Job Description

Cyber Security Content Engineer, Blue Team - public cloud platform
PCD330064

The Role

We are looking for a Content Engineer to help us research, plan, and create advanced content and virtual labs for our online courses. The ideal candidate has extensive experience in blue team cyber security roles, hands-on cloud security experience and a strong background in training content development.
Technical Skills and Experience
To be considered for this opportunity, you must have at least 3 years of relevant cyber security industry experience in roles such as L3/L4 SOC Analyst, Security Engineer, Incident Responder, Threat Hunter or Digital Forensics Investigator, with a strong focus on public cloud platform. Ideally, you have worked as in a defensive security role in an public cloud platform-based organisation.

Benefits and Perks:
💸 Salary - We hire across 35+ countries. We determine salaries based on Geographic Location, Seniority, Interview Performance, and Market Rates using leading compensation benchmarking tools.
🚣 100% Remote - In a fully digital world, work from anywhere you want!
🕒 Flexi Time - Choose your own hours as long as you have at least 4 hours of overlap with the UK timezone (from 8am - 6pm)
💻 Tools - a dedicated work laptop + any accessories you need to do your best work.
👕 Swag Pack - start your TryHackMe journey with a branded swag bundle!
💪 Personal Development - £2,500 training budget to acquire certifications, and more.
⛱️ Company Retreat - an annual company retreat, fully paid for by us!
🍕Lunch on us - whether you are a pizza-lover, salad obsessed or a big sushi fan, TryHackMe will cover the cost of your lunch order during our recurring company virtual lunches.
🧡 Health Insurance - if you are in a country that does not have public health care.
🍼 Enhanced Maternity and Paternity- an enhanced package on top of statutory requirements.
💸 401k / Pension - TryHackMe makes it easy to save money for your retirement.
Our Hiring Process
Stage 1: Short introduction call (30 mins)
Stage 2: Technical Take Home Exercise
Stage 3: Technical interview(one hour)
Stage 4: Final call with a Co-Founder (30 mins)
At this time, we are unable to provide sponsorship.

Preferred Skills (nice-to-have):
Creating challenges for capture the flags (CTFs)
Programming experience in any of the following: Python, PHP, Bash, Powershell
Experience leading/ coaching/ mentoring others
Certifications such as AZ-500, SC-300, SC-200, SC-100, SC-401 or broader ones like SAL1, BTL2, CySa, etc are nice to have;

You should also demonstrate:
Strong expertise in core blue team areas: incident detection and response, threat intelligence, log analysis, security monitoring, and digital forensics.
A deep understanding of networking, computing, and operating systems as they relate to security practices.
Deep understanding and hands-on experience with MS public cloud platform infrastructure, tools and processes
Familiarity with blue team tooling (e.g., SIEM, EDR, IDS/IPS, forensic tools) and methodologies (e.g., MITRE ATT&CK framework, log analysis, malware analysis).
Proven ability to research and adapt to emerging threats and the organisation and translate that knowledge into engaging training content.
Strong verbal and written English communication skills, essential for conveying complex technical concepts.
Job Responsibilities
Research, design, and develop defensive cyber security training material with supporting hands-on lab exercises (such as virtual machines and datasets for analysis).
Collaborate with the Content the organisation Team to support security training coverage and identify content development opportunities.
Experience developing and configuring public cloud platform labs and sample datasets for realistic cybersecurity labs.
Provide guidance and support to other Content the organisation Team members in areas of expertise.
Take charge of planning and designing portions of the content development roadmap.
Analyze industry trends in tooling and techniques and recreate them as teachable content.
Strategically plan, review, and schedule content with our Cloud content the team.