Technical Trainer - Curriculum Developer

Remote
Full Time
Experienced

Join the mission to make the digital world safer.

About Team Cymru

Team Cymru's mission is to save and improve human lives by helping public and private sector analysts track and take down cybercriminals, visibility into global cyber threat activity and are a key intelligence source for leading cybersecurity and threat intelligence vendors.

Our Pure Signal™ platform gives enterprise security teams on-demand access to global internet traffic telemetry, providing clarity into what's happening across the internet with a level of visibility comparable to their own internal networks. This allows organizations to close detection gaps, accelerate incident response, and get ahead of critical, recurring threats.

Team Cymru is a fast-paced, distribution-focused, private equity–backed company where your work directly supports a mission that protects millions worldwide.

This critical role builds and delivers the Team Cymru Academy, our customer education program. The Academy drives two connected outcomes: our customers maximize the value they get from Team Cymru, and we deepen adoption, engagement, and utilization across our customer base, the foundation of gross and net revenue retention (GRR and NRR). You will take our training from impactful but ad-hoc sessions to a structured, role-based Academy with clear learning paths, hands-on labs, and measurable outcomes, owning the program end-to-end.

As a key member of the Customer Success team, you will work alongside our CTI Advisors and Customer Success Managers, turning their subject matter expertise and your own into scalable learning experiences. You will teach practitioners how to think, not just where to click. This role is ideal for someone with strong technical acumen, instructional passion, and a drive to build a program from the ground up.

Key Responsibilities:

Curriculum Design & Development

● Design role-based learning paths for Threat Intel Analysts, SOC/IR intelligence consumers, CTI Leads, and platform specialists, spanning foundational CTI concepts through advanced analysis

● Build engaging courses across formats: instructor-led sessions, self-paced e-learning, videos, and hands-on labs grounded in real-world adversary infrastructure and threat hunting scenarios

● Cover the product workflows that matter to practitioners: threat hunting, investigations, reporting, and automation

● Develop the included fundamentals tier (CTI + product onboarding for all customers) and the subscription tier of intermediate and advanced learning paths and labs

● Keep content current with product releases and the evolving threat landscape through a regular refresh cycle

Training Delivery

● Deliver live virtual and in-person training, from fundamentals to advanced, hands-on master classes in threat hunting and adversary infrastructure mapping

● Coach analysts through realistic investigations using Team Cymru's solutions, building both product fluency and analytical tradecraft

● Represent the Academy at customer on-sites, user conferences, and industry events

● Adapt delivery to diverse audiences, from new analysts to senior threat hunters and CTI leadership

Academy Operations & Platform

● Stand up and administer the Academy's learning platform (LMS), including learning paths, enrollments, assessments, and learner support

● Establish scalable content production using modern authoring tools and lab environments

● Manage the training calendar, cohort scheduling, and session logistics as the program grows

● Build the operational foundation for future certifications

Measurement & Continuous Improvement

● Define and track program KPIs: active learners, course completions, assessment outcomes, and adoption and depth of product usage among trained users

● Gather and act on learner feedback to continuously improve content and delivery

● Report on the Academy's impact on customer adoption, retention, and growth

● Surface learner insights and engagement signals to Customer Success and account teams

Cross-functional Collaboration

● Partner with CTI Advisors, Solution Engineers, and threat researchers to capture and codify subject matter expertise

● Align with Product on roadmap and releases so training lands alongside new capabilities

● Work with Customer Success and Sales to integrate training into onboarding, adoption, and renewal motions

● Champion the voice of the learner, feeding customer insights back to Product and Engineering

Qualifications & Experience

● 4+ years in Cybersecurity, with hands-on experience in CTI, threat hunting, SOC, or incident response roles

● 2+ years designing and delivering technical training, enablement, or customer education for external audiences

● Demonstrated experience building technical training content: courses, labs, exercises, or workshops

● Experience administering or building on an LMS and using content authoring tools (e.g., Articulate, Camtasia) is strongly preferred

Additional Skills

● Strong knowledge of core network protocols (TCP/IP, DNS, HTTP) and how adversaries build and operate infrastructure

● Practical threat hunting and investigation skills: pivoting, passive DNS, open ports, certificates, and network telemetry

● Familiarity with MITRE ATT&CK, the intelligence lifecycle, and CTI operations

● Experience with threat intelligence platforms, SIEMs, or SOARs; basic scripting (e.g., Python) is a plus

● Exceptional presentation and facilitation skills, live and on camera, for audiences from new analysts to CTI leadership

● Strong instructional instincts: able to break complex analytical concepts into clear, practical learning experiences

● Self-starter comfortable building a program from the ground up with limited precedent

● Organized and metrics-driven, able to run content, delivery, platform, and reporting work streams in parallel

Education and Certifications

● Bachelor's degree or equivalent experience in Computer Science, Information Security, or related field

● Cybersecurity certifications such as GCTI, GCIA, or CISSP, or instructional credentials such as CPTD (preferred)

Travel

Occasional travel within the US and internationally for customer workshops, industry events, and team meetings is required

Why Join Team Cymru? 

At Team Cymru, we provide unmatched global threat intelligence that empowers organizations to proactively disrupt adversaries. As a Customer Success Engineer, you will be at the forefront of cybersecurity innovation, helping customers harness the full power of our threat intelligence to achieve critical business and security outcomes. 

We offer a collaborative, mission-driven culture where your expertise and impact will directly contribute to improving global security. 

Ready to make an impact?

Apply now and help shape the financial future of a company protecting millions worldwide.

This job description is not exhaustive. Responsibilities may evolve as needed. Team Cymru is an equal opportunity employer and welcomes applicants from all backgrounds.

Share

Apply for this position

Required*
We've received your resume. Click here to update it.
Attach resume as .pdf, .doc, .docx, .odt, .txt, or .rtf (limit 5MB) or Paste resume

Paste your resume here or Attach resume file

To comply with government Equal Employment Opportunity and/or Affirmative Action reporting regulations, we are requesting (but NOT requiring) that you enter this personal data. This information will not be used in connection with any employment decisions, and will be used solely as permitted by state and federal law. Your voluntary cooperation would be appreciated. Learn more.

Invitation for Job Applicants to Self-Identify as a U.S. Veteran
  • A “disabled veteran” is one of the following:
    • a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or
    • a person who was discharged or released from active duty because of a service-connected disability.
  • A “recently separated veteran” means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.
  • An “active duty wartime or campaign badge veteran” means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
  • An “Armed forces service medal veteran” means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.
Veteran status



Voluntary Self-Identification of Disability
Voluntary Self-Identification of Disability Form CC-305
OMB Control Number 1250-0005
Expires 05/31/2026
Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Please check one of the boxes below:

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

You must enter your name and date
Human Check*