Cyber Simulation Content Developer & Trainer (Specialist I) - CSCD 26-02633

• Develop realistic cyber incident scenarios based on real-world threats and threat intelligence
• Design structured simulations aligned with the incident response lifecycle (detection, triage, investigation, containment, remediation, post-incident review)
• Create detailed simulation components including:
• Scenario narratives and timelines
• Decision points and injects
• Supporting artifacts (logs, alerts, reports)
• Role-based challenges for technical, operational, and executive audiences
• Customize simulations for different environments while maintaining enterprise-wide standards

Training Delivery & Proctoring

• Facilitate and proctor live simulation exercises and training sessions
• Manage scenario flow, timing, and participant engagement
• Provide guidance and support while maintaining learning objectives
• Support large-scale annual training programs across multiple business units

Program Support & Continuous Improvement

• Document training outcomes, participant performance, and improvement areas
• Incorporate lessons learned and threat intelligence into future simulations
• Participate in knowledge transfer and shadowing during onboarding
• Transition into full ownership of simulation development and delivery

We are seeking a highly skilled Cyber Simulation Content Developer & Trainer to support a large-scale cybersecurity readiness program. This role is critical in designing and delivering immersive cyber incident simulations and training exercises for multiple agencies within a complex enterprise environment.

The ideal candidate will bring strong hands-on incident response experience, combined with the ability to translate real-world cyber threats into engaging, scenario-based training simulations., * Minimum 4+ years of hands-on cybersecurity incident response experience

• Detection, triage, investigation, containment, remediation, and post-incident activities
• Experience handling common incidents such as:
• Ransomware, phishing, credential compromise, data breaches, vendor incidents
• Experience developing or delivering cybersecurity training, simulations, or tabletop exercises
• Hands-on experience with cyber range or simulation platforms (e.g., Immersive Labs or similar)
• Familiarity with frameworks such as NIST and MITRE ATT&CK
• Experience working with security tools and logs (SIEM, EDR, network/cloud logs)
• Strong communication and documentation skills
• Ability to work independently and manage multiple priorities

Education:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience), * Direct experience with Immersive Labs content development
• Experience designing training for executive, technical, and operational audiences
• Experience supporting large-scale or multi-agency training programs
• Background in government, public sector, or regulated environments
• Knowledge of cloud security incidents (SaaS, IaaS, PaaS)
• Familiarity with instructional design or adult learning principles
• Experience with post-exercise reporting and training metrics

Certifications (Preferred):

• CompTIA Security+
• GCIH, GCED, CySA+
• CISSP or similar, * Cyber incident response expertise
• Scenario-based training development
• Simulation design and facilitation
• Analytical thinking and problem-solving
• Strong stakeholder communication
• Ability to translate technical concepts into training content

Work Environment:

• Hybrid work model (Brooklyn, NY)
• Collaborative, fast-paced environment supporting enterprise cybersecurity initiatives