Cyber Simulation Engineer

MANDATORY SKILLS/EXPERIENCE

• hands-on cybersecurity incident response experience, including detection, triage, investigation, containment, remediation, and post-incident activities

• Experience responding to common cyber incidents such as ransomware, phishing, credential compromise, data breaches, and third-party/vendor incidents

• Ability to apply real-world incident response experience to the development of realistic training scenarios

• Experience developing, supporting, or delivering cybersecurity training, simulations, or tabletop exercises

• Experience using cyber range or hands-on training platforms (e.g., Immersive Labs or similar)

• Familiarity with incident response frameworks and standards (e.g., NIST, MITRE ATT&CK)

• Experience working with security logs, alerts, and technical artifacts (e.g., SIEM, EDR, network or cloud logs)

 • Experience supporting or proctoring live training sessions, simulations, or tabletop exercises

• Strong written and verbal communication skills

• Ability to work independently, manage multiple activities, and assume responsibilities quickly during a time-sensitive transition

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent professional experience

DESIRABLE SKILLS/EXPERIENCE:  

• Direct experience developing content specifically within Immersive Labs

• Experience designing and delivering cyber tabletop exercises for executive, management, and technical audiences

• Experience supporting large-scale, multi-agency or enterprise training programs

• Prior experience working in government, public sector, or highly regulated environments

• Experience aligning training content to organizational policies, playbooks, and incident response plans

• Familiarity with cloud security incidents (e.g., identity, SaaS, IaaS/PaaS environments)

• Experience incorporating lessons learned, after-action reports, or threat intelligence into training content

• Basic instructional design or adult learning experience

• Experience collecting training metrics and contributing to post-exercise reporting

• Relevant cybersecurity certifications (e.g., Security+, GCIH, GCED, CySA+, CISSP)