Contribute to curriculum development, keeping material current with real-world network-based attack patterns you've encountered operationally
Help build hands-on lab environments and CTF challenges that reflect realistic adversary behavior, not textbook scenarios
Co-facilitate and independently lead training sessions (virtual and in-person) for technically experienced audiences
Develop recorded, on-demand curriculum
Administer and optimize Learning Management Systems (Skilljar experience is a plus)
Educate students on the use and application of Corelight for threat hunting, incident response, and detection engineering
Use AWS and scripting to help maintain and improve lab infrastructure and provisioning workflows
Up to 50% travel expected

3 to 5 years of hands-on experience in a SOC Tier II role, Incident Response, or threat hunting
1 to 2 years in mentorship, internal training, content creation, or knowledge-sharing in a security context
Familiarity with the MITRE ATT&CK framework applied to real investigations, not just as a reference
Meaningful experience with Zeek logs; you can follow an attack through the data and explain what you're seeing
Working knowledge of Suricata or Snort, including rules creation
Experience with at least one SIEM platform (Splunk, Elastic, or Sentinel)
Solid TCP/IP fundamentals and comfort reading packet captures
Windows/MacOS/Linux/Unix administration experience
Scripting ability in Python, Bash, Zeek-script, or PowerShell
Excellent verbal and written communication skills
Bachelor's degree in a technical field or equivalent experience
Prior startup experience preferred.

Network Security Trainer

Key skills