Cyber Training Specialist

Everforth ECS is seeking a Cyber Training Specialist to work in our Portland, OR office. Please Note: This position is contingent upon contract award.

The Cyber Training Specialist supports the design, development, delivery, and evaluation of cybersecurity training for technical, operational, and business audiences. This role helps ensure personnel understand cybersecurity policies, procedures, tools, threats, and response expectations through structured, role-based training and awareness activities.

The ideal candidate combines cybersecurity knowledge, instructional design experience, and strong communication skills to translate complex security concepts into practical learning experiences. The role works with program leadership, security operations teams, engineers, assessors, and other stakeholders to develop training that supports operational readiness, compliance, and continuous improvement.

Key Responsibilities

Training Development & Instructional Design

• Develop cybersecurity training materials, lesson plans, facilitator guides, job aids, quick-reference guides, knowledge checks, and practical exercises.
• Design training content for varied audiences, including SOC personnel, system owners, end users, technical staff, leadership, and mission stakeholders.
• Translate cybersecurity policies, procedures, standards, incident response processes, and tool workflows into clear, actionable learning content.
• Maintain training materials to ensure alignment with current program requirements, operational procedures, technologies, and threat trends.

Training Delivery & Facilitation

• Deliver instructor-led, virtual, hybrid, and self-paced cybersecurity training sessions as required by the program.
• Facilitate technical demonstrations, tabletop discussions, scenario-based exercises, and hands-on learning activities.
• Adapt delivery approach and examples based on audience skill level, role, operational context, and learning objectives.
• Support onboarding and refresher training for cybersecurity personnel and stakeholders.

Cybersecurity Curriculum & Program Support

• Support development and maintenance of role-based cybersecurity training curricula, learning paths, and training schedules.
• Align training content with cybersecurity frameworks, compliance requirements, organizational policies, and program objectives.
• Coordinate with subject matter experts to validate technical accuracy and relevance of training content.
• Assist with training plans, training calendars, attendance tracking, completion reporting, and other program documentation.

Exercise, Readiness & Awareness Support

• Support cyber readiness activities such as incident response drills, phishing awareness, tabletop exercises, operational simulations, and lessons-learned sessions.
• Develop scenario materials that reinforce detection, reporting, escalation, investigation, containment, recovery, and communication procedures.
• Capture participant feedback, exercise observations, and improvement opportunities to inform future training and readiness activities.
• Promote cybersecurity awareness and reinforce secure behaviors across the program or organization.

Assessment, Metrics & Continuous Improvement

• Evaluate training effectiveness using surveys, knowledge checks, performance observations, completion metrics, and stakeholder feedback.
• Analyze training data to identify gaps, recurring issues, and opportunities to improve learning outcomes.
• Prepare training status updates, metrics, summaries, and recommendations for program leadership.
• Continuously improve training methods, templates, content libraries, and delivery practices based on feedback and operational needs.

Stakeholder Collaboration

• Work with SOC leadership, engineering teams, assessors, technical writers, threat intelligence personnel, and program management to understand training needs.
• Coordinate training logistics, communications, and materials with internal teams and external stakeholders.
• Support briefings or presentations related to cybersecurity training status, readiness, gaps, and planned improvements.