New

Lead Cyber Security Content Developer

Remote; Anywhere

Job purpose

Founded in 2007 by the creators of Kali Linux, OffSec (formerly known as Offensive Security) is the leading provider of continuous professional and workforce development, training, and education for cybersecurity practitioners. OffSec’s distinct pedagogy and practical, hands-on learning help organizations fill the infosec talent gap by training their teams on today’s most critical skills.

 

Become a part of our global presence and work from anywhere. With team members in over 40 countries, we believe in inspiring people of all backgrounds and communities. The OffSec team is composed of diverse, internationally published authors, conference speakers, and seasoned information technology professionals from both the private sector and governments worldwide.

 

Excited about our mission and what we do? Apply and join us!

 

About the Job

OffSec is seeking a highly skilled and experienced Lead Content Developer to join our global team. This leadership role demands not only advanced cybersecurity expertise and hands-on lab development proficiency but also a strong focus on instructional design and mentorship. The Lead Content Developer will play a pivotal role in developing world-class cybersecurity training content, while guiding and mentoring content developers to elevate the overall team’s capabilities.

As a leader in our content development team, you will oversee the design and delivery of comprehensive, hands-on learning experiences, ensuring our training content is cutting-edge and aligned with the latest industry standards. This role also requires extensive collaboration with cross-functional teams, including content architects, engineers, and infrastructure specialists, to ensure seamless integration of learning materials and virtual environments.

The ideal candidate has a strong background in instructional design, coupled with deep technical expertise in cybersecurity. You will help guide the team’s content pedagogy, ensuring all learning content is not only accurate and engaging but also pedagogically sound, to maximize the learner experience and knowledge retention.

 

Duties and responsibilities

Content Leadership & Development

  • Lead the design, development, and continuous improvement of cybersecurity training content, with a strong emphasis on real-world, hands-on labs and learner-centric instructional design.

  • Mentor and guide content developers, reviewing their work and offering constructive feedback to refine learning materials for clarity, accuracy, and pedagogical effectiveness.

  • Oversee the integration of content into comprehensive learning paths, ensuring materials are accessible to learners of all skill levels, from beginners to advanced professionals.

  • Collaborate closely with stakeholders, including subject matter experts, individual learners, corporate clients, and engineering teams, to ensure content meets both technical accuracy and learner engagement goals.

Instructional Design & Learning Experience

  • Design high-impact, scenario-based cybersecurity challenges and simulations that align with real-world threats, emphasizing practical skills and defensive strategies.

  • Apply instructional design best practices to create content that fosters active learning, critical thinking, and long-term knowledge retention.

  • Lead the creation of learning assessments, quizzes, and exercises that are aligned with learning objectives and effectively measure learner outcomes.

  • Implement iterative feedback loops and continuous improvement cycles for content, ensuring the training experience stays relevant as the cybersecurity landscape evolves.

Content Engineering & Technical Oversight

  • Partner with content architects to design, develop, and refine technical training environments, including cloud-based labs and hybrid domains, ensuring they provide realistic and effective learning experiences.

  • Oversee the technical development of complex cybersecurity environments, working with engineering teams to optimize lab functionality, stability, and user experience.

  • Act as the technical escalation point for troubleshooting complex lab and content integration issues, collaborating with engineering and platform teams to resolve issues and enhance lab experiences.

Applied Expertise & Thought Leadership

  • Stay at the forefront of emerging cybersecurity threats, trends, and best practices, integrating the latest information into training content.

  • Lead content validation and quality assurance efforts, ensuring technical accuracy in alignment with real-world cybersecurity methodologies.

  • Foster a culture of innovation within the team, encouraging the exploration of new learning methodologies, technologies, and tools to enhance the learner experience.

Qualifications

  • 10+ years of relevant industry experience in cybersecurity, content development, and instructional design, with a proven track record of leading content initiatives and mentoring more junior content developers.

