Defensive Cyber Warfare (DCW) Subject Matter Expert (SME)/Instructor

Aleut Federal•Colorado Springs, CO

2d•$140,000 - $155,000

About The Position

Aleut Federal is seeking a highly qualified Defensive Cyber Warfare (DCW) Subject Matter Expert (SME)/Instructor to support the 537 TRS Officer Training Course (OTC). The instructor will use extensive technical knowledge and operational experience in defensive cyberspace operations to deliver instruction, develop realistic hands-on training scenarios, and prepare students to identify, analyze, and respond to evolving cyber threats. The role requires a strong background in cybersecurity operations, network defense, incident response, threat analysis, and security monitoring, as well as the ability to translate complex technical concepts into practical, engaging instruction aligned with established training objectives and operational requirements. The position includes delivering classroom and hands-on training; developing, reviewing, validating, and updating course materials according to Instructional Systems Design principles; and maintaining technical and operational alignment with current threats and DoD requirements. The instructor will assess student performance, collaborate with other training and technical personnel, and contribute to curriculum improvement. The role also supports cyber range environments by developing, configuring, maintaining, and validating them for instruction. This includes creating realistic network environments and exercises, troubleshooting laboratory and virtual machine issues, coordinating with IT personnel and technical SMEs, and validating exercises before student use. Candidates must possess an active Top Secret/SCI clearance and maintain eligibility for classified access throughout employment.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, or a closely related technical discipline.
At least six years of relevant professional experience in cybersecurity, defensive cyber operations, network defense, incident response, or security operations.
Demonstrated experience with incident analysis, threat detection, and defensive security technologies.
Advanced knowledge of Defensive Cyber Warfare, including network traffic analysis, intrusion detection, incident handling, and threat mitigation.
Proficiency with Windows and Linux operating systems, system administration, endpoint security, and network security configurations.
Ability to analyze technical information and explain complex cybersecurity concepts to audiences with varying technical backgrounds.
Strong written and verbal communication skills.
Ability to work independently and collaboratively in a mission-focused training environment.
Active Top Secret/SCI security clearance and ability to maintain eligibility for access to classified information throughout employment.
Proficiency in several of the following areas: SIEM; IDS/IPS; network traffic and packet analysis; DFIR; EDR; vulnerability assessment and remediation; threat intelligence and hunting; Windows and Linux security administration; network security architecture and firewall configuration; Python, PowerShell, or Bash scripting and automation; MITRE ATT&CK and Cyber Kill Chain methodologies.

Nice To Haves

Master's degree in Cybersecurity, Information Assurance, Computer Science, or a related discipline.
Previous experience delivering technical instruction in a DoW, military, or government training environment.
Experience supporting U.S. Space Force, U.S. Air Force, or joint cyberspace operations.
Experience developing and administering cyber ranges, capture-the-flag exercises, and virtualized training environments.
Knowledge of DoW cybersecurity policies, Risk Management Framework (RMF), and Zero Trust security principles.
Experience developing automated cybersecurity tools, scripts, or laboratory solutions.
One or more of the following certifications: GIAC Certified Incident Handler (GCIH), GIAC Certified Enterprise Defender (GCED), GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Forensic Analyst (GCFA), GIAC Security Essentials (GSEC), CompTIA CySA+, CompTIA Security+, CISSP, or CEH.

Responsibilities

Deliver classroom-based and hands-on instruction on Defensive Cyber Warfare principles, methodologies, tools, and operational procedures.
Teach network defense, cybersecurity fundamentals, threat detection, incident response, vulnerability management, and security operations.
Facilitate practical exercises, technical demonstrations, and scenario-based training.
Evaluate students through written assessments, practical exercises, and demonstrated technical competencies.
Adapt instruction to students with varying levels of experience and technical proficiency.
Prepare lessons, conduct technical rehearsals, and maintain instructional readiness through professional development.
Develop, review, validate, and update instructional materials in accordance with Instructional Systems Design principles.
Keep course materials technically accurate, operationally relevant, and aligned with current cybersecurity threats and DoD requirements.
Collaborate with instructional designers, curriculum developers, and other SMEs to improve training effectiveness.
Identify ways to incorporate emerging cybersecurity technologies, techniques, and industry best practices into the curriculum.
Participate in curriculum validation, lesson reviews, and continuous improvement activities.
Develop student exercises, instructional guides, assessment materials, and technical reference documentation.
Apply knowledge of adversarial tactics, techniques, and procedures to create realistic defensive training scenarios.
Use security monitoring tools and analyze network traffic, system logs, alerts, and indicators of compromise to identify potential malicious activity.
Develop, configure, maintain, and validate cyber range environments supporting DCW instruction.
Create realistic network environments and practical exercises simulating operational cybersecurity challenges.
Troubleshoot virtual machines, network configurations, security tools, and student laboratory issues.
Coordinate with IT personnel and technical SMEs to keep training environments operational and available.
Support integration of cybersecurity tools, technologies, and training capabilities into laboratory environments.
Validate laboratory exercises for functionality, accuracy, and alignment with learning objectives before student execution.