Remote (min. 4h overlap with UK hours 8am-6pm; no visa sponsorship)
Type
Full Time
Deadline
30 Oct 2026
7 days left
Job Description
Lead, research, plan, and create advanced content and virtual labs for cybersecurity courses, with technical ownership, mentorship responsibilities, and influence over Azure security training materials.
Lead the design and development of advanced defensive cyber security training material, including hands-on Azure labs, simulations, and realistic datasets.
Own and shape the Azure cybersecurity content roadmap, ensuring technical accuracy, relevance, and progression across skill levels.
Collaborate closely with the Content Engineering and Cloud teams to identify gaps, define standards, and improve overall content quality.
Design, build, and maintain realistic Azure lab environments, including identity, logging, monitoring, and attack/defense scenarios.
Mentor and support other Content Engineers, providing technical guidance, reviews, and best practices.
Analyze real-world industry trends, incidents, and attacker techniques and recreate them as teachable, hands-on learning experiences.
Strategically plan, review, and schedule content initiatives in collaboration with the Cloud Content Engineering team and stakeholders.
Requirements
Minimum 5+ years of relevant cyber security industry experience in roles like Senior SOC Analyst (L3/L4), Security Engineer, Incident Responder, Threat Hunter, or Digital Forensics Investigator, with focus on Microsoft Azure.
Worked in defensive security roles within Azure-based or hybrid cloud organisations.
Designed or operated real-world Azure security controls, detections, and incident response workflows.
Experience translating complex security concepts into structured learning experiences.
Deep hands-on experience with Microsoft Azure, including security architecture, identity, networking, monitoring, and incident response tooling.
Expert-level knowledge in core blue team areas: incident detection and response, threat intelligence, log analysis, security monitoring, and digital forensics.
A strong conceptual and practical understanding of networking, computing, and operating systems as they relate to security.
Familiarity with blue team tooling and platforms (e.g., SIEM, EDR, IDS/IPS, Microsoft Sentinel, Defender for Cloud, Entra ID) and methodologies (e.g., MITRE ATT&CK, threat modeling, log and malware analysis).
Proven ability to research emerging threats, attacker techniques, and cloud security trends, and convert them into engaging, high-impact training content.
Excellent written and verbal English communication skills, with the ability to clearly explain complex technical topics to learners.
Preferred: Experience creating Capture The Flag (CTF) challenges or gamified security exercises.
Preferred: Programming/scripting experience in Python, Bash, PowerShell, or PHP.
Preferred: Experience leading, coaching, or mentoring other engineers or analysts.
Preferred: Relevant certifications such as AZ-500, SC-300, SC-200, SC-100, SC-401, or broader certifications like SAL1, CySA+.
At this time, we are unable to provide sponsorship. At least 4 hours of overlap with the UK timezone (from 8am - 6pm). Salaries determined based on Geographic Location, Seniority, Interview Performance, and Market Rates.
Done for you
We'll apply to this for you
Denidel's HR team submits and tracks the application on your behalf.
