Be on Alert – Fraudulent Employment Offers. Learn More

Cyber Instructor
ICF is seeking Cyber Instructors to teach Threat Hunting / Defensive Cyberspace Operations (DCO). Your work will contribute to the knowledge of how cyber-attacks work, how vulnerabilities are exploited, and the way hostile cyber actors operate. This role is full-time remote with up to 65% travel (if/when travel resumes). This is an opportunity to contribute to an important effort from its beginning, work with the latest and emerging technologies, and all while building a great career at ICF!
What you’ll be doing:
- Delivering training
- Alternating training days with another instructor
- Assisting with student questions and labs when not leading instruction
- Training consists primarily of a 5-day security course:
- Each module is a single day and delivered with the goal of teaching methodology and how to use Elastic/Kibana to threat hunt.
- Module 1 Zeek
- Module 2 Suricata
- Module 3 Pcap/Stenographer
- Module 4 Kibana
- Module 5 Capstone/Threat hunting
- Each module is a single day and delivered with the goal of teaching methodology and how to use Elastic/Kibana to threat hunt.
Basic Qualifications you will need to have:
- Active Secret security clearance required as part of client contract requirement
- US Citizenship required as part of client contract requirement
- Ability to travel up to 65% (if/when travel resumes)
- Ability to deliver training virtually or travel 2 consecutive weeks with a 2 on 1 off schedule if required
- IAT Level I Certification:
- A+ CE
- CCNA-Security
- CND
- Network+ CE
- SSCP
- Public and customer-facing speaking skills
- Understand and proficient with Linux
- Ability to run scripts, navigate and teach first-time users
- Knowledge of Network Security and the 3 different types of data provided:
- Alerting Data
- Snort or Suricata
- Sessionized protocol metadata and Netflow
- Bro/Zeek, SILK, SolarWinds, Nexthop
- Full Packet capture
- Stenographer, Wireshark, tcpdump, netsniff-ng
- Minimum of 3 years experience with Network Security responding to incidents or SOC analyst experience
- Experience using Elastic products
- Advanced knowledge of cyber threats and TTPs
Preferred Qualifications:
- 5+ years experience with Network security responding to incidents or SOC analyst experience
- Elastic Certification
- Degree in Information Security and/or Cybersecurity
- Information Security and/or Cybersecurity Certifications
#Indeed
#CC166
Working at ICF
Working at ICF means applying a passion for meaningful work with intellectual rigor to help solve the leading issues of our day. Smart, compassionate, innovative, committed, ICF employees tackle unprecedented challenges to benefit people, businesses, and governments around the globe. We believe in collaboration, mutual respect, open communication, and opportunity for growth.
We can only solve the world's toughest challenges by building an inclusive workplace that allows everyone to thrive. We are an equal opportunity employer, committed to hiring regardless of any protected characteristic, such as race, ethnicity, national origin, color, sex, gender identity/expression, sexual orientation, religion, age, disability status, or military/veteran status. Together, our employees are empowered to share their expertise and collaborate with others to achieve personal and professional goals. For more information, please read our EEO & AA policy.
COVID-19 Policy: New or prospective U.S. employees must provide proof of complete vaccination on the date of their commencement of employment. If selected for employment, you will provide proof of your full vaccination status, defined as vaccinated two weeks after receiving the requisite number of doses of a COVID-19 vaccine approved or authorized for emergency use by the FDA.
Reasonable Accommodations are available, including, but not limited to, for disabled veterans, individuals with disabilities, and individuals with sincerely held religious beliefs, in all phases of the application and employment process. To request an accommodation please email icfcareercenter@icf.com and we will be happy to assist. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations. Read more about non-discrimination: EEO is the law and Pay Transparency Statement.
Texas Remote Office (TX99)
Who is ICF?
