Content Lead - Cybersecurity

byteXL; Hyderabad; On-site; INR 1,000,000 - 1,800,000; Full time

Job summary

ByteXL TechEd Private Limited seeks a Content Lead for Cybersecurity to own the end-to-end learning journey from fundamentals to defending against real attacks.

You will design curriculum, write materials, build assessments, and develop hands-on labs and projects that teach practical security.

Qualifications

• Hands-on cybersecurity experience with security operations, assessments, or training.
• Ability to design curricula and translate complex topics into teachable content.
• Familiarity with security frameworks (MITRE ATT&CK, NIST, ISO 27001).
• Experience building labs, challenges, and auto-graded assessments.
• Proficiency in scripting for automation (Python or Bash).
• Strong baseline knowledge of networking, OS concepts, and cryptography.

Responsibilities

• Design semester‑wise cybersecurity curriculum from fundamentals to advanced topics.
• Create reading materials, labs, projects, and assessments that teach practical security.
• Develop hands‑on lab environments using Docker and virtual machines.
• Build and explain security scenarios, including defense and incident response.
• Craft CTF-style challenges and end‑to‑end capstone projects.
• Ensure labs reflect current threat landscape and industry needs.

Skills

Security operations

Penetration testing

Content development

Automation scripting

Networking fundamentals

Linux/Windows OS

OWASP Top 10

TLS concepts

Education

B.Tech / M.Tech / MCA in CS or related

Tools

Docker

Virtual machines

SIEM tools

Incident response tooling

Job description

As a Content Lead for Cybersecurity, you'll own the entire learning journey that takes students from how networks and operating systems work to detecting, investigating, and defending against real attacks. That includes designing the curriculum, writing reading materials, building assessments, creating lab exercises, and developing projects that teach students how security is practiced, not just what the terms mean.

This is a hands-on creation role. You'll spend most of your time building, testing, and improving content. You'll also be setting up lab environments, exploiting and patching vulnerable apps, and running investigations yourself, because security content written by someone who hasn't done the work is easy to spot and not very useful. If you can't do it, you can't teach it.

If you're someone who can walk through a SQL injection from the vulnerable query to the fix, build a small SOC lab from scratch, and then explain both clearly enough that a second-year student gets it, this is your role.

What You'll Do

• Design semester-wise curriculum and decide how topics are structured, sequenced, and paced across the academic calendar, from security fundamentals to specialization tracks.
• Keep the content aligned with what the industry hires for. Map topics to real job roles such as SOC analyst, penetration tester, cloud security engineer, and GRC analyst.
• Continuously evolve the content strategy based on what's working, what's not, and how the threat landscape and tooling are changing.
• Write clear, in-depth reading materials that students can learn from independently. Not tool manuals or certification dumps, but well-structured explanations with real attack and defense scenarios, working examples, and walkthroughs.
• Design problems that test whether students understand why an attack works and how to stop it, not just whether they remember tool names or port numbers.
• Build question banks following ByteXL's quality standards for difficulty distribution, answer balance, and auto-gradability.
• Create hands-on lab exercises in safe, isolated environments, covering areas like network analysis, web application security, log analysis and incident investigation, and system hardening.
• Design CTF-style challenges, capstone projects, and end-to-end exercises such as securing an application, running a simulated incident response, or conducting a scoped assessment.
• Build the labs and projects yourself to confirm they are doable, safe to run, and teach the intended lesson.
• Keep ethics, legal boundaries, and responsible disclosure a consistent part of how students are taught to practice security.
• Stay current with new vulnerabilities, attack techniques, defensive tooling, and frameworks.
• Try new ways of teaching and building content. If something could work better, prototype it and make the case.

What We're Looking For

Must Have

• B.Tech, M.Tech, MCA, or equivalent in Computer Science, Cybersecurity, or a related field.
• 3-5 years of experience in cybersecurity, security operations, penetration testing, technical training, or content development with a strong focus on security.
• Solid grounding in networking, operating systems (Linux and Windows), and core security concepts such as cryptography, authentication, and access control.
• Hands-on experience with web application security, including the OWASP Top 10, and common testing tools.
• Working knowledge of both offensive and defensive security, including vulnerability assessment, log analysis, SIEM tools, and incident response basics.
• Proficiency in at least one scripting language (Python or Bash) for automation and tooling.
• Familiarity with cloud security fundamentals and security frameworks such as MITRE ATT&CK, NIST, and ISO 27001.
• Comfortable setting up and maintaining lab environments using virtual machines, Docker, or similar tooling.
• Has done real security work, such as assessments, investigations, or CTFs, not just course exercises.
• Can explain a TLS handshake or how a privilege escalation works clearly enough that someone new to security understands it.
• Works independently without needing constant direction.

Nice to Have

• Industry certifications such as Security+, CEH, OSCP, CySA+, or cloud security certifications.
• Active CTF participation or a strong profile on platforms like Hack The Box, TryHackMe, or PicoCTF.
• Bug bounty experience, CVEs, or published security research.
• Experience with malware analysis, digital forensics, or threat hunting.
• Background in technical training, bootcamp instruction, or academic teaching.
• Experience designing auto-graded coding or lab-based assessments.