Senior Defensive Content Engineer

As a Senior Defensive Content Engineer, you will play a pivotal, hands-on technical role within an elite team of content engineers. Your mission: architect, build, and rigorously validate complex, live-fire cyber ranges and threat hunting labs that directly elevate the defensive capabilities of top-tier enterprise organizations worldwide.

🍺 The fellowship you’ll be joining:

Our specialized Defensive Content team creates industry-leading Sherlocks, Forensic CTF challenges, and Cyber Ranges. As part of the broader 30+ member Content Engineering organization across the globe, you will collaborate closely across engineering, infrastructure, product, and marketing to deliver immersive, high-impact cybersecurity experiences.

Please note that priority is often given to individuals who have submitted content in the past or can showcase related work (offensive or defensive content). If you have created content, share details along with your application.

⚔️ Technology tools & weapons you’ll be using:

• SIEM, EDR, Wireshark, Windows, Linux, VMware, Cloud Platforms

📚 Interesting resources you should check:

• Explore our insights on Threat Ranges to understand the core environments you will be building.
• Learn how players tackle Sherlocks, one of our flagship defensive lab formats.
• Meet our Content Engineering team

🚀 The adventures that await you:

• Architect & Build: Design, build, and deploy highly engaging live-fire cyber ranges and threat hunting scenarios tailored for enterprise-grade training.
• Collaborate & Lead: Partner with talented engineers across departments to drive technical excellence and push the boundaries of defensive training.
• Innovate Content: Contribute to and review advanced Sherlocks, competitive CTF tracks, and large-scale Pro Labs scenarios.
• Threat Research: Conduct deep research into novel vulnerabilities, modern exploit techniques, adversary TTPs, and real-world threat actors to keep content cutting-edge.

🏆 Skills, knowledge, and experience required:

• Tooling & Technical Mastery: Expert proficiency with defensive security tools (e.g., SIEM, EDR, Wireshark, Volatility, Autopsy, IDA) and core domains such as detection engineering, digital forensics, and malware analysis.
• Content Engineering Experience: Proven track record of designing content for Cyber Ranges, Capture The Flag (CTF) events, or interactive learning platforms.
• Systems & Infrastructure: Deep understanding of OS internals, enterprise applications, and system administration (Windows, Linux, VMware, Cloud platforms).
• Mindset: Self-motivated, structured, and genuinely passionate about cybersecurity education and gamified learning.
• Communication: Full professional proficiency in written and spoken English.

Bonus Points:

• 2+ years of hands-on experience in real-world Defensive Security Operations (SecOps / SOC / Incident Response).
• Practical expertise with Infrastructure-as-Code and orchestration tools (e.g., Terraform, Ansible).

💰 Benefits:

• 25 annual leave days
• Paid parental leave
• Home Office Allowance
• Dedicated budget for training and professional development, including conference participation
• State-of-the-art equipment
• Full access to Hack The Box lab offerings
• Flexibility in working hours

Our benefits package may vary depending on location and type of employment (e.g., UK, Greece, or engagement through an Employer of Record).