  • Advanced expertise in cybersecurity topics, with a strong focus in at least two of the following areas: cloud security (Azure, AWS and GCP), incident response, threat hunting, OT security, digital forensics, and mobile security.

  • Deep understanding of instructional design principles, including adult learning theories, curriculum development, and content delivery strategies.

  • Experience creating complex virtual labs and simulations using a variety of technologies (VMs, cloud infrastructure, automation tools) to provide hands-on, technical training experiences.

  • Excellent written and verbal communication skills, with the ability to articulate complex technical concepts in a clear, engaging manner to diverse audiences.

  • Demonstrated ability to manage multiple projects simultaneously, prioritize tasks effectively, and work in a fast-paced, collaborative environment.

Experience working in global, cross-functional teams, collaborating across cultures, time zones, and disciplines.

Working conditions

This role is a full-time salaried position. Work hours for this position are flexible and will be performed from a home office.

 

EEO

OffSec provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Create a Job Alert

Interested in building your career at OffSec? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Education

Select...
Select...
Select...
Select...
Select...
How many years of experience do you have, working professionally in a security related position (Penetration Testing, Cloud Defense, Threat Hunting, Incident Response, Malware Analysis, etc.)? *
Please read and acknowledge our Applicant Privacy Notice. *

What’s the purpose of this document?

This document tells you how we will process your personal information when you apply for any roles or work with the Offensive Security group of companies (“roles”).  

Who are we?

These members of the Offensive Security group of companies are "data controllers".  

Role Location

Data Controller

USA

Offensive Security Services, LLC located in the USA

Philippines

Offensive Security Certifications, Inc. located in the Philippines

Rest of World

OffSec Services Limited located in Gibraltar

In this privacy notice OffSec will refer to these legal entities as “OffSec”, “we” or “us”  and for convenience, you can contact any of them by emailing privacy@offensive-security.com.

As data controller OffSec decides how we hold and use personal information about you. You are being sent a copy of this privacy notice because you are applying for a role with us (whether as an employee, worker or contractor). It makes you aware of how and why your personal data will be used. It provides you with certain information that must be provided under the General Data Protection Regulation ((EU) 2016/679) (GDPR).

Data protection principles

OffSec will comply with data protection law and principles, so your data will be:

  • used lawfully, fairly and in a transparent way.
  • collected only for valid purposes we have clearly explained to you and not used in any way that is incompatible with those purposes.
  • relevant to the purposes we have told you about and limited only to those purposes.
  • accurate and kept up to date.
  • kept only as long as necessary for the purposes we have told you about.
  • kept securely.

The information we hold about you

In connection with your application for a role, OffSec will collect, store, and use these categories of personal information about you:

  • the information you have provided to us in your CV and any covering letter or email.
  • the information you have provided on your application, including name, title, address, telephone number, personal email address, date of birth, gender, employment history, qualifications.
  • other information you enter into our recruitment platform operated by Greenhouse Software, Inc (“Greenhouse”).
  • any information you provide to us during an interview.

We may also collect, store and use these types of sensitive personal information:

  • information about your race or ethnicity.
  • information about your health, including any medical condition, health and sickness records.
  • information about criminal convictions and offences.

How is your personal information collected?

We collect personal information about candidates from the following sources:

  • you, the candidate.
  • recruitment agencies.
  • background check providers.
  • credit reference agencies.
  • your named referees.
  • our third-party contacts whose opinion of you we may ask.
  • data from publicly accessible sources such a LinkedIn and other public websites, social media sites and blogs.

How OffSec will use information about you

OffSec will use the personal information we collect about you to:

  • assess your skills, qualifications, and suitability for a role.
  • carry out background and reference checks.
  • communicate with you about the recruitment process.
  • keep records related to our hiring processes.
  • help defend us against any claims.
  • comply with legal or regulatory requirements.

Our legal basis for processing your information

It is in our legitimate interests to process your personal information to decide whether to appoint you to a role and to decide whether to contract with you. If you are appointed to a role, it is also in our legitimate business interests to use your personal information for staff administration purposes.

