Join the mission to make the digital world safer.
Team Cymru's mission is to save and improve human lives by helping public and private sector analysts track and take down cybercriminals, visibility into global cyber threat activity and are a key intelligence source for leading cybersecurity and threat intelligence vendors.
Our Pure Signal™ platform gives enterprise security teams on-demand access to global internet traffic telemetry, providing clarity into what's happening across the internet with a level of visibility comparable to their own internal networks. This allows organizations to close detection gaps, accelerate incident response, and get ahead of critical, recurring threats.
Team Cymru is a fast-paced, distribution-focused, private equity–backed company where your work directly supports a mission that protects millions worldwide.
This critical role builds and delivers the Team Cymru Academy, our customer education program. The Academy drives two connected outcomes: our customers maximize the value they get from Team Cymru, and we deepen adoption, engagement, and utilization across our customer base, the foundation of gross and net revenue retention (GRR and NRR). You will take our training from impactful but ad-hoc sessions to a structured, role-based Academy with clear learning paths, hands-on labs, and measurable outcomes, owning the program end-to-end.
As a key member of the Customer Success team, you will work alongside our CTI Advisors and Customer Success Managers, turning their subject matter expertise and your own into scalable learning experiences. You will teach practitioners how to think, not just where to click. This role is ideal for someone with strong technical acumen, instructional passion, and a drive to build a program from the ground up.
Key Responsibilities:
Curriculum Design & Development
- Design role-based learning paths for Threat Intel Analysts, SOC/IR intelligence consumers, CTI Leads, and platform specialists, spanning foundational CTI concepts through advanced analysis
- Build engaging courses across formats: instructor-led sessions, self-paced e-learning, videos, and hands-on labs grounded in real-world adversary infrastructure and threat hunting scenarios
- Cover the product workflows that matter to practitioners: threat hunting, investigations, reporting, and automation
- Develop the included fundamentals tier (CTI + product onboarding for all customers) and the subscription tier of intermediate and advanced learning paths and labs
- Keep content current with product releases and the evolving threat landscape through a regular refresh cycle
Training Delivery
- Deliver live virtual and in-person training, from fundamentals to advanced, hands-on master classes in threat hunting and adversary infrastructure mapping
- Coach analysts through realistic investigations using Team Cymru's solutions, building both product fluency and analytical tradecraft
- Represent the Academy at customer on-sites, user conferences, and industry events
- Adapt delivery to diverse audiences, from new analysts to senior threat hunters and CTI leadership
Academy Operations & Platform
- Stand up and administer the Academy's learning platform (LMS), including learning paths, enrollments, assessments, and learner support
- Establish scalable content production using modern authoring tools and lab environments
- Manage the training calendar, cohort scheduling, and session logistics as the program grows
- Build the operational foundation for future certifications
Measurement & Continuous Improvement
- Define and track program KPIs: active learners, course completions, assessment outcomes, and adoption and depth of product usage among trained users
- Gather and act on learner feedback to continuously improve content and delivery
- Report on the Academy's impact on customer adoption, retention, and growth
- Surface learner insights and engagement signals to Customer Success and account teams
Cross-functional Collaboration
- Partner with CTI Advisors, Solution Engineers, and threat researchers to capture and codify subject matter expertise
- Align with Product on roadmap and releases so training lands alongside new capabilities
- Work with Customer Success and Sales to integrate training into onboarding, adoption, and renewal motions
- Champion the voice of the learner, feeding customer insights back to Product and Engineering
Qualifications & Experience
- 4+ years in Cybersecurity, with hands-on experience in CTI, threat hunting, SOC, or incident response roles
- 2+ years designing and delivering technical training, enablement, or customer education for external audiences
- Demonstrated experience building technical training content: courses, labs, exercises, or workshops
- Experience administering or building on an LMS and using content authoring tools (e.g., Articulate, Camtasia) is strongly preferred
Additional Skills
- Strong knowledge of core network protocols (TCP/IP, DNS, HTTP) and how adversaries build and operate infrastructure
- Practical threat hunting and investigation skills: pivoting, passive DNS, open ports, certificates, and network telemetry
- Familiarity with MITRE ATT&CK, the intelligence lifecycle, and CTI operations
- Experience with threat intelligence platforms, SIEMs, or SOARs; basic scripting (e.g., Python) is a plus
- Exceptional presentation and facilitation skills, live and on camera, for audiences from new analysts to CTI leadership
- Strong instructional instincts: able to break complex analytical concepts into clear, practical learning experiences
- Self-starter comfortable building a program from the ground up with limited precedent
- Organized and metrics-driven, able to run content, delivery, platform, and reporting work streams in parallel
Education and Certifications
- Bachelor's degree or equivalent experience in Computer Science, Information Security, or related field
- Cybersecurity certifications such as GCTI, GCIA, or CISSP, or instructional credentials such as CPTD (preferred)
Travel
Occasional travel within the US and internationally for customer workshops, industry events, and team meetings is required
At Team Cymru, we provide unmatched global threat intelligence that empowers organizations to proactively disrupt adversaries. You'll be at the forefront of cybersecurity innovation, helping customers harness the full power of our threat intelligence to achieve critical business and security outcomes.
We offer a collaborative, mission-driven culture where your expertise and impact will directly contribute to improving global security.
Ready to make an impact?
Apply now and help shape the financial future of a company protecting millions worldwide.
This job description is not exhaustive. Responsibilities may evolve as needed. Team Cymru is an equal opportunity employer and welcomes applicants from all backgrounds. This is a remote position.
Originally posted on Himalayas