Remote Cyber Security Trainer — Incident Response Labs

Lorien; Shrivenham; Hybrid; GBP 65,000 - 101,000; Full time

Job summary

Lorien is seeking an experienced Cyber Security Trainer to deliver high-quality, technically robust cyber training to learners. You will translate complex cyber operations into engaging practical learning and help develop capability through realistic exercises and assessments.

This remote role requires onsite training delivery in Shrivenham, on a 6‑month initial contract inside IR35. The ideal candidate brings hands-on threat knowledge, incident response expertise, and familiarity with DSAT and

Qualifications

• Proven experience delivering cyber security training – essential.
• Strong hands-on knowledge of cyber threats, network security, risk management and compliance.
• Experience with incident response methodologies, detection, investigation techniques.
• Ability to communicate complex technical concepts clearly for learners.
• Experience designing exercises, simulations or practical labs.
• Familiarity with Elastic monitoring/analytics platforms.
• Knowledge of DSAT and JSP 822 is desirable.

Responsibilities

• Deliver high-quality cyber security and incident response training to varied learners.
• Translate real-world cyber operations into practical instruction.
• Develop tailored cyber training content and labs.
• Create assessments and hands-on tasks to measure competence.
• Ensure training content aligns with industry standards and best practices.

Skills

Cyber security training

Threat analysis

Incident response

Lab design

Lab simulations

Clear communication

Elastic monitoring

DSAT framework

JSP 822

Risk management

Compliance frameworks

Tools

Elastic

Job description

Lorien is seeking an experienced Cyber Security Trainer to deliver high-quality, technically robust cyber training to learners. You will translate complex cyber operations into engaging practical learning and help develop capability through realistic exercises and assessments.

This remote role requires onsite training delivery in Shrivenham, on a 6‑month initial contract inside IR35. The ideal candidate brings hands-on threat knowledge, incident response expertise, and familiarity with DSAT and