Technical Trainer - Curriculum Developer at Team Cymru

Job description

Join the mission to make the digital world safer. About Team Cymru Team Cymru's mission is to save and improve human lives by helping public and private sector analysts track and take down cybercriminals, visibility into global cyber threat activity and are a key intelligence source for leading cybersecurity and threat intelligence vendors. Our Pure Signal™ platform gives enterprise security teams on-demand access to global internet traffic telemetry, providing clarity into what's happening across the internet with a level of visibility comparable to their own internal networks. This allows organizations to close detection gaps, accelerate incident response, and get ahead of critical, recurring threats. Team Cymru is a fast-paced, distribution-focused, private equity–backed company where your work directly supports a mission that protects millions worldwide. This critical role builds and delivers the Team Cymru Academy, our customer education program. The Academy drives two connected outcomes: our customers maximize the value they get from Team Cymru, and we deepen adoption, engagement, and utilization across our customer base, the foundation of gross and net revenue retention (GRR and NRR). You will take our training from impactful but ad-hoc sessions to a structured, role-based Academy with clear learning paths, hands-on labs, and measurable outcomes, owning the program end-to-end. As a key member of the Customer Success team, you will work alongside our CTI Advisors and Customer Success Managers, turning their subject matter expertise and your own into scalable learning experiences. You will teach practitioners how to think, not just where to click. This role is ideal for someone with strong technical acumen, instructional passion, and a drive to build a program from the ground up. Key Responsibilities: Curriculum Design & Development ● Design role-based learning paths for Threat Intel Analysts, SOC/IR intelligence consumers, CTI Leads, and platform specialists, spanning foundational CTI concepts through advanced analysis ● Build engaging courses across formats: instructor-led sessions, self-paced e-learning, videos, and hands-on labs grounded in real-world adversary infrastructure and threat hunting scenarios ● Cover the product workflows that matter to practitioners: threat hunting, investigations, reporting, and automation ● Develop the included fundamentals tier (CTI + product onboarding for all customers) and the subscription tier of intermediate and advanced learning paths and labs ● Keep content current with product releases and the evolving threat landscape through a regular refresh cycle Training Delivery ● Deliver live virtual and in-person training, from fundamentals to advanced, hands-on master classes in threat hunting and adversary infrastructure mapping ● Coach analysts through realistic investigations using Team Cymru's solutions, building both product fluency and analytical tradecraft ● Represent the Academy at customer on-sites, user conferences, and industry events ● Adapt delivery to diverse audiences, from new analysts to senior threat hunters and CTI leadership Academy Operations & Platform ● Stand up and administer the Academy's learning platform (LMS), including learning paths, enrollments, assessments, and learner support ● Establish scalable content production using modern authoring tools and lab environments ● Manage the training calendar, cohort scheduling, and session logistics as the program grows ● Build the operational foundation for future certifications Measurement & Continuous Improvement ● Define and track program KPIs: active learners, course completions, assessment outcomes, and adoption and depth of product usage among trained users ● Gather and act on learner feedback to continuously improve content and delivery ● Report on the Academy's impact on customer adoption, retention, and growth ● Surface learner insights and engagement signals to Customer Success and account teams Cross-functional Collaboration ● Partner with CTI Advisors, Solution Engineers, and threat researchers to capture and codify subject matter expertise ● Align with Product on roadmap and releases so training lands alongside new capabilities ● Work with Customer Success and Sales to integrate training into onboarding, adoption, and renewal motions ● Champion the voice of the learner, feeding customer insights back to Product and Engineering Qualifications & Experience ● 4+ years in Cybersecurity, with hands-on experience in CTI, threat hunting, SOC, or incident response roles ● 2+ years designing and delivering technical training, enablement, or customer education for external audiences ● Demonstrated experience building technical training content: courses, labs, exercises, or workshops ● Experience administering or building on an LMS and using content authoring tools (e.g., Articulate, Camtasia) is strongly preferred Additional Skills ● Strong knowledge of core network protocols (TCP/IP, DNS, HTTP) and how adversaries build and operate infrastructure ● Practical threat hunting and investigation skills: pivoting, passive DNS, open ports, certificates, and network telemetry ● Familiarity with MITRE ATT&CK, the intelligence lifecycle, and CTI operations ● Experience with threat intelligence platforms, SIEMs, or SOARs; basic scripting (e.g., Python) is a plus ● Exceptional presentation and facilitation skills, live and on camera, for audiences from new analysts to CTI leadership ● Strong instructional instincts: able to break complex analytical concepts into clear, practical learning experiences ● Self-starter comfortable building a program from the ground up with limited precedent ● Organized and metrics-driven, able to run content, delivery, platform, and reporting work streams in parallel Education and Certifications ● Bachelor's degree or equivalent experience in Computer Science, Information Security, or related field ● Cybersecurity certifications such as GCTI, GCIA, or CISSP, or instructional credentials such as CPTD (preferred) Travel Occasional travel within the US and internationally for customer workshops, industry events, and team meetings is required Why Join Team Cymru? At Team Cymru, we provide unmatched global threat intelligence that empowers organizations to proactively disrupt adversaries. You'll be at the forefront of cybersecurity innovation, helping customers harness the full power of our threat intelligence to achieve critical business and security outcomes. We offer a collaborative, mission-driven culture where your expertise and impact will directly contribute to improving global security. Ready to make an impact? Apply now and help shape the financial future of a company protecting millions worldwide. This job description is not exhaustive. Responsibilities may evolve as needed. Team Cymru is an equal opportunity employer and welcomes applicants from all backgrounds. This is a remote position. #LI-BR1

Requirements

Must-haves

Join the mission to make the digital world safer.
Curriculum Design & Development
Design role-based learning paths for Threat Intel Analysts, SOC/IR intelligence consumers, CTI Leads, and platform specialists, spanning foundational CTI concepts through advanced analysis
Build engaging courses across formats: instructor-led sessions, self-paced e-learning, videos, and hands-on labs grounded in real-world adversary infrastructure and threat hunting scenarios
Cover the product workflows that matter to practitioners: threat hunting, investigations, reporting, and automation
Develop the included fundamentals tier (CTI + product onboarding for all customers) and the subscription tier of intermediate and advanced learning paths and labs
Keep content current with product releases and the evolving threat landscape through a regular refresh cycle
Training Delivery
Deliver live virtual and in-person training, from fundamentals to advanced, hands-on master classes in threat hunting and adversary infrastructure mapping
Coach analysts through realistic investigations using Team Cymru's solutions, building both product fluency and analytical tradecraft
Represent the Academy at customer on-sites, user conferences, and industry events
Adapt delivery to diverse audiences, from new analysts to senior threat hunters and CTI leadership
Academy Operations & Platform
Stand up and administer the Academy's learning platform (LMS), including learning paths, enrollments, assessments, and learner support
Establish scalable content production using modern authoring tools and lab environments
Manage the training calendar, cohort scheduling, and session logistics as the program grows
Build the operational foundation for future certifications
Measurement & Continuous Improvement
Define and track program KPIs: active learners, course completions, assessment outcomes, and adoption and depth of product usage among trained users
Gather and act on learner feedback to continuously improve content and delivery
Report on the Academy's impact on customer adoption, retention, and growth

Nice-to-haves

Experience administering or building on an LMS and using content authoring tools (e.g., Articulate, Camtasia) is strongly preferred
Experience with threat intelligence platforms, SIEMs, or SOARs; basic scripting (e.g., Python) is a plus
Cybersecurity certifications such as GCTI, GCIA, or CISSP, or instructional credentials such as CPTD (preferred)

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

python

Platform: jazzhr
Effort: medium