Cyber Defense Training Lead

At U.S. Bank, we’re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed.  We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at—all from Day One.

Job Description

U.S. Bank is seeking a Cyber Defense Training Lead to support, operate, and innovate U.S. Bank's Cyber Range while serving as the program's lead for developing and delivering custom training to Cyber Defense personnel and measuring their skills development over time. This role sits within the Attack Surface Management Organization’s Cyber Range team and partners closely with the Global Security Operations Center (GSOC), Threat Hunt, Incident Response, and broader Cyber Defense functions to mature analyst capability through hands-on, lab-based learning experiences delivered in the Range.

Overall Responsibilities

Cyber Defense Training Development & Delivery

• Design, develop, and publish structured training curricula for Cyber Defense audiences — including Microsoft Sentinel, detection engineering, AI/LLM security, and introductory penetration testing content — with defined learning objectives, lab architecture, use-case mapping to SOC workflows, and assessment criteria.
• Build and maintain hands-on lab modules deployed within the Cyber Range that reinforce real-world detection, investigation, and response workflows used by GSOC analysts, Threat Hunt, and Incident Response teams.
• Plan, schedule, and deliver the Cyber Defense Training (CDT) cohort program — including cohort intake, curriculum refresh between cohorts, lab environment provisioning, live instruction, and post-cohort retrospectives — in support of continual upskilling and compliance-driven periodic training requirements.
• Develop and deliver the AI/LLM Training portfolio to upskill bank personnel on general AI/LLM security risks, partnering with peer teams on lab content and outreach events such as Cyber Security Awareness Month and Early Careers seminars.
• Maintain and evolve the Introduction to Penetration Testing seminar and other outreach-oriented training that broadens cyber capability across the Bank.

Skills Measurement & Program Effectiveness

• Define and operationalize pre- and post-training assessment instruments that quantify participant knowledge gain (e.g., baseline → post-course delta, lab-based performance scoring) and report results to leadership; the current Cyber Defense Training program has demonstrated a 257% increase in post-training assessment scores, and this role is accountable for sustaining and extending that measurable outcome.
• Establish and report on training program KPIs, including coverage of target Cyber Defense population, completion rates, skill-level progression by role, and stakeholder feedback trends.
• Gather and incorporate stakeholder feedback (Cyber Defense leadership, GSOC analysts, learners) to iteratively improve curriculum effectiveness and lab realism.
• Maintain training records and artifacts sufficient to satisfy applicable regulatory and compliance expectations for periodic security training of Cyber Defense staff.

Cyber Range Operations

• Work in a team-based environment to support, maintain, and innovate U.S. Bank's Cyber Range.
• Install, configure, and manage on-premise network, compute, and storage hardware.
• Design and manage complex network topologies, including segmented and simulated threat environments.
• Develop and maintain comprehensive documentation for Cyber Range infrastructure, configurations, and operations.
• Maintain awareness of emerging industry security technologies, technology issues, regulatory issues, and practices.
• Provide Information Security subject matter expertise in various risk assessments (inherent risk and definition of the residual risk of a target state).
• Weigh business needs against security concerns and recommend necessary changes to enhance information systems security.
• Ensure adherence to compliance with regulations and policies.
• Support cyber training exercises, red/blue team operations, and system simulations.
• May be required to lift computer equipment up to 50 lbs.

Basic Qualifications

•  Bachelor's degree, or equivalent work experience.
• 8 or more years of relevant experience.
• Effective communication, presentation skills, leadership, problem-solving, and analytical skills.
• Proven collaboration and influencing skills.

Experience Should Include

Core Cyber Range Engineering

• Experience configuring networking devices, cloud environments, and operating systems including Windows / Linux / macOS.
• Ability to create custom queries, dashboards, and reporting metrics.
• Intermediate scripting experience (Bash, Python, PowerShell).
• Experience with agile methodologies.
• Strong verbal and written communication skills.
• Experience using APIs and CI/CD pipelines.
• Hands-on experience implementing infrastructure as code, automated configuration, and environment provisioning workflows.
• Working knowledge of Git workflows and best practices.
• Working knowledge of information security architecture, security technologies, administration, network and internet security.

Training Development, Delivery & Measurement

• Demonstrated experience designing and delivering technical security training to SOC, incident response, threat hunt, or similar Cyber Defense audiences — including curriculum design, hands-on lab development, and live instruction.
• Familiarity with Microsoft Sentinel (or comparable SIEM/SOAR platforms) sufficient to author analyst training that maps to real SOC detection and response workflows.
• Working knowledge of AI/LLM security risks and ability to translate emerging concepts into hands-on learner exercises.
• Experience building knowledge assessments and skills measurement frameworks (pre/post testing, lab-based scoring, competency rubrics) and reporting outcomes to leadership.
• Strong instructional design instincts — able to scope learning objectives, sequence content, and produce learner-ready materials (slides, lab guides, instructor notes).
• Comfort presenting and facilitating in front of technical audiences of varying experience levels.

This role requires working from a U.S. Bank location three (3) or more days per week.

If there’s anything we can do to accommodate a disability during any portion of the application or hiring process, please refer to our disability accommodations for applicants.

Benefits: 

Our approach to benefits and total rewards considers our team members’ whole selves and what may be needed to thrive in and outside work. That's why our benefits are designed to help you and your family boost your health, protect your financial security and give you peace of mind. Our benefits include the following:

• Healthcare (medical, dental, vision)

• Basic term and optional term life insurance

• Short-term and long-term disability

• Pregnancy disability and parental leave

• 401(k) and employer-funded retirement plan

• Paid vacation (from two to five weeks depending on salary grade and tenure)

• Up to 11 paid holiday opportunities

• Adoption assistance

• Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law

Review our full benefits available by employment status here.

U.S. Bank is an equal opportunity employer. We consider all qualified applicants without regard to race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, and other factors protected under applicable law.

E-Verify

U.S. Bank participates in the U.S. Department of Homeland Security E-Verify program in all facilities located in the United States and certain U.S. territories. The E-Verify program is an Internet-based employment eligibility verification system operated by the U.S. Citizenship and Immigration Services. Learn more about the E-Verify program.

The salary range reflects figures based on the primary location, which is listed first. The actual range for the role may differ based on the location of the role. In addition to salary, U.S. Bank offers a comprehensive benefits package, including incentive and recognition programs, equity stock purchase 401(k) contribution and pension (all benefits are subject to eligibility requirements). Pay Range: $126,820.00 - $149,200.00

U.S. Bank will consider qualified applicants with arrest or conviction records for employment. U.S. Bank conducts background checks consistent with applicable local laws, including the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act as well as the San Francisco Fair Chance Ordinance. U.S. Bank is subject to, and conducts background checks consistent with the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA). In addition, certain positions may also be subject to the requirements of FINRA, NMLS registration, Reg Z, Reg G, OFAC, the NFA, the FCPA, the Bank Secrecy Act, the SAFE Act, and/or federal guidelines applicable to an agreement, such as those related to ethics, safety, or operational procedures.

Applicants must be able to comply with U.S. Bank policies and procedures including the Code of Ethics and Business Conduct and related workplace conduct and safety policies.

Posting may be closed earlier due to high volume of applicants.