Job Description

Senior Content Engineer & Researcher (Blue Team)

TryHackMe is the fastest-growing cyber security training platform with almost two million users. We make learning fun through immersive learning environments and an awesome product experience. We’ve become one of the largest cyber security training platforms with a very young product (under 3 years). This is just the beginning of our growth journey; we want to continue to create world class learning experiences for individuals and teams! 🥷

We're looking for a Senior Content Engineer & Researcher to join our Blue Team to help us research, plan and create advanced content and virtual labs for our online courses focusing.

Responsibilities:
• Research, design and develop defensive cyber security training material with supporting hands-on lab exercises (such as virtual machines and datasets to analyse)
• Collaborate with the Content Engineering Team to support TryHackMe’s security training coverage and identify content development opportunities
• Collaborate with Content Engineering Team members to provide guidance and support in areas of expertise
• Take charge of planning and designing portions of the content development roadmap
• Collaborate with the Content Engineering Team Manager to improve the content development process
• Analyse industry trends in tooling and techniques and recreate that as teachable content
• Use research to provide a source of expertise to the content development team
• Work with our (blue team) content engineering team to strategically plan, review and schedule content.

Key Skills & Experience:

You must already have:
• Ideally at least 5 years of relevant industry experience, with a strong technical understanding of networking, computing and cyber security
• Instructional design and training experience (such as developing and running cyber security training)
• Ability to develop and configure virtual machines, and sample datasets
• Strong verbal and written communication skills
• Have experience with one or more of the following topics: a) Incident Response, b) Digital Forensics, c) Security Engineering, d)Threat Hunting, e)Threat Emulation

It would be nice (but not essential) if you also have:
• Creating challenges for capture the flags (CTFs)
• Programming experience in any of the following: Python, PHP, Bash, Powershell
• Experience leading/ coaching/ mentoring others

Perks & Benefits:
🚣 Remote - In a fully digital world, we're not stopping you from working anywhere you want!
🕒 Flexi Time - Choose your own hours as long as you have at least 4 hours of overlap with London GMT (from 8am - 6pm)
⛱️ Company Retreat - We're planning an annual company retreat, fully paid for by us!
🧡 Health Insurance - if you're in a country that doesn't have public health care.
💻 Tools - You'll receive a dedicated work laptop, and any other accessories you need to do your best work.
💸 401k / Pension - TryHackMe makes it easy to save money for retirement.
💪 Personal Development - training budget to acquire certifications, and more.

Our Hiring Process
Stage 1: Quick intro call with our internal recruiter
Stage 2: Technical take home exercise
Stage 3: Interview with Marta, our Content Engineering Manager

Quick response

Required Knowledge

• K0001   Knowledge of computer networking concepts and protocols, and network security methodologies.
• K0004   Knowledge of cybersecurity and privacy principles.
• K0005   Knowledge of cyber threats an`d vulnerabilities.
• K0059   Knowledge of new and emerging information technology (IT) and cybersecurity technologies.
• K0147   Knowledge of emerging security issues, risks, and vulnerabilities.
• K0208   Knowledge of computer based training and e-learning services.
• K0252   Knowledge of training and education principles and methods for curriculum design, teaching and instruction for individuals and groups, and the measurement of training and education effects.
• K0130   Knowledge of virtualization technologies and virtual machine development and maintenance.
• K0313   Knowledge of external organizations and academic institutions with cyber focus (e.g., cyber curriculum/training and Research & Development).

Required Skills

• S0064   Skill in developing and executing technical training programs and curricula.
• S0006   Skill in applying confidentiality, integrity, and availability principles.
• S0051   Skill in the use of penetration testing tools and techniques.
• S0057   Skill in using protocol analyzers.
• S0073   Skill in using virtual machines. (e.g., Microsoft Hyper-V, VMWare vSphere, Citrix XenDesktop/Server, Amazon Elastic Compute Cloud, etc.).
• S0081   Skill in using network analysis tools to identify vulnerabilities. (e.g., fuzzing, nmap, etc.).
• S0084   Skill in configuring and utilizing network protection components (e.g., Firewalls, VPNs, network intrusion detection systems).
• S0121   Skill in system, network, and OS hardening techniques. (e.g., remove unnecessary services, password policies, network segmentation, enable logging, least privilege, etc.).
• S0156   Skill in performing packet-level analysis.
• S0184   Skill in analyzing traffic to identify network devices.
• S0281   Skill in technical writing.
• S0301   Skill in writing about facts and ideas in a clear, convincing, and organized manner.

Required Abilities

• A0004  Ability to develop curriculum that speaks to the topic at the appropriate level for the target audience.
• A0032  Ability to develop curriculum for use within a virtual environment.