Defensive Cyber Warfare (DCW) Subject Matter Expert (SME)/Instructor

Aleut Career•Colorado Springs, CO

About The Position

Aleut Federal is seeking a Defensive Cyber Warfare (DCW) Subject Matter Expert/Instructor to support the 537 TRS Officer Training Course (OTC). The position uses technical expertise and operational experience in defensive cyberspace operations to deliver instruction, develop hands-on training scenarios, and prepare students to identify, analyze, and respond to cyber threats. The role requires a strong background in cybersecurity operations, network defense, incident response, threat analysis, and security monitoring, with the ability to translate complex concepts into practical instruction aligned with training objectives and operational requirements. The instructor delivers classroom and hands-on training, evaluates student performance, and adapts instruction to varying levels of experience. The role also develops and maintains curriculum and instructional materials using ISD principles, collaborates with instructional designers and other SMEs, and incorporates current threats, technologies, and practices. The position applies defensive cyber expertise and industry-standard tools to analyze network traffic, logs, alerts, and indicators of compromise. It also develops, configures, maintains, and validates cyber range environments and exercises, troubleshoots training lab issues, and coordinates with technical staff to keep training environments available and functional. Candidates must possess an active Top Secret/SCI clearance and maintain eligibility for classified access throughout employment.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, or a closely related technical discipline.
At least six years of relevant professional experience in cybersecurity, defensive cyber operations, network defense, incident response, or security operations.
Demonstrated experience with incident analysis, threat detection, and defensive security technologies.
Ability to analyze technical information and communicate complex cybersecurity concepts to audiences with varying technical backgrounds.
Strong written and verbal communication skills.
Ability to work independently and collaboratively in a mission-focused training environment.
Proficiency in several of the following areas: SIEM; IDS/IPS; network traffic and packet analysis; DFIR; EDR; vulnerability assessment and remediation; threat intelligence and threat hunting; Windows and Linux security administration; network security architecture and firewall configuration; Python, PowerShell, or Bash scripting and automation; MITRE ATT&CK and Cyber Kill Chain methodologies.
Active Top Secret/SCI security clearance and continued eligibility for access to classified information throughout employment.

Nice To Haves

Master's degree in Cybersecurity, Information Assurance, Computer Science, or a related discipline.
Previous experience delivering technical instruction within a DoW, military, or government training environment.
Experience supporting U.S. Space Force, U.S. Air Force, or joint cyberspace operations.
Experience developing and administering cyber ranges, capture-the-flag exercises, and virtualized training environments.
Knowledge of DoW cybersecurity policies, Risk Management Framework (RMF), and Zero Trust security principles.
Experience developing automated cybersecurity tools, scripts, or laboratory solutions.
One or more of the following certifications: GIAC Certified Incident Handler (GCIH), GIAC Certified Enterprise Defender (GCED), GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Forensic Analyst (GCFA), GIAC Security Essentials (GSEC), CompTIA CySA+, CompTIA Security+, CISSP, or CEH.

Responsibilities

Deliver classroom-based and hands-on instruction on Defensive Cyber Warfare principles, methodologies, tools, and procedures.
Teach network defense, cybersecurity fundamentals, threat detection, incident response, vulnerability management, and security operations.
Facilitate practical exercises, technical demonstrations, and scenario-based defensive cyberspace operations training.
Evaluate student performance through written assessments, practical exercises, and demonstrated technical competencies.
Adapt instruction to students with varying levels of experience and technical proficiency.
Prepare lessons, conduct technical rehearsals, and maintain instructional readiness through professional development.
Develop, review, validate, and update instructional materials in accordance with Instructional Systems Design principles.
Keep course materials technically accurate, operationally relevant, and aligned with current threats and DoD requirements.
Collaborate with instructional designers, curriculum developers, and SMEs to improve training effectiveness.
Identify opportunities to incorporate emerging cybersecurity technologies, techniques, and industry best practices into curriculum.
Participate in curriculum validation, lesson reviews, and continuous improvement initiatives.
Develop student exercises, instructional guides, assessment materials, and technical reference documentation.
Apply knowledge of adversarial tactics, techniques, and procedures to develop realistic defensive training scenarios.
Use cybersecurity tools and analyze network traffic, system logs, security alerts, and indicators of compromise to identify potentially malicious activity.
Demonstrate Windows and Linux operating systems, system administration, endpoint security, and network security configurations.
Develop, configure, maintain, and validate cyber range environments supporting instruction.
Create realistic network environments and practical exercises simulating operational cybersecurity challenges.
Troubleshoot virtual machines, network configurations, security tools, and student laboratory issues.
Coordinate with IT personnel and technical SMEs to keep training environments operational and available.
Support integration of new cybersecurity tools, technologies, and training capabilities into laboratory environments.
Validate laboratory exercises before student execution for functionality, accuracy, and alignment with learning objectives.