[Remote] Technical Trainer - Curriculum Developer

Note: The job is a remote job and is open to candidates in USA. Team Cymru is a cybersecurity and threat intelligence company that helps public and private sector analysts track and take down cybercriminals. The Technical Trainer - Curriculum Developer will build and deliver the Team Cymru Academy, creating role-based learning paths, hands-on labs, and measurable customer education outcomes. The role also owns training delivery, Academy operations, performance measurement, and cross-functional collaboration.

Responsibilities

• Design role-based learning paths for Threat Intel Analysts, SOC/IR intelligence consumers, CTI Leads, and platform specialists, spanning foundational CTI concepts through advanced analysis
• Build engaging courses across formats: instructor-led sessions, self-paced e-learning, videos, and hands-on labs grounded in real-world adversary infrastructure and threat hunting scenarios
• Cover the product workflows that matter to practitioners: threat hunting, investigations, reporting, and automation
• Develop the included fundamentals tier (CTI + product onboarding for all customers) and the subscription tier of intermediate and advanced learning paths and labs
• Keep content current with product releases and the evolving threat landscape through a regular refresh cycle
• Deliver live virtual and in-person training, from fundamentals to advanced, hands-on master classes in threat hunting and adversary infrastructure mapping
• Coach analysts through realistic investigations using Team Cymru's solutions, building both product fluency and analytical tradecraft
• Represent the Academy at customer on-sites, user conferences, and industry events
• Adapt delivery to diverse audiences, from new analysts to senior threat hunters and CTI leadership
• Stand up and administer the Academy's learning platform (LMS), including learning paths, enrollments, assessments, and learner support
• Establish scalable content production using modern authoring tools and lab environments
• Manage the training calendar, cohort scheduling, and session logistics as the program grows
• Build the operational foundation for future certifications
• Define and track program KPIs: active learners, course completions, assessment outcomes, and adoption and depth of product usage among trained users
• Gather and act on learner feedback to continuously improve content and delivery
• Report on the Academy's impact on customer adoption, retention, and growth
• Surface learner insights and engagement signals to Customer Success and account teams
• Partner with CTI Advisors, Solution Engineers, and threat researchers to capture and codify subject matter expertise
• Align with Product on roadmap and releases so training lands alongside new capabilities
• Work with Customer Success and Sales to integrate training into onboarding, adoption, and renewal motions
• Champion the voice of the learner, feeding customer insights back to Product and Engineering

Skills

• ● 4+ years in Cybersecurity, with hands-on experience in CTI, threat hunting, SOC, or incident response roles
• ● 2+ years designing and delivering technical training, enablement, or customer education for external audiences
• ● Demonstrated experience building technical training content: courses, labs, exercises, or workshops
• ● Strong knowledge of core network protocols (TCP/IP, DNS, HTTP) and how adversaries build and operate infrastructure
• ● Practical threat hunting and investigation skills: pivoting, passive DNS, open ports, certificates, and network telemetry
• ● Familiarity with MITRE ATT&CK, the intelligence lifecycle, and CTI operations
• ● Experience with threat intelligence platforms, SIEMs, or SOARs; basic scripting (e.g., Python) is a plus
• ● Exceptional presentation and facilitation skills, live and on camera, for audiences from new analysts to CTI leadership
• ● Strong instructional instincts: able to break complex analytical concepts into clear, practical learning experiences
• ● Self-starter comfortable building a program from the ground up with limited precedent
• ● Organized and metrics-driven, able to run content, delivery, platform, and reporting work streams in parallel
• ● Bachelor's degree or equivalent experience in Computer Science, Information Security, or related field
• Occasional travel within the US and internationally for customer workshops, industry events, and team meetings is required
• This is a remote position
• ● Experience administering or building on an LMS and using content authoring tools (e.g., Articulate, Camtasia) is strongly preferred
• ● Cybersecurity certifications such as GCTI, GCIA, or CISSP, or instructional credentials such as CPTD (preferred)

Benefits

• Remote position
• Collaborative, mission-driven culture

Company Overview