Instructor - D&R

Key Responsibilities
Plan, design and deliver D&R training sessions with hands-on labs and assessments
Train learners on penetration testing, including vulnerability assessment, penetration-testing methodologies, web and network security testing, exploitation in authorised labs, and reporting and remediation
Cover red teaming, including adversary simulation, attack-path analysis, reconnaissance, controlled attack execution and MITRE ATT&CK mapping
Teach Wi-Fi penetration testing, including wireless security assessment, Wi-Fi protocols, encryption standards, access-point security, wireless traffic analysis and authorised wireless attack simulations
Train learners on blue teaming and defensive security operations, including log analysis, threat detection, threat hunting, detection engineering, security monitoring, log correlation and defensive control validation
Explain SOC implementation, including SOC architecture, SIEM onboarding, log-source integration, use-case development, alert triage, escalation workflows, SOC KPIs and operational procedures
Cover threat intelligence, including the intelligence lifecycle, IOC analysis, threat actor profiling, TTP mapping, threat feeds, and intelligence sharing using STIX/TAXII and MITRE ATT&CK
Cover incident response and digital forensics, including incident triage, containment, eradication, recovery, evidence preservation, forensic investigation, root-cause analysis and post-incident reporting
Teach SOAR automation, including automating detection, triage and response workflows
Teach patch and configuration management, including asset inventory, vulnerability prioritisation, patch deployment, configuration baselines, hardening, compliance checks and remediation validation
Cover risk assessment, business continuity and disaster recovery, including Business Impact Analysis (BIA), RTO/RPO, backup and recovery strategies, disaster recovery planning, testing and business continuity exercises
Demonstrate AI for cybersecurity, using Python and machine learning for anomaly detection, security-log analysis, threat classification, threat detection and detection automation
Track batch attendance, performance and feedback, and resolve learner doubts
Coordinate with internal teams to complete schedules on time
Required Skills
Offensive Security: penetration testing, vulnerability assessment, red teaming and Wi-Fi security assessment tools
Defensive Security: blue teaming, threat hunting, detection engineering, SIEM use-case development and SOC operations
SOC Engineering & Monitoring: SIEM deployment and integration, log onboarding, detection rules, alert triage and SOC workflow design; tools such as Splunk, ELK Stack, Graylog, Security Onion, Sysmon, Osquery, Velociraptor
Network Detection: Wireshark, Nmap, Snort, Suricata, Zeek, Arkime, pfSense, iptables
Threat Intelligence: IOC enrichment, MITRE ATT&CK, STIX/TAXII, threat feeds and intelligence platforms such as MISP, Yeti, OpenTAXII, OTX, STIX tools
Endpoint & DLP: CrowdStrike Falcon, OpenDLP, MyDLP, UEBA tools
Incident Response, SOAR & Forensics: digital evidence handling, memory and disk forensics, incident investigation and recovery; tools such as Cortex XSOAR, Splunk Phantom, TheHive, Autopsy, Volatility, Ghidra
Patch & Configuration Management: vulnerability remediation, system hardening, configuration compliance and patch automation; tools such as WSUS, Automox, OpenSCAP, Ansible, Puppet, Chef, SaltStack
Risk, Business Continuity & Recovery: risk assessment, BIA, RTO/RPO, backup validation, disaster recovery, recovery testing, backup and cloud disaster recovery, CASB, CSPM
AI for Cybersecurity & Data Science: Python-based security analytics, data processing, anomaly detection and basic machine-learning model development; tools such as Python, Pandas, NumPy, Scikit-learn, TensorFlow, Jupyter, Flask
Practical Training Delivery: ability to configure lab environments, demonstrate tools, develop assessments and guide learners through controlled exercises
Strong communication and facilitation skills.

Work arrangement
No