Curriculum Developer

Responsibilities

• Develop/modify practitioner-level cyber course content for COF audiences, including:Lesson plans, student guides, instructor guides
• Hands-on performance tasks and exercises
• Incorporate current threat intelligence and adversary TTPs into instructional content (e.g., MITRE ATT&CK alignment as directed).
• Build complex, multi-stage lab exercises and range scenarios emulating realistic network environments and adversary behavior.
• Produce range guides/runbooks enabling setup, execution, and teardown with clear steps and expected outputs.
• Create knowledge checks and performance-based assessments aligned to learning objectives and USCYBERCOM work role standards.
• Build objective scoring rubrics, grading criteria, and validation artifacts (to support consistent scoring across instructors).
• Sustainment and Updates Support quarterly curriculum and assessment reviews; implement updates driven by:Emerging threats / TTP changesSoftware/tool updatesGovernment feedback from delivery eventsMaintain traceability between objectives, instruction, labs, and assessments.
• Cookordination and Documentation Coordinate closely with the Lead Curriculum Developer/PM to meet delivery schedules (including the “30 days prior to execution” package requirement).
• Contribute to Government meeting materials and action items as requested.

Qualifications

• Citizenship: Must be a US citizen
• Clearance: Must have and be able to maintain a Top Secret clearance with SCI eligibility
• Certifications: GPEN OR OSCP OR CASP+
• Education: Bachelor's degree
• Years of Experience: 5+ years of cyber operations experience
• Additional Experience: Demonstrated experience with one or more of the following:
• Scenario creation / adversary emulation
• Hands-on lab development
• Technical assessment design
• Strong technical writing ability (clear, step-by-step lab guidance; concise instructional content)

Additional Experience

• Preferred Qualifications: Experience developing content for cleared audiences and operational unitsFamiliarity with DoD cyber training ecosystems (e.g., PCTE) and secure networks (NIPR/SIPR/JWICS)Experience with detection engineering, incident response, threat hunting, malware analysis, red team tradecraft, and/or secure network architecture (any one is useful depending on course focus)
• Prior instructor experience, even if not in a formal schoolhouse

Additional Information

• Location: Vandenberg SFB, CA On-site
• This is a fulltime onsite position
• Travel: 10% CONUS