Summary:
The Cyber Simulation Exercises Scenario Developer designs, builds, and delivers large-scale cybersecurity simulation exercises (Threat Hunting Event, Live Fire Exercises, Capture the Flag) to uplift workforce cyber capability. This role develops realistic scenarios on a cyber range platform, creates exercise “injects” and artifacts, and builds/maintains the supporting lab infrastructure to enable repeatable, measurable training at scale.
Key Responsibilities:
1) Cyber Range Exercise & Scenario Development
- Design end-to-end cyber simulation exercises aligned to organizational capability uplift goals (e.g., phishing response, ransomware, cloud misconfigurations, insider threat, incident response coordination).
- Translate learning objectives into engaging storylines, technical objectives, and measurable outcomes.
- Develop multi-track scenarios for different audiences (IT, SOC, incident commanders, and executives) with appropriate complexity and realism.
- Ensure scenarios reflect current threat landscape and common enterprise environments (Windows/Linux, AD, email, web applications, cloud, endpoints).
2) Content Creation (Exercise Materials & Artifacts)
- Produce complete exercise packages including: facilitator guides, participant instructions, runbooks, timelines, scoring rubrics, and debrief materials.
- Create realistic artifacts: emails, chat transcripts, tickets, logs, alerts, threat intel snippets, media statements, executive briefings, and policy references.
- Build assessment content (pre/post checks, knowledge validations, performance-based evaluation criteria).
3) Inject Design & Orchestration
- Create and manage exercise injects (technical and non-technical) to drive decision-making and actions during the simulation.
- Implement inject delivery mechanisms within the cyber range (automated triggers, timed releases, event-driven injects).
- Coordinate inject timing, escalation paths, and branching logic based on participant actions.
4) Cyber Range Infrastructure Build & Maintenance
- Build and configure lab environments required for scenarios (networks, endpoints, servers, identity services, security tooling).
- Integrate common security tools and telemetry sources (SIEM, EDR, IDS, email security, vulnerability scanners) as required by the exercise.
5) Exercise Delivery Support & Facilitation Enablement
- Support dry runs, pilot sessions, and production execution; troubleshoot technical issues during live exercises.
- Provide facilitators with clear runbooks, decision points, and expected participant actions.
- Capture exercise telemetry and participant performance data for reporting and continuous improvement.
6) Measurement, Reporting & Continuous Improvement
- Define KPIs and scoring models (time-to-detect, time-to-contain, decision quality, process adherence, communication effectiveness).
- Produce post-exercise reports and lessons learned; recommend improvements to content, controls, and processes.
Required Qualifications:
- Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent practical experience.
- Proven experience developing cybersecurity simulation exercises on a cyber range platform (hands-on).
- Demonstrated ability to create injects and exercise artifacts that drive realistic participant behavior.
- Experience building and operating lab infrastructure (virtualized or cloud-based) for cyber scenarios.
- Strong understanding of incident response lifecycle, common attack techniques, and defensive controls.
Required Technical Skills:
- Cyber range platforms: hands-on experience with at least one commercial or open cyber range solution (platform-agnostic, but must have real implementation experience).
- Infrastructure: virtualization and networking fundamentals (segmentation, routing, DNS, AD basics).
- OS & enterprise tech: Windows/Linux administration basics; Active Directory concepts.
- Automation/scripting: PowerShell, Python, Bash (at least one strong).
- Logging/monitoring concepts: SIEM/EDR telemetry, log sources, alerting logic.
Also, you can submit your CV through the link below for more upcoming job vacancies:
https://cv-fnrco.com
