Cyber Simulation Client Content Developer and Trainer SP2 26-04873

Job Title: Cyber Simulation Client Content Developer and Trainer SP2

Location: Brooklyn NY (3 days in office/2 days remote)

Duration: 2 years

Job Description:

We are seeking a highly experienced Cyber Simulation Client Content Developer and Trainer to join our team in Brooklyn NY. This role involves developing and proctoring realistic operationally accurate cyber incident response simulations for a range of stakeholders from technical staff to executives. You will apply your incident response expertise to create structured training scenarios aligned with the Citywide Cyber Incident Response lifecycle including detection triage investigation containment remediation and post-incident review.

Key Responsibilities:

• Cyber Incident Simulation Development:
  • Develop realistic operationally accurate cyber incident scenarios based on real-world incidents threat intelligence and lessons learned.
  • Create scenario narratives timelines injects and decision points for training simulations.
  • Design supporting artifacts such as logs alerts and reports to enhance simulations.
  • Develop role-based challenges tailored for technical staff management and executives.
  • Customize simulations for specific agency environments while maintaining consistency with citywide standards.
• Training and Simulation Delivery:
  • Proctor and oversee Immersive Labs training sessions managing scenario flow inject timing and ensuring participant engagement and progress.
  • Provide guidance during simulations without disrupting learning objectives.
  • Document exercise outcomes participant challenges and improvement areas to improve future simulations.
• Cyber Training and Knowledge Transfer:
  • Support the delivery of annual cyber training across approximately 70 city agencies.
  • Participate in knowledge transfer and shadowing sessions during the transition period from the current role holder to ensure continuity during deployment.
• Independent Responsibility:
  • Assume full responsibility for the development of simulations and the proctoring of training sessions after the transition period.

Mandatory Skills/Experience:

• Minimum 4 years of hands-on cybersecurity incident response experience including detection triage investigation containment remediation and post-incident activities.
• Expertise in responding to common cyber incidents such as ransomware phishing credential compromise data breaches and third-party/vendor incidents.
• Ability to translate real-world incident response experience into realistic training scenarios.
• Experience in cybersecurity training simulations or tabletop exercises development and delivery.
• Familiarity with cyber range platforms or hands-on training tools (e.g. Immersive Labs or similar).
• Knowledge of incident response frameworks and standards such as NIST MITRE ATT&CK and Telecommunication&CK.
• Strong experience with security logs alerts and technical artifacts (e.g. SIEM EDR network/cloud logs).
• Experience in live training or simulation proctoring.
• Excellent written and verbal communication skills.
• Ability to work independently manage multiple activities and quickly assume responsibilities during time-sensitive transitions.
• Bachelors degree in Cybersecurity Information Technology Computer Science or equivalent professional experience.

Desirable Skills/Experience:

• Direct experience developing content within Immersive Labs.
• Experience designing and delivering cyber tabletop exercises for technical management and executive-level audiences.
• Experience supporting large-scale multi-agency or enterprise training programs.
• Prior experience working in government public sector or highly regulated environments.
• Expertise in aligning training content with organizational policies playbooks and incident response plans.
• Knowledge of cloud security incidents including identity SaaS IaaS/PaaS environments.
• Experience in incorporating lessons learned after-action reports or threat intelligence into training content.
• Familiarity with instructional design or adult learning principles.
• Experience collecting training metrics and contributing to post-exercise reporting.
• Relevant cybersecurity certifications (e.g. Security GCIH GCED CySA CISSP).

For more details reach at