Offensive Security Engineer

<div class="content-intro">Who is SimSpace:SimSpace launched in 2015 with a singular purpose – addressing the most urgent and sophisticated cybersecurity challenges to reduce risk for our most vulnerable and valuable infrastructure. The organizations around the world that we depend on every day to keep our loved ones safe and secure. Our healthcare facilities, schools, financial institutions, transit centers, grocery stores, and workplaces just to name a few. To deliver global resiliency, we provide an elite cyber range platform to curate unassailable cyber defenses, data driven decisions, cutting edge training labs, live attack scenarios, and extensive individual and dynamic team readiness training. SimSpace works as OneTeam to elevate humanity around the world. We are committed to continuously improving and delivering a cultivated member experience whether that is accomplished through focusing on supporting our client’s teams or our own mission driven SimSpacers. We are an international company headquartered in Boston's Fort Point in the U.S. If you are interested in elevating the technology and creative solutions necessary to secure and safeguard our future while working alongside others who share your passion for purpose and development, we want to meet you!Why should you choose a career at SimSpace?We are an organization that is focused on building our culture and mindfully enhancing our atmosphere everyday which is why we have collaborated on an integral value system. Our governing philosophy of being Human Centered is deeply embedded within our value system. We apply this philosophy to every one of our internal team members, external clients, and their customers.Our core values:<ul><li style="color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 12pt;">Serve to Protect – We provide safe space, deliver on the mission, and elevate humanity</li><li style="color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 12pt;">Acquire Understanding – We seek and provide clarity 10x, cultivate comprehension, and believe information goes both all ways</li><li style="color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 12pt;">Operate as Innovators – We stay curious, practice consistency over intensity, and continue to be the change we need in the world</li><li style="color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 12pt;">Teamwork Without Borders – We are never alone, we solve for all, and keep people at the heart of everything we do</li></ul></div>We are looking for: An Offensive Security Engineer to work on the Scenario Development team. The Scenario Development team is charged with creating advanced, compelling automated attack scenarios for use in the SimSpace Platform. Existing experience with penetration testing suites such as Metasploit, Cobalt Strike, and similar C2 frameworks is preferred, but not required. As an Offensive Security Engineer, you will have the opportunity to work with distributed systems, ensuring that each component and the system as a whole reliably emulate real-world threat actors at each step in the kill chain. SimSpace is growing its portfolio of offensive security content by integrating external tools as well as creating our own APT-inspired campaigns. We deliver a catalog of automated attack scenarios and the ability to create new attack components and scenarios from scratch, emulating a wide range of adversary behaviors. The SimSpace Platform provides full control of multi-step attacks along with detailed visualization and reporting. SimSpace follows the Agile process for development and utilizes modern toolchains and methods to develop our frameworks and services in teams.What will you be doing as an Offensive Security Engineer at SimSpace?<ul><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Research, implement, integrate, and automate new attack content (attack tools, attack scenarios, etc.) into the Scenario Development portfolio</li><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Perform end-to-end testing of attack content to ensure functionality in common environments and the ability to evade common defensive tools</li></ul><h3>What are the qualifications to apply? To be successful as an Offensive Security Engineer, you need:</h3><ul><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Understanding of tactics and techniques used during offensive network operations and the ability to modify them to subvert defensive countermeasures</li><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Demonstrated experience emulating real-world cyber threats, covering full attack chains and the application of threat intelligence</li><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Demonstrated experience with Git, GitHub, Docker, CI/CD and modern team software development and testing tools and practices, including Secure SDLC approaches</li><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Demonstrated experience with distributed systems, communication frameworks (RESTful API and rMQ), network protocols and configuration, data handling, and the proper use of security constructs</li><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Professional experience in Python, PowerShell, or other scripted languages (Ruby, Bash, Batch, PHP, etc.) and compiled languages (C/C++, Golang, etc.) </li><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">General cybersecurity knowledge including familiarity with industry standards like MITRE ATT&CK and D3FEND, the NIST Cybersecurity Framework, STIX/TAXII, and OpenIOC</li><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Experience with defensive tools/techniques such as industry standard host-based, network analysis, incident response, and forensics tools</li><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Experience with the commonly-used attack frameworks (Metasploit, Cobalt Strike, CANVAS, Empire, Merlin, etc.)</li><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Relevant certifications from organizations like Offensive Security (OSCP / OSCE), SANS (GPEN / GXPN), or equivalent experience with demonstrable requisite skills is a bonus</li><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Experience working with virtualization solutions</li></ul><div class="p-rich_text_section"><div class="p-rich_text_section">We’re proud to offer a competitive and comprehensive package designed to support your well-being, growth, and success: <ul><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Compensation. Base salary range: $105,000 – $140,000, reflecting our confidence in your expertise and impact, with the opportunity for annual bonuses tied to company performance and individual contributions.</li><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Health & Wellness. Comprehensive medical, dental, and vision benefits, plus savings plans—coverage starts on day one!</li><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Mental Health Support. Access to company-paid counseling, coaching, and resources for you and your family through Spring Health.</li><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Financial Well-Being. Plan for your future with a 401(k)-retirement savings plan featuring a company match.</li><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Flexible Time Off. Take the time you need with unlimited vacation and dedicated health & wellness days. SimSpace provides flexible solutions to meet the diverse work-life needs of team members.</li><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Parental Leave. Paid leave plans to support you and your loved ones during life’s most important moments.</li><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Ownership Opportunities: Equity stock options at hire, with annual performance-based grants—become an invested stakeholder in our shared success.</li><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Referral Rewards: Earn $1,500–$3,500 for every qualified hire through our employee referral program.</li><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Peloton Interactive Wellness Program: Full- and partial- subsidized membership plans and equipment discounts to help you reach your personalized fitness goals.</li><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Continuous Learning: Access a LinkedIn Learning membership to prioritize your personal and professional development.</li><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Social Connections: Monthly reimbursements for meaningful connections with teammates through our SocialSpace Community.</li><li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Extra Perks: Legal plan coverage, pet insurance, wellness reimbursements, and more to simplify life’s details.</li></ul></div></div><div class="content-conclusion">SimSpace is an Equal Opportunity Employer:In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire. SimSpace is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws. We are committed to providing an inclusive and welcoming environment for all members of our staff, clients, volunteers, subcontractors, vendors, and clients.Research shows that women and people from underrepresented groups only apply to jobs if they meet all of the qualifications. However, no one ever meets 100% of the qualifications. SimSpace encourages you to break that statistic and to apply. We look forward to your application!We also consider qualified applicants regardless of criminal histories, in accordance with applicable law. We are committed to providing reasonable accommodations for qualified individuals with disabilities in our job application procedures. If you need assistance or accommodation due to a disability, please contact <a style="color: rgb(0, 0, 0);" href="mailto:careers@simspace.com">careers@simspace.com</a>. SimSpace does not accept unsolicited resumes from employment agencies.Actual compensation for the position is based on a variety of factors, including, but not limited to affordability, skills, qualifications and experience, and may vary from the range.</div>

USA Remote Jobs