Instructor

We are looking for a highly skilled and experienced Blue Team Instructor to join our cyber academy in Ramat Gan, Israel. This role offers a unique opportunity to make a significant impact by training the next generation of cybersecurity professionals focused on defensive security. As a Blue Team Instructor, you will deliver in-depth training on network defense, threat detection, and incident response, equipping students with the essential skills to safeguard organizations against cyber threats.

Key Responsibilities:

• Design and deliver comprehensive instruction on network defense, threat hunting, identity access management (IAM), and security architecture.
• Develop and maintain an updated curriculum focused on security monitoring, threat intelligence, log analysis, and endpoint security.
• Lead hands-on exercises using tools like SIEM (Splunk, ELK), IDS/IPS systems, firewalls, and EDR solutions.
• Teach students how to identify, investigate, and respond to cyber incidents, including malware analysis, phishing investigations, and forensics.
• Guide students through log correlation, anomaly detection, and creating defensive playbooks to mitigate risks.
• Conduct labs on network security monitoring using tools such as Wireshark, Snort, Zeek, and TShark to detect malicious activity.
• Train students in vulnerability management techniques, including scanning, patching, and mitigation using tools like Nessus, Qualys, or OpenVAS.
• Lead lessons on incident response processes, including containment, eradication, and post-incident reviews.
• Provide training on cloud security defense strategies for platforms like AWS, Azure, and Google Cloud.
• Conduct blue vs. red team exercises, giving students real-world experience in detecting and mitigating attacks.
• Mentor students in critical thinking, problem-solving, and advanced cyber defense techniques.
• Organize cybersecurity simulations and capture-the-flag (CTF) challenges focused on defensive operations.

Technical Skills:

• Expertise in network defense, incident response, and threat hunting using tools such as SIEM (Splunk, ELK Stack, QRadar), IDS/IPS (Snort, Suricata), EDR (CrowdStrike, Carbon Black, Microsoft Defender ATP), and firewalls.
• Proficiency in log analysis and event correlation to detect and respond to security incidents.
• Experience with malware analysis tools like Cuckoo Sandbox, Remnux, and YARA rules.
• Familiarity with threat intelligence platforms (TIP) and frameworks like MITRE ATT&CK for detection rule creation.
• Hands-on experience with forensic analysis tools (FTK, Autopsy, Volatility) to investigate cyber incidents.
• Experience with vulnerability management tools (Nessus, Qualys, OpenVAS) and remediation techniques.
• Knowledge of cloud security for AWS, Azure, and Google Cloud, including IAM, network security groups, and monitoring.
• Experience with firewall management, intrusion detection, DDoS protection, and network segmentation.
• Ability to teach active defense strategies, such as honeypots and network deception techniques.
• Knowledge of cybersecurity frameworks (CIS, NIST, ISO 27001, GDPR) and secure configuration standards.

Requirements:

• Proven experience in Blue Team operations, network defense, or incident response roles.
• Expertise with SIEMs, IDS/IPS, firewalls, and EDR tools.
• Relevant certifications (e.g., GCIH, CISSP, CEH, GCIA, CompTIA Security+).
• Strong communication skills and the ability to teach complex concepts to students at varying skill levels.

Preferred Qualifications:

• Previous experience in a cybersecurity training or instructor role.
• Familiarity with cyber range platforms and simulated attack environments.
• Experience with cyber incident handling and forensic analysis tools.
• Experience leading blue vs. red team exercises or working with penetration testers.