Sans Instructor Jobs (NOW HIRING)

The Digital Sector is seeking a Lead Cybersecurity Trainer to support the DISA GSM-O II TN22 Boundary and Cyber Security Service Provider (CSSP) Services Program. GSM-O II delivers network operations and cyber defense support to the Defense Information Systems Agency (DISA), the Department of Defense (DoD), and Combatant Commands.

The Lead Cybersecurity Trainer is responsible for leading the development, delivery, coordination, and assessment of cybersecurity training activities supporting the TN22 workforce. The position serves as a senior instructor and training subject-matter expert, ensuring personnel receive timely, relevant, and mission-aligned training to support operational readiness.

The successful candidate will work closely with the Cybersecurity Training Manager, TN22 Program Manager, Service Delivery Manager, site coordinators, technical leads, trainers, and Government stakeholders to identify training requirements; develop instructional materials; deliver training; assess training effectiveness; and document workforce readiness. This role supports a geographically distributed workforce and may require coordination across multiple sites, work centers, and shifts.

Key Responsibilities

• Lead the design, development, delivery, and continuous improvement of cybersecurity training for the TN22 workforce.
• Deliver instructor-led, virtual, hands-on, and scenario-based training supporting cyber defense, network operations, and CSSP mission requirements.
• Develop and maintain training materials, lesson plans, instructor guides, student guides, practical exercises, assessments, and associated training records.
• Support training plans aligned to assigned DoD Cyber Workforce Framework work roles, contractual requirements, mission needs, and applicable DoD 8140 qualification requirements.
• Coordinate with technical and functional leads to ensure training content reflects current operational tools, procedures, threats, and mission priorities.
• Assess learner performance and training effectiveness through knowledge checks, practical exercises, feedback, and readiness assessments.
• Identify individual and collective training gaps and recommend training, mentoring, remediation, or development actions to program leadership.
• Support the planning, execution, and evaluation of collective training events, technical exercises, tabletop events, and readiness-validation activities.
• Capture lessons learned from training events, exercises, operational feedback, and readiness assessments; update training content and methods accordingly.
• Coordinate training schedules, facilities, virtual platforms, materials, and instructor resources across multiple sites and stakeholder organizations.
• Maintain complete and accurate training documentation, qualification records, attendance rosters, assessment results, and other required program artifacts.
• Contribute to readiness metrics, dashboards, and recurring reports by providing timely and accurate training-status data.
• Provide technical guidance and mentorship to junior trainers, instructors, and training coordinators.
• Brief program leadership and stakeholders on training execution, learner performance, training risks, readiness gaps, and recommended corrective actions.

Basic Qualifications

• Active Top Secret/SCI clearance; must be able to maintain clearance eligibility.
• Bachelor's degree in cybersecurity, information technology, education, instructional design, or a related discipline from an accredited institution, with 8+ years of relevant experience. Additional years of relevant experience may be considered in lieu of a degree.
• Demonstrated experience delivering cybersecurity, information technology, network operations, or operational training in a large or geographically distributed organization.
• Experience developing and maintaining training content, including lesson plans, instructional materials, practical exercises, and learner assessments.
• Working knowledge of DoD cyber workforce concepts, including DoD 8140 and DoD Cyber Workforce Framework work roles.
• Experience assessing training effectiveness and identifying workforce training or capability gaps.
• Ability to coordinate with Government, contractor, technical, and operational stakeholders.
• Strong written, verbal, presentation, and facilitation skills.

Preferred Qualifications

• Experience supporting DISA, a Cyber Security Service Provider, network operations center, security operations center, or cyber defense mission.
• Experience developing or delivering collective training events, technical exercises, cyber range events, or scenario-based cyber training.
• Experience with adult learning principles, instructional systems design, or learning-management systems.
• Familiarity with workforce analytics, readiness reporting, and training-record management.
• Relevant cybersecurity certifications, such as SANS GIAC, GCIA, GCIH, CASP+, Security+, or equivalent credentials.
• Instructor, facilitator, curriculum-development, or training-management certification or equivalent experience.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.