Senior Threat Hunter

SimSpace Corporation; Singapore; Hybrid; SGD 120,000 - 180,000; Full time

Job summary

SimSpace is seeking a Senior Threat Hunter to lead advanced threat hunting and incident response activities for regional clients. You will mentor teams, design authentic scenarios for security exercises, and serve as a technical advisor on AI-enabled cybersecurity capabilities.

Travel to client sites in the Asia-Pacific region is expected, with hybrid work arrangements in Singapore. The role requires hands-on expertise across enterprise security stacks and collaboration across diverse teams.

Qualifications

• 6+ years in Security Operations, IR, Detection Eng, or Threat Intel.
• Experience with host, network, and app telemetry for attack indicators.
• Hands-on with EDR/SIEM tools (e.g., Splunk, Elastic).
• Ability to convey risk to mixed audiences.

Responsibilities

• Own complex incident response scenarios from pre-sales to delivery.
• Mentor and develop threat hunting capabilities for clients.
• Serve as technical consultant to help clients integrate AI agentic capabilities.
• Develop toolsets and cyber threat scenarios within a cyber range to model real-world defense scenarios.
• Lead cross-functional analysis and client-facing risk discussions.

Skills

Threat hunting

Incident response

Blue Teaming

Technical leadership

Communication skills

Tools

Splunk

Elastic

Python

SQL

Hadoop

Job description

SimSpace serves as an AI Proving Ground where organizations can confidently train, test, and outmaneuver adversaries in any environment. Trusted by allied governments, militaries, enterprises, and research institutions worldwide, SimSpace enables adaptive, AI-ready defenses that stay ahead of evolving threats. Founded in 2015 by experts from U.S. Cyber Command and MIT Lincoln Laboratory, the platform unifies training, testing, and validation in a realistic, live-fire simulation—helping teams evaluate security investments, optimize performance, and compress cyber readiness cycles from months to days.

Why join SimSpace?

We are an organization that is focused on building our culture and mindfully enhancing our atmosphere every day which is why we have collaborated on an integral value system. Our governing philosophy of being Human Centered is deeply embedded within our value system. We apply this philosophy to every one of our internal team members, external clients, and their customers.

How Do We Work?

We believe that people are at the center of everything we do. SimSpace fosters a culture of continuous learning, curiosity, and professional growth. That belief shows up in action: in-house training, internal and external learning platforms, cyber conferences, industry events, and dedicated time for skill development. Our people are empowered to shape their careers - and it shows. Year over year, SimSpace consistently outperforms industry benchmarks in internal mobility, promotions, and total rewards growth.

Who Thrives Here?

We are a team of innovators, protectors, and problem-solvers. We believe diversity of thought and experience fuels better solutions, and we’re committed to building teams that reflect the communities we serve. Whether you’re remote or office-based, you’ll collaborate with talented colleagues across departments and time zones, united by the mission to create a safer digital world.

We are looking for a Senior Threat Hunter

We are looking for a highly motivated Cybersecurity Professional to support mentorship and assessment of global security teams in basic to advanced cybersecurity skill areas. You will drive regional efforts to develop authentic scenarios that excite potential clients and own the project management of the event utilizing your deep technical background. The ideal candidate has real experiences in complex incident response scenarios, is enthusiastic, is good at problem solving, has a strong desire to learn, prefers to be hands-on technically, and constantly strives for excellence.

The Senior Threat Hunter will be part of a team delivering instructional content to customers on deeply technical cybersecurity concepts, designing tests to develop AI agents and models, and facilitating a variety of cyber defense exercises for SimSpace and our customers. When facilitating exercises, you will be responsible for teaching security concepts, demonstrating practical/hands-on use of open source and commercial security tools, and referencing both well established and cutting edge techniques that Cybersecurity Incident Response Teams might use to effectively defend their networks from advanced cyber threats.

Location Requirement

• Singapore: Hybrid with regular regional onsite client travel.

