Note: The job is a remote job and is open to candidates in USA. Team Cymru is a cybersecurity and threat intelligence company that helps public and private sector analysts track and take down cybercriminals. The Technical Trainer - Curriculum Developer will build and deliver the Team Cymru Academy, creating role-based learning paths, hands-on labs, and measurable customer education outcomes. The role also owns training delivery, Academy operations, performance measurement, and cross-functional collaboration.
Responsibilities
- Design role-based learning paths for Threat Intel Analysts, SOC/IR intelligence consumers, CTI Leads, and platform specialists, spanning foundational CTI concepts through advanced analysis
- Build engaging courses across formats: instructor-led sessions, self-paced e-learning, videos, and hands-on labs grounded in real-world adversary infrastructure and threat hunting scenarios
- Cover the product workflows that matter to practitioners: threat hunting, investigations, reporting, and automation
- Develop the included fundamentals tier (CTI + product onboarding for all customers) and the subscription tier of intermediate and advanced learning paths and labs
- Keep content current with product releases and the evolving threat landscape through a regular refresh cycle
- Deliver live virtual and in-person training, from fundamentals to advanced, hands-on master classes in threat hunting and adversary infrastructure mapping
- Coach analysts through realistic investigations using Team Cymru's solutions, building both product fluency and analytical tradecraft
- Represent the Academy at customer on-sites, user conferences, and industry events
- Adapt delivery to diverse audiences, from new analysts to senior threat hunters and CTI leadership
- Stand up and administer the Academy's learning platform (LMS), including learning paths, enrollments, assessments, and learner support
- Establish scalable content production using modern authoring tools and lab environments
- Manage the training calendar, cohort scheduling, and session logistics as the program grows
- Build the operational foundation for future certifications
- Define and track program KPIs: active learners, course completions, assessment outcomes, and adoption and depth of product usage among trained users
- Gather and act on learner feedback to continuously improve content and delivery
- Report on the Academy's impact on customer adoption, retention, and growth
- Surface learner insights and engagement signals to Customer Success and account teams
- Partner with CTI Advisors, Solution Engineers, and threat researchers to capture and codify subject matter expertise
- Align with Product on roadmap and releases so training lands alongside new capabilities
- Work with Customer Success and Sales to integrate training into onboarding, adoption, and renewal motions
- Champion the voice of the learner, feeding customer insights back to Product and Engineering
Skills
- ● 4+ years in Cybersecurity, with hands-on experience in CTI, threat hunting, SOC, or incident response roles
- ● 2+ years designing and delivering technical training, enablement, or customer education for external audiences
- ● Demonstrated experience building technical training content: courses, labs, exercises, or workshops
- ● Strong knowledge of core network protocols (TCP/IP, DNS, HTTP) and how adversaries build and operate infrastructure
- ● Practical threat hunting and investigation skills: pivoting, passive DNS, open ports, certificates, and network telemetry
- ● Familiarity with MITRE ATT&CK, the intelligence lifecycle, and CTI operations
- ● Experience with threat intelligence platforms, SIEMs, or SOARs; basic scripting (e.g., Python) is a plus
- ● Exceptional presentation and facilitation skills, live and on camera, for audiences from new analysts to CTI leadership
- ● Strong instructional instincts: able to break complex analytical concepts into clear, practical learning experiences
- ● Self-starter comfortable building a program from the ground up with limited precedent
- ● Organized and metrics-driven, able to run content, delivery, platform, and reporting work streams in parallel
- ● Bachelor's degree or equivalent experience in Computer Science, Information Security, or related field
- Occasional travel within the US and internationally for customer workshops, industry events, and team meetings is required
- This is a remote position
- ● Experience administering or building on an LMS and using content authoring tools (e.g., Articulate, Camtasia) is strongly preferred
- ● Cybersecurity certifications such as GCTI, GCIA, or CISSP, or instructional credentials such as CPTD (preferred)
Benefits
- Remote position
- Collaborative, mission-driven culture
Company Overview