Network Security Trainer

Responsibilities

• Contribute to curriculum development, keeping material current with real-world network-based attack patterns you've encountered operationally
• Help build hands-on lab environments and CTF challenges that reflect realistic adversary behavior, not textbook scenarios
• Co-facilitate and independently lead training sessions (virtual and in-person) for technically experienced audiences
• Develop recorded, on-demand curriculum
• Administer and optimize Learning Management Systems (Skilljar experience is a plus)
• Educate students on the use and application of Corelight for threat hunting, incident response, and detection engineering
• Use AWS and scripting to help maintain and improve lab infrastructure and provisioning workflows
• Up to 50% travel expected

Qualifications

• 3 to 5 years of hands-on experience in a SOC Tier II role, Incident Response, or threat hunting
• 1 to 2 years in mentorship, internal training, content creation, or knowledge-sharing in a security context
• Familiarity with the MITRE ATT&CK framework applied to real investigations, not just as a reference
• Meaningful experience with Zeek logs; you can follow an attack through the data and explain what you're seeing
• Working knowledge of Suricata or Snort, including rules creation
• Experience with at least one SIEM platform (Splunk, Elastic, or Sentinel)
• Solid TCP/IP fundamentals and comfort reading packet captures
• Windows/MacOS/Linux/Unix administration experience
• Scripting ability in Python, Bash, Zeek-script, or PowerShell
• Excellent verbal and written communication skills
• Bachelor's degree in a technical field or equivalent experience
• Prior startup experience preferred