Senior Threat Hunter

SimSpace; United States; Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health, dental, vision benefits

401(k) with company match

Unlimited vacation

Equity stock options

Peloton Wellness Program

LinkedIn Learning membership

Referral rewards: $1,500–$3,500

Job summary

SimSpace seeks a Senior AI-Centric Threat Hunter to mentor global security teams and advance AI-driven threat hunting across our cyber range platform. You will lead research on agentic capabilities, integrate them into test environments, and consult clients on deployment strategies while staying ahead of AI cybersecurity trends.

The role emphasizes hands-on security operations, data analysis, and cross‑functional collaboration with global teams, with travel up to 25–30%.

Qualifications

• Demonstrated proficiency in AI/ML engineering, including practical application and experimentation with AI agents, LLM APIs.
• Deep understanding of AI agents, specializing in orchestration of decision loops, tool access frameworks, and memory systems for threat hunting.
• Architecting Retrieval-Augmented Generation (RAG) pipelines to ground LLMs in internal threat intel, incident data, and policies while avoiding hallucinations.
• Advanced proficiency in Python and data science libraries, plus scripting with Pandas and Numpy.
• Familiarity with open-source AI ecosystems (Hugging Face) and local LLMs (Ollama, vLLM).
• 6+ years in Security Operations, Incident Response, Detection Engineering, Offensive Security/Red Team, or CTI.
• Experience analyzing host, network, and application telemetry for kill-chain indicators.
• Experience with large datasets and log analysis tools: Splunk, Elastic, Python, Pandas, SQL, Hadoop, Hue.
• Ability to apply Cyber Threat Intelligence through enrichment, correlation, attribution.
• Experience with setup and troubleshooting of security stacks.
• Familiarity with offensive security strategies and assessment methodology.
• Experience explaining threat hunt objectives to mixed audiences and communicating risk clearly.
• Hands-on hunting for IOC in enterprise EDR/SIEM tools (Splunk, Elastic, CrowdStrike).
• Experience in digital forensics or incident response on major security incidents.
• Demonstrated self-starter attitude and helping others grow.

Responsibilities

• Lead internal initiative to research and integrate candidate agentic capabilities into test environments.
• Serve as a consultant to customers to identify, integrate and test agentic capabilities in their cybersecurity enterprise.
• Keep up with AI and cybersecurity standards and publications.
• Provide world-class mentorship of advanced threat hunting tactics for global clients.
• Establish parsing rules, dashboards, and tuning of enterprise security tools in our cyber range to exceed client goals.
• Collaborate with range operations to develop toolsets and scenarios within a cybersecurity range.
• Balance business priorities and drive consensus to deliver results across the org.
• Take initiative, lead projects, and mentor other team members.
• Navigate and operate across a geographically dispersed organization.
• Support assessment of customer security teams and events (travel up to 25-30%).

Skills

AI/ML engineering

AI agents orchestration

RAG systems design

Python

Pandas

Numpy

Open-source AI ecosystems

Hugging Face

Ollama

vLLM

Security Operations

Incident Response

Threat hunting

Splunk

Elastic

SQL

Hadoop

Hue

Tools

Python

Pandas

Numpy

Hugging Face

Ollama

vLLM

Splunk

Elastic

SQL

Hadoop

Hue

Job description

SimSpace serves as an AI Proving Ground where organizations can confidently train, test, and outmaneuver adversaries in any environment. Trusted by allied governments, militaries, enterprises, and research institutions worldwide, SimSpace enables adaptive, AI-ready defenses that stay ahead of evolving threats. Founded in 2015 by experts from U.S. Cyber Command and MIT Lincoln Laboratory, the platform unifies training, testing, and validation in a realistic, live-fire simulation—helping teams evaluate security investments, optimize performance, and compress cyber readiness cycles from months to days.

Why join SimSpace?

We are an organization that is focused on building our culture and mindfully enhancing our atmosphere every day which is why we have collaborated on an integral value system. Our governing philosophy of being Human Centered is deeply embedded within our value system. We apply this philosophy to every one of our internal team members, external clients, and their customers.

How Do We Work?

We believe that people are at the center of everything we do. SimSpace fosters a culture of continuous learning, curiosity, and professional growth. That belief shows up in action: in-house training, internal and external learning platforms, cyber conferences, industry events, and dedicated time for skill development. Our people are empowered to shape their careers - and it shows. Year over year, SimSpace consistently outperforms industry benchmarks in internal mobility, promotions, and total rewards growth.

Who Thrives Here?

We are a team of innovators, protectors, and problem-solvers. We believe diversity of thought and experience fuels better solutions, and we’re committed to building teams that reflect the communities we serve. Whether you’re remote or office-based, you’ll collaborate with talented colleagues across departments and time zones, united by the mission to create a safer digital world.

We are looking for a Senior AI-Centric Threat Hunter

We are looking for a highly motivated Cybersecurity Professional to support mentorship and assessment of global security teams in basic to advanced cybersecurity skill areas. The ideal candidate has a strong technical background, is enthusiastic, is good at problem solving, has a strong desire to learn, prefers to be hands‑on technically, and constantly strives for excellence.

