Content Lead - Cybersecurity

Role Summary

As a Content Lead for Cybersecurity, you'll own the entire learning journey that takes students from how networks and operating systems work to detecting, investigating, and defending against real attacks. That includes designing the curriculum, writing reading materials, building assessments, creating lab exercises, and developing projects that teach students how security is practiced, not just what the terms mean.

This is a hands-on creation role. You'll spend most of your time building, testing, and improving content. You'll also be setting up lab environments, exploiting and patching vulnerable apps, and running investigations yourself, because security content written by someone who hasn't done the work is easy to spot and not very useful. If you can't do it, you can't teach it.

If you're someone who can walk through a SQL injection from the vulnerable query to the fix, build a small SOC lab from scratch, and then explain both clearly enough that a second-year student gets it, this is your role.

What You'll Do

• Design semester-wise curriculum and decide how topics are structured, sequenced, and paced across the academic calendar, from security fundamentals to specialization tracks.
• Keep the content aligned with what the industry hires for. Map topics to real job roles such as SOC analyst, penetration tester, cloud security engineer, and GRC analyst.
• Continuously evolve the content strategy based on what's working, what's not, and how the threat landscape and tooling are changing.
• Write clear, in-depth reading materials that students can learn from independently. Not tool manuals or certification dumps, but well-structured explanations with real attack and defense scenarios, working examples, and walkthroughs.
• Design problems that test whether students understand why an attack works and how to stop it, not just whether they remember tool names or port numbers.
• Build question banks following ByteXL's quality standards for difficulty distribution, answer balance, and auto-gradability.
• Create hands-on lab exercises in safe, isolated environments, covering areas like network analysis, web application security, log analysis and incident investigation, and system hardening.
• Design CTF-style challenges, capstone projects, and end-to-end exercises such as securing an application, running a simulated incident response, or conducting a scoped assessment.
• Build the labs and projects yourself to confirm they are doable, safe to run, and teach the intended lesson.
• Keep ethics, legal boundaries, and responsible disclosure a consistent part of how students are taught to practice security.
• Stay current with new vulnerabilities, attack techniques, defensive tooling, and frameworks.
• Try new ways of teaching and building content. If something could work better, prototype it and make the case.

What We're Looking For

Must Have

• B.Tech, M.Tech, MCA, or equivalent in Computer Science, Cybersecurity, or a related field.
• 3-5 years of experience in cybersecurity, security operations, penetration testing, technical training, or content development with a strong focus on security.
• Solid grounding in networking, operating systems (Linux and Windows), and core security concepts such as cryptography, authentication, and access control.
• Hands-on experience with web application security, including the OWASP Top 10, and common testing tools.
• Working knowledge of both offensive and defensive security, including vulnerability assessment, log analysis, SIEM tools, and incident response basics.
• Proficiency in at least one scripting language (Python or Bash) for automation and tooling.
• Familiarity with cloud security fundamentals and security frameworks such as MITRE ATT&CK, NIST, and ISO 27001.
• Comfortable setting up and maintaining lab environments using virtual machines, Docker, or similar tooling.
• Has done real security work, such as assessments, investigations, or CTFs, not just course exercises.
• Can explain a TLS handshake or how a privilege escalation works clearly enough that someone new to security understands it.
• Works independently without needing constant direction.

Nice to Have

• Industry certifications such as Security+, CEH, OSCP, CySA+, or cloud security certifications.
• Active CTF participation or a strong profile on platforms like Hack The Box, TryHackMe, or PicoCTF.
• Bug bounty experience, CVEs, or published security research.
• Experience with malware analysis, digital forensics, or threat hunting.
• Background in technical training, bootcamp instruction, or academic teaching.
• Experience designing auto-graded coding or lab-based assessments.