Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Create engaging cyber security training content and virtual labs for learners.
- Company: Join TryHackMe, the fastest-growing online cyber security training platform.
- Benefits: 100% remote work, flexible hours, £2,500 training budget, and annual company retreat.
- Why this job: Make a real impact in cyber security education while working from anywhere.
- Qualifications: 5+ years in blue team roles with strong content development skills.
- Other info: Collaborative environment with opportunities for personal and professional growth.
The predicted salary is between 36000 - 60000 £ per year.
TryHackMe is the fastest-growing online cyber security training platform. Our mission is to make learning and teaching cyber security easier by providing gamified security exercises and challenges. Having only been around for a handful of years, we have grown to more than 6+ million community members and our growth isn’t slowing down!
We’re looking for a Senior Content Engineer to help us research, plan, and create advanced content and virtual labs for our online courses. The ideal candidate has extensive experience in blue team cyber security roles and a strong background in training content development.
Technical Skills & ExperienceTo be considered for this opportunity, you must have at least 5 years of relevant cyber security industry experience in roles such as L3/L4 SOC Analyst, Security Engineer, Incident Responder, Threat Hunter or Digital Forensics Investigator. You should also demonstrate:
- Strong expertise in core blue team areas: incident detection and response, threat intelligence, log analysis, security monitoring, and digital forensics.
- A deep understanding of networking, computing, and operating systems as they relate to security practices.
- Familiarity with blue team tooling (e.g., SIEM, EDR, IDS/IPS, forensic tools) and methodologies (e.g., MITRE ATT&CK framework, log analysis, malware analysis).
- Proven ability to research and adapt to emerging threats and technologies and translate that knowledge into engaging training content.
- Strong verbal and written English communication skills, essential for conveying complex technical concepts.
- Research, design, and develop defensive cyber security training material with supporting hands-on lab exercises (such as virtual machines and datasets for analysis).
- Collaborate with the Content Engineering Team to support security training coverage and identify content development opportunities.
- Experience developing and configuring virtual machines and sample datasets for realistic cybersecurity labs.
- Provide guidance and support to other Content Engineering Team members in areas of expertise.
- Take charge of planning and designing portions of the content development roadmap.
- Collaborate with the Head of Content Engineering to continuously improve the content development process.
- Analyze industry trends in tooling and techniques and recreate them as teachable content.
- Strategically plan, review, and schedule content with our blue team content engineering team.
- Creating challenges for capture the flags (CTFs)
- Programming experience in any of the following: Python, PHP, Bash, Powershell
- Experience leading/ coaching/ mentoring others
- Certifications such as GIAC Certified Incident Handler (GCIH), GIAC Certified Enterprise Defender (GCED), Certified SOC Analyst (CSA), Certified Forensic Analyst (GCFA), CompTIA CySA+, BTL2
- 100% Remote - In a fully digital world, work from anywhere you want!
- Flexi Time - Choose your own hours as long as you have at least 4 hours of overlap with the UK timezone (from 8am - 6pm)
- Tools - a dedicated work laptop + any accessories you need to do your best work.
- Swag Pack - start your TryHackMe journey with a branded swag bundle!
- Personal Development - £2,500 training budget to acquire certifications, and more.
- Company Retreat - an annual company retreat, fully paid for by us!
- Lunch on us - whether you’re a pizza-lover, salad obsessed or a big sushi fan, TryHackMe will cover the cost of your lunch order during our recurring company virtual lunches.
- Health Insurance - if you’re in a country that doesn’t have public health care.
- Enhanced Maternity & Paternity - an enhanced package on top of statutory requirements.
- 401k / Pension - TryHackMe makes it easy to save money for your retirement.
- Stage 1: Short introduction call (30 mins)
- Stage 2: Technical Take Home Exercise (part 1 & 2)
- Stage 3: Interview with our Head of Content Engineering (one hour)
- Stage 4: Final call with a Co-Founder (30 mins)
At this time, we are unable to provide sponsorship.
Senior Cyber Security Content Engineer, Blue Team employer: TryHackMe
Contact Detail:
TryHackMe Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Senior Cyber Security Content Engineer, Blue Team
✨Tip Number 1
Network like a pro! Reach out to your connections in the cyber security field, especially those who might know someone at TryHackMe. A friendly chat can open doors and give you insider info on the role.
✨Tip Number 2
Prepare for the technical take-home exercise by brushing up on your blue team skills. Dive into incident detection, threat intelligence, and log analysis. Show us you can tackle real-world challenges!
✨Tip Number 3
During interviews, don’t just talk about your experience—share specific examples of how you've created engaging training content or led projects. We love hearing about your hands-on experience!
✨Tip Number 4
Apply through our website! It’s the best way to ensure your application gets seen. Plus, we’re always on the lookout for passionate candidates who are eager to join our mission.
We think you need these skills to ace Senior Cyber Security Content Engineer, Blue Team
Some tips for your application 🫡
Tailor Your Application: Make sure to customise your CV and cover letter for the Senior Cyber Security Content Engineer role. Highlight your blue team experience and any relevant projects that showcase your skills in creating engaging training content.
Show Off Your Expertise: Don’t hold back on showcasing your technical skills! Mention your familiarity with blue team tools and methodologies, and provide examples of how you've used them in past roles. This will help us see your fit for the position.
Be Clear and Concise: When writing your application, keep it clear and to the point. Use straightforward language to explain complex concepts, as strong communication skills are key for this role. We want to see how well you can convey your ideas!
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for the role. Plus, it’s super easy to do!
How to prepare for a job interview at TryHackMe
✨Know Your Stuff
Make sure you brush up on your blue team skills, especially in incident detection and response, threat intelligence, and log analysis. Be ready to discuss specific tools you've used, like SIEM or EDR, and how they helped you tackle real-world challenges.
✨Showcase Your Content Creation Skills
Since the role involves developing training material, prepare examples of content you've created in the past. Whether it's virtual labs or engaging exercises, having a portfolio ready will demonstrate your ability to translate complex concepts into teachable content.
✨Be Ready for Technical Questions
Expect some technical questions during the interview, especially around the MITRE ATT&CK framework and emerging threats. Practise explaining these concepts clearly and concisely, as strong communication skills are key for this position.
✨Engage with the Team
This role requires collaboration, so be prepared to discuss how you've worked with others in the past. Share experiences where you’ve mentored or guided team members, and show your enthusiasm for contributing to a collaborative environment.