Having received your application, OffSec will then process that information to decide whether you meet the basic requirements to be shortlisted for the role. If you do, OffSec will decide whether your application is strong enough to invite you for an interview. If we call you for an interview, OffSec will use the information you provide to us at the interview to decide whether to offer you the role. If we offer you the role, OffSec will then take up references and carry out background checks before confirming your appointment.

If you fail to provide personal information

If you fail to provide information which is necessary for us to consider your application (such as evidence of qualifications or work history), OffSec cannot process your application successfully. For example, if we require a credit check or references for this role and you fail to provide us with relevant details, OffSec cannot take your application further.  This also applies if you supply information and then ask for it to be erased.

How we use sensitive personal information

OffSec will use your sensitive personal information in these ways:

  • OffSec will use information about your disability status to consider whether we need to provide adjustments during the recruitment process.
  • OffSec will use information about your race or national or ethnic origin to ensure meaningful equal opportunity monitoring and reporting.
  • OffSec will use information about any criminal convictions as set out below.

Information about criminal convictions

We envisage that OffSec may process information about any criminal convictions.

OffSec operates in an industry that requires high trust and integrity and so we may ask you to disclose your criminal records history.

OffSec will collect information about criminal convictions if we would like to offer you the role (conditional on checks and any other conditions, such as references, being satisfactory). We may carry out a criminal records and other background check to satisfy ourselves there is nothing in your history which makes you unsuitable for the role.

Automated decision-making

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making.

Data sharing

Why might you share my personal information with third parties?

OffSec will only share your personal information with these third parties to process your application: other members of our group of companies, third party service providers including Greenhouse, recruitment agencies, referees, background checking organisations and other service providers. All our third-party service providers and other entities in our group must take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and under our instructions.

Data security

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties with a business need-to-know it for the purpose of your application for a role. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

International data transfers

Your personal information will be stored in databases used by those at OffSec involved in considering your application for any role.  OffSec uses manual files, spreadsheets, access databases and the like, to manage and store your personal information.  OffSec also uses the cloud-based software platform provided by Greenhouse.

Your personal information will be kept by OffSec (either primarily or as a back-up system) in the USA or the Philippines. Your personal information will therefore be transferred to and accessible by OffSec and its group companies for the purposes outlined above in these countries. Your personal information may therefore be located in countries other than the country in which your personal information was originally collected. The laws in those countries may not provide the same level of data protection compared to the country in which you initially provided your information. Nevertheless, when we transfer your personal information to recipients in other countries, we will protect that information in compliance with law

Data retention

How long will you use my information for?

If you are unsuccessful with your application, OffSec will retain your personal information for 12 months after we have communicated our decision to you. We retain your personal information for that period in case another role arises that you may be suitable for and so we can show that we have not discriminated against candidates and that we have conducted the recruitment exercise in a fair and transparent way.  After this period, OffSec will securely destroy your personal information unless we determine that its in our legitimate interest to keep it for longer.  In general, this will be because we think you may be suitable for another role with us and would like to be able to contact you again.  You can request us to erase your data at any time.

If you are successful with your application, we will keep your personal information for the purpose of staff administration for so long as it’s in our legitimate interest to do so.

Rights of access, correction, erasure, and restriction

Your rights in connection with personal information

Under certain circumstances, by law you have the right to:

  • Request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check we are lawfully processing it.
  • Request correction of the personal information we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
  • Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You may also ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
  • Object to processing of your personal information as we are relying on our legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground. You may also object where we are processing your personal information for direct marketing purposes.
  • Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
  • Request the transfer of your personal information to another party.

If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request we transfer a copy of your personal information to another party, please contact privacy@offensive-security.com.

Questions?

If you have questions about this privacy notice or wish to contact us about anything related to it, please contact privacy@offensive-security.com.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in OffSec’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.