insights, Element AI, Skyword, NuoDB, Episerver, Dune Medical Devices, Cadent, and DataSynapse. They also spent almost 6 years at Concord Communications as the Director of Finance and VP of Finance.
Matt Knutsen
(CRO)Previously the CRo of Immersive Labs. Prior to that, they spent over 4 years at Avecto as the VP of Americas and EVP & GM of America, and over 8 years at AppSense in various roles, including AVP.
Share this job
View 6 more jobs at SimSpace