• Lead an internal initiative to research and integrate candidate agentic capabilities into test environments
• Serve as a consultant to customers looking to integrate agentic capabilities into their cybersecurity enterprise in how to identify, integrate and test capabilities prior to deployment
• Keep up with industry evolution around AI and cybersecurity operations reviewing publications and standards
• Bring world class mentorship of advanced threat hunting tactics and strategy for our global clients and international organizations.
• Utilize years of Blue Teaming experience to establish parsing rules, dashboards, and tuning of numerous enterprise security tools in our cyber range platform to exceed client goals and objectives.
• Work with our range operations team to develop toolsets and scenarios within a cybersecurity range to model real-world threat defense scenarios.
• Utilize foresight and awareness of overall business priorities when dealing with competing requirements and needs from across the organization in order to build consensus and drive results.
• Takes initiative in day‑to‑day tasks, leads projects, and mentors other team members.
• Navigate and work effectively across a complex, geographically dispersed organization.
• Support assessment of customer security teams and customer events (travel estimated up to 25-30%).

Qualifications

What are the qualifications to apply? To be successful as a Senior AI-Centric Threat Hunter on SimSpace’s Evaluation Team, you need to have:

• Demonstrated proficiency in AI/ML engineering, including practical application and experimentation with AI agents, LLM APIs.
• Possess a deep understanding of AI agents, specializing in the orchestration of agent decision loops, tool access frameworks, and memory systems optimized for threat hunting and proactive security operations.
• Architecting RAG Systems: Hands‑on experience designing and deploying Retrieval‑Augmented Generation (RAG) pipelines to ground LLMs in internal threat intelligence, historical incident data, and enterprise security policies while eliminating hallucinations.
• Advanced proficiency in Python and standard data science/AI libraries, alongside strong scripting skills for data manipulation (Pandas, Numpy).
• Familiarity with open‑source AI ecosystems (Hugging Face) and frameworks for running local, privacy‑safe LLMs (Ollama, vLLM).
• 6+ years of experience in a technical role in the areas of Security Operations, Incident Response, Detection Engineering, Offensive Security/Red Team, or Cyber Threat Intelligence.
• Experience analyzing host, network, and application telemetry for indicators of attack across the stages of the cyber kill chain.
• Direct experience working with very large datasets and log analysis tools including but not limited to: Splunk, Elastic, Python, Pandas, SQL, Hadoop, Hue.
• Ability to apply Cyber Threat Intelligence through enrichment, correlation, and attribution.
• Experience with setup and/or troubleshooting of security stacks.
• Familiarity with offensive security strategies and assessment methodology.
• Experience explaining threat hunt objectives to mixed technical and non‑technical audiences and ability to communicate associated risk by distilling complex content into digestible information.
• Hands‑on technical experience and ability to demonstrate hunting for indicators of compromise in numerous enterprise scale EDR and SIEM tools to include Splunk, Elastic, Crowdstrike, and many other major vendors.
• Previous experience performing digital forensics or indecent response on major security incidents.
• Demonstrated self‑starter with a constant desire to help others improve and build the team.

We’re proud to offer a competitive and comprehensive package designed to support your well‑being, growth, and success:

• Compensation. Base salary range: $120,000 - $150,000 reflecting our confidence in your expertise and impact, with the opportunity for commission tied to company performance and individual contributions.
• Health & Wellness. Comprehensive medical, dental, and vision benefits, plus savings plans—coverage starts on day one!
• Mental Health Support. Access to company‑paid counseling, coaching, and resources for you and your family through Spring Health.
• Financial Well‑Being. Plan for your future with a 401(k)-retirement savings plan featuring a company match.
• Flexible Time Off. Take the time you need with unlimited vacation and dedicated health & wellness days. SimSpace provides flexible solutions to meet the diverse work‑life needs of team members.
• Parental Leave. Paid leave plans to support you and your loved ones during life’s most important moments.
• Ownership Opportunities. Equity stock options at hire, with annual performance‑based grants—become an invested stakeholder in our shared success.
• Referral Rewards. Earn $1,500–$3,500 for every qualified hire through our employee referral program.
• Peloton Interactive Wellness Program. Full‑and partial‑subsidized membership plans and equipment discounts to help you reach your personalized fitness goals.
• Continuous Learning. Access a LinkedIn Learning membership to prioritize your personal and professional development.
• Social Connections. Monthly reimbursements for meaningful connections with teammates through our SocialSpace Community.
• Extra Perks. Legal plan coverage, pet insurance, wellness reimbursements, and more to simplify life’s details.

Join SimSpace and enjoy benefits that enhance your career, health, and happiness!

SimSpace Is An Equal Opportunity Employer

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire.

SimSpace is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws. We are committed to providing an inclusive and welcoming environment for all members of our staff, clients, volunteers, subcontractors, vendors, and clients.

Research shows that women and people from underrepresented groups only apply to jobs if they meet all of the qualifications. However, no one ever meets 100% of the qualifications. SimSpace encourages you to break that statistic and to apply. We look forward to your application!

We also consider qualified applicants regardless of criminal histories, in accordance with applicable law. We are committed to providing reasonable accommodations for qualified individuals with disabilities in our job application procedures. If you need assistance or accommodation due to a disability, please contact [e-mail].

SimSpace does not accept unsolicited resumes from employment agencies.

Actual compensation for the position is based on a variety of factors, including, but not limited to affordability, skills, qualifications and experience, and may vary from the range.