Corelight
cybersecurity
NetworkSecurityTrainer
Neural analysis suggests this role is
optimal for Mid candidates.
“Network Security Trainer at Corelight. Skills: Network Security, Training, Curriculum Development, Incident Response, Threat Hunting. Contribute to curriculum development, keeping material current with real-world network-based attack patterns you've encountered operationally. Help build hands-on lab environments and CTF challenges that reflect realistic adversary behavior, not textbook scenarios”
Industry & Context.
Up to 50% travel expected
What They're Looking For.
Must Have
3 to 5 years of hands-on experience in a SOC Tier II role, Incident Response, or threat hunting, 1 to 2 years in mentorship, internal training, content creation, or knowledge-sharing in a security context, Familiarity with the MITRE ATT you can follow an attack through the data and explain what you're seeing, Working knowledge of Suricata or Snort, including rules creation, Experience with at least one SIEM platform (Splunk, Elastic, or Sentinel), Solid TCP/IP fundamentals and comfort reading packet captures, Windows/MacOS/Linux/Unix administration experience, Scripting ability in Python, Bash, Zeek-script, or PowerShell, Excellent verbal and written communication skills, Bachelor's degree in a technical field or equivalent experience
Nice to Have
Skilljar experience is a plus, Prior startup experience preferred
What You'll Do.
Contribute to curriculum development
keeping material current with real-world network-based attack patterns you've encountered operationally
Help build hands-on lab environments and CTF challenges that reflect realistic adversary behavior
not textbook scenarios
Co-facilitate and independently lead training sessions (virtual and in-person) for technically experienced audiences
Administer and optimize Learning Management Systems
Educate students on the use and application of Corelight for threat hunting
and detection engineering
Use AWS and scripting to help maintain and improve lab infrastructure and provisioning workflows
How You'll Work.
Team & Collaboration
work alongside senior instructors to develop curriculum
Communication Scope
Excellent verbal and written communication skills
Full Job Description
By making evidence the heart of security, we help customers stay ahead of ever-changing cyber-attacks. Corelight is a cybersecurity company that transforms network and cloud activity into evidence. Evidence that elite defenders use to proactively hunt for threats, accelerate response to cyber incidents, gain complete network visibility, and create powerful analytics using machine-learning and behavioral analysis tools. Easily deployed and available in traditional and SaaS-based formats, Corelight is the fastest-growing Network Detection and Response (NDR) platform in the industry. We are the only NDR platform that leverages the power of Open Source projects in addition to our own technology to deliver Intrusion Detection (IDS), Network Security Monitoring (NSM), and Smart PCAP solutions. We sell to some of the most sensitive, mission-critical large enterprises and government agencies in the world. We are seeking a practitioner ready to make the move from the SOC to the classroom. Someone with genuine operational experience who has started finding ways to share what they know, and wants to build a career around it. You'll work alongside senior instructors to develop curriculum and run live training events, taking on increasing ownership as you grow in the role. Responsibilities: Contribute to curriculum development, keeping material current with real-world network-based attack patterns you've encountered operationally Help build hands-on lab environments and CTF challenges that reflect realistic adversary behavior, not textbook scenarios Co-facilitate and independently lead training sessions (virtual and in-person) for technically experienced audiences Develop recorded, on-demand curriculum Administer and optimize Learning Management Systems (Skilljar experience is a plus) Educate students on the use and application of Corelight for threat hunting,incident response, and detection engineering Use AWS and scripting to help maintain and improve lab infrastructure and pr
Applying for this Network Security Trainer role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Greenhouse
- Create a Greenhouse profile before applying — it saves time across multiple applications.
- Upload your resume as a PDF; the parser handles it better than Word.
- Answer all knockout questions carefully — wrong answers auto-reject before a human sees you.
- Enable email notifications to track application status in real time.
ANONYMOUS · UNFILTERED
What do employees actually say about Corelight?
Real rants from real employees. Read before you apply.