Technical Trainer - Curriculum Developer

Team Cymru•Lake Mary, FL

About The Position

Join the mission to make the digital world safer. About Team Cymru Team Cymru's mission is to save and improve human lives by helping public and private sector analysts track and take down cybercriminals, visibility into global cyber threat activity and are a key intelligence source for leading cybersecurity and threat intelligence vendors. Our Pure Signal™ platform gives enterprise security teams on-demand access to global internet traffic telemetry, providing clarity into what's happening across the internet with a level of visibility comparable to their own internal networks. This allows organizations to close detection gaps, accelerate incident response, and get ahead of critical, recurring threats. Team Cymru is a fast-paced, distribution-focused, private equity–backed company where your work directly supports a mission that protects millions worldwide. This critical role builds and delivers the Team Cymru Academy, our customer education program. The Academy drives two connected outcomes: our customers maximize the value they get from Team Cymru, and we deepen adoption, engagement, and utilization across our customer base, the foundation of gross and net revenue retention (GRR and NRR). You will take our training from impactful but ad-hoc sessions to a structured, role-based Academy with clear learning paths, hands-on labs, and measurable outcomes, owning the program end-to-end. As a key member of the Customer Success team, you will work alongside our CTI Advisors and Customer Success Managers, turning their subject matter expertise and your own into scalable learning experiences. You will teach practitioners how to think, not just where to click. This role is ideal for someone with strong technical acumen, instructional passion, and a drive to build a program from the ground up.

Requirements

4+ years in Cybersecurity, with hands-on experience in CTI, threat hunting, SOC, or incident response roles
2+ years designing and delivering technical training, enablement, or customer education for external audiences
Demonstrated experience building technical training content: courses, labs, exercises, or workshops
Experience administering or building on an LMS and using content authoring tools (e.g., Articulate, Camtasia) is strongly preferred
Strong knowledge of core network protocols (TCP/IP, DNS, HTTP) and how adversaries build and operate infrastructure
Practical threat hunting and investigation skills: pivoting, passive DNS, open ports, certificates, and network telemetry
Familiarity with MITRE ATT&CK, the intelligence lifecycle, and CTI operations
Experience with threat intelligence platforms, SIEMs, or SOARs; basic scripting (e.g., Python) is a plus
Exceptional presentation and facilitation skills, live and on camera, for audiences from new analysts to CTI leadership
Strong instructional instincts: able to break complex analytical concepts into clear, practical learning experiences
Self-starter comfortable building a program from the ground up with limited precedent
Organized and metrics-driven, able to run content, delivery, platform, and reporting work streams in parallel
Bachelor's degree or equivalent experience in Computer Science, Information Security, or related field

Nice To Haves

Cybersecurity certifications such as GCTI, GCIA, or CISSP, or instructional credentials such as CPTD (preferred)

Responsibilities

Design role-based learning paths for Threat Intel Analysts, SOC/IR intelligence consumers, CTI Leads, and platform specialists, spanning foundational CTI concepts through advanced analysis
Build engaging courses across formats: instructor-led sessions, self-paced e-learning, videos, and hands-on labs grounded in real-world adversary infrastructure and threat hunting scenarios
Cover the product workflows that matter to practitioners: threat hunting, investigations, reporting, and automation
Develop the included fundamentals tier (CTI + product onboarding for all customers) and the subscription tier of intermediate and advanced learning paths and labs
Keep content current with product releases and the evolving threat landscape through a regular refresh cycle
Deliver live virtual and in-person training, from fundamentals to advanced, hands-on master classes in threat hunting and adversary infrastructure mapping
Coach analysts through realistic investigations using Team Cymru's solutions, building both product fluency and analytical tradecraft
Represent the Academy at customer on-sites, user conferences, and industry events
Adapt delivery to diverse audiences, from new analysts to senior threat hunters and CTI leadership
Stand up and administer the Academy's learning platform (LMS), including learning paths, enrollments, assessments, and learner support
Establish scalable content production using modern authoring tools and lab environments
Manage the training calendar, cohort scheduling, and session logistics as the program grows
Build the operational foundation for future certifications
Define and track program KPIs: active learners, course completions, assessment outcomes, and adoption and depth of product usage among trained users
Gather and act on learner feedback to continuously improve content and delivery
Report on the Academy's impact on customer adoption, retention, and growth
Surface learner insights and engagement signals to Customer Success and account teams
Partner with CTI Advisors, Solution Engineers, and threat researchers to capture and codify subject matter expertise
Align with Product on roadmap and releases so training lands alongside new capabilities
Work with Customer Success and Sales to integrate training into onboarding, adoption, and renewal motions
Champion the voice of the learner, feeding customer insights back to Product and Engineering