Offer summary

Qualifications:

5+ years in a Security Operations (SOC) function or Detection Engineering, preferably in MSSP environments., Experience supporting regulated industries such as finance, healthcare, and critical infrastructure., Strong technical communication skills across various stakeholders, from SOC analysts to CISOs., Familiarity with compliance frameworks and regulations like MITRE ATT&CK, NIST, HIPAA, and PCI-DSS..

Key responsibilities:

Lead the implementation and configuration of Cymulate modules for customers.

Assist in detection engineering by simulating attacker tactics and improving detection capabilities.

Support customer training and drive adoption of Cymulate through hands-on guidance.

Act as the technical voice of the customer, providing feedback to internal teams and advocating for feature requests.

Job description

Make Your Mark

Cymulate’s Continuous Security Validation enables companies to challenge, assess and optimize their cyber-security posture against the evolving cyberthreat landscape, simply and continuously.

With world-class clients we strive to bring the highest level of service to everything we do. Our team is made up of the very best people for the job and as we grow, we’re always on the lookout for people with the skills, experience, and personality that will let us both shine. With high scores on Gartner, G2 and Glassdoor, our clients and employees have let us know what they love about us.

What You Will Do:

Onboarding & Technical Enablement
- Lead hands-on implementation and configuration of Cymulate modules (e.g., BAS, ASM, Exposure Analytics, Email Gateway).
- Ensure use-case alignment, detection validation, and platform integration with customer environments.
Detection Engineering Support
- Simulate attacker TTPs using Cymulate (aligned with MITRE ATT&CK).
- Assist customers in mapping findings to SIEM/SOAR/EDR improvements and detection tuning.
Multi-Tenant & High-Volume Scaling
- Apply MSSP-style practices to help customers scale Cymulate across multiple business units or client environments.
- Leverage templated configurations and automation to streamline operations.
Customer Training & Value Reinforcement
- Support customers with detection-as-code workflows, regression testing, and operationalizing Cymulate for change management and incident readiness.
- Drive adoption through enablement and hands-on guidance.
Internal Advocacy
- Serve as the technical voice of the customer, providing feedback to Cymulate’s product, R&D, and support teams.
- Advocate for customer-impacting feature requests and fixes.
Compliance & Framework Mapping
- Help customers align Cymulate use cases with compliance requirements: NIST CSF, HIPAA, PCI-DSS, FFIEC, SEC cyber disclosures.

What You Will Need:

5+ years in a Security Operations (SOC) function, Detection Engineering, or similar roles, ideally in MSSP environments.
Proven experience supporting regulated industries (finance, healthcare, critical infrastructure, insurance)
Clear, technical communication across stakeholders — from SOC analysts to CISOs.
Ability to turn Cymulate results into control improvements, detection enhancements, and business-aligned reporting.
Knowledge of Frameworks & Regulations
- MITRE ATT&CK and D3FEND
- NIST 800-53/800-171
- CISA KEV advisories and ransomware threat profiles
- U.S. regulatory standards: HIPAA, PCI-DSS, SEC cyber rules, GLBA, SOX

What Knowledge Will Be Helpful?:

Security Platforms such as:
- SIEM: Splunk, Microsoft Sentinel, IBM QRadar
- SOAR: Cortex XSOAR, other orchestration tools
- EDR: CrowdStrike, Defender for Endpoint, others
Simulation & Detection Tools like Cymulate or other BAS tools
Threat Mapping & Automation and familiarity wiith detection as code, automation pipelines and regression testing