What will you be doing as a Senior Threat Hunter at SimSpace?

• The role will require complete ownership of complex and technical incident response scenarios, from pre-sales to delivery, management, and event execution helping to expand the Asia Pacific market.

• Bring world class mentorship and development of advanced threat hunting tactics and strategy for our global clients and international organizations.

• Operate as a highly technical client lead with experience in emerging technologies and implementation of cybersecurity safeguards in large enterprise networks, to include Operational Technologies (OT), the Internet of Things (IoT), and Large Language Models (LLM).

• Serve as a technical consultant to customers looking to integrate AI agentic capabilities into their cybersecurity enterprise in how to identify, integrate and test capabilities prior to deployment.

• Work with our range operations team to develop toolsets and cyber threat scenarios within a cybersecurity range to model real-world threat defense scenarios.

• Utilize foresight and awareness of overall business priorities when dealing with competing requirements and needs from across the organization in order to build consensus and drive results.

• Utilize years of Blue Teaming experience to establish parsing rules, dashboards, and tuning of numerous enterprise security tools in our cyber range platform to exceed client goals and objectives.

• Takes initiative in day-to-day tasks, leads projects, and is eager to mentor other team members.

• Navigate and work effectively across a complex, geographically dispersed organization.

• Support assessment of customer security teams and customer events (travel estimated up to 25-30%).

What are the qualifications to apply? To be successful as a Senior Threat Hunter on SimSpace’s Evaluation Team, you need to have:

• Experience generating unique cyber threat research and developing successful proposals for conference training and engagements.
• Possess a deep understanding of AI agents, specializing in the orchestration of agent decision loops, tool access frameworks, and memory systems optimized for threat hunting and proactive security operations.
• Direct experience performing threat hunting in active corporate environments.
• 6+ years of experience in a technical role in the areas of Security Operations, Incident Response, Detection Engineering, Offensive Security/Red Team, or Cyber Threat Intelligence.
• Experience analyzing host, network, and application telemetry for indicators of attack across the stages of the cyber kill chain.
• Direct experience working with very large datasets and log analysis tools including but not limited to: Splunk, Elastic, Python, Pandas, SQL, Hadoop, Hue.
• Experience consuming and analyzing Cyber Threat Intelligence for actionable takeaways for current threat hunts.
• Ability to apply Cyber Threat Intelligence through enrichment, correlation, and attribution.
• Experience with setup and/or troubleshooting of security stacks.
• Familiarity with offensive security strategies and assessment methodology.
• Experience explaining threat hunt objectives to mixed technical and non-technical audiences and ability to communicate associated risk by distilling complex content into digestible information.
• Hands‑on technical experience and ability to demonstrate hunting for indicators of compromise in numerous enterprise scale EDR and SIEM tools to include Splunk, Elastic, Crowdstrike, and many other major vendors.
• Previous experience performing digital forensics or indecent response on major security incidents.
• Demonstrated self‑starter with a constant desire to help others improve and build the team.

We’re proud to offer a competitive and comprehensive package designed to support your well-being, growth, and success:

SimSpace is an Equal Opportunity Employer:

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire.

SimSpace is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws. We are committed to providing an inclusive and welcoming environment for all members of our staff, clients, volunteers, subcontractors, vendors, and clients.

Research shows that women and people from underrepresented groups only apply to jobs if they meet all of the qualifications. However, no one ever meets 100% of the qualifications. SimSpace encourages you to break that statistic and to apply. We look forward to your application!

We also consider qualified applicants regardless of criminal histories, in accordance with applicable law. We are committed to providing reasonable accommodations for qualified individuals with disabilities in our job application procedures. If you need assistance or accommodation due to a disability, please contact [e-mail].

SimSpace does not accept unsolicited resumes from employment agencies.

Actual compensation for the position is based on a variety of factors, including, but not limited to affordability, skills, qualifications and experience, and may vary from the range.