Cyber Range Engineer - Cyber Defense Training Lead

Cyber Range Engineer

U.S. Bank is seeking a Cyber Range Engineer to support, operate, and innovate U.S. Bank's Cyber Range while serving as the program's lead for developing and delivering custom training to Cyber Defense personnel and measuring their skills development over time. This role sits within the Attack Surface Management Organization's Cyber Range team and partners closely with the Global Security Operations Center (GSOC), Threat Hunt, Incident Response, and broader Cyber Defense functions to mature analyst capability through hands-on, lab-based learning experiences delivered in the Range.

• Design, develop, and publish structured training curricula for Cyber Defense audiences — including Microsoft Sentinel, detection engineering, AI/LLM security, and introductory penetration testing content — with defined learning objectives, lab architecture, use-case mapping to SOC workflows, and assessment criteria.
• Build and maintain hands-on lab modules deployed within the Cyber Range that reinforce real-world detection, investigation, and response workflows used by GSOC analysts, Threat Hunt, and Incident Response teams.
• Plan, schedule, and deliver the Cyber Defense Training (CDT) cohort program — including cohort intake, curriculum refresh between cohorts, lab environment provisioning, live instruction, and post-cohort retrospectives — in support of continual upskilling and compliance-driven periodic training requirements.
• Develop and deliver the AI/LLM Training portfolio to upskill bank personnel on general AI/LLM security risks, partnering with peer teams on lab content and outreach events such as Cyber Security Awareness Month and Early Careers seminars.
• Maintain and evolve the Introduction to Penetration Testing seminar and other outreach-oriented training that broadens cyber capability across the Bank.

• Define and operationalize pre- and post-training assessment instruments that quantify participant knowledge gain (e.g., baseline → post-course delta, lab-based performance scoring) and report results to leadership; the current Cyber Defense Training program has demonstrated a 257% increase in post-training assessment scores, and this role is accountable for sustaining and extending that measurable outcome.
• Establish and report on training program KPIs, including coverage of target Cyber Defense population, completion rates, skill-level progression by role, and stakeholder feedback trends.
• Gather and incorporate stakeholder feedback (Cyber Defense leadership, GSOC analysts, learners) to iteratively improve curriculum effectiveness and lab realism.
• Maintain training records and artifacts sufficient to satisfy applicable regulatory and compliance expectations for periodic security training of Cyber Defense staff.

• Work in a team-based environment to support, maintain, and innovate U.S. Bank's Cyber Range.
• Install, configure, and manage on-premise network, compute, and storage hardware.
• Design and manage complex network topologies, including segmented and simulated threat environments.
• Develop and maintain comprehensive documentation for Cyber Range infrastructure, configurations, and operations.
• Maintain awareness of emerging industry security technologies, technology issues, regulatory issues, and practices.
• Provide Information Security subject matter expertise in various risk assessments (inherent risk and definition of the residual risk of a target state).
• Weigh business needs against security concerns and recommend necessary changes to enhance information systems security.
• Ensure adherence to compliance with regulations and policies.
• Support cyber training exercises, red/blue team operations, and system simulations.
• May be required to lift computer equipment up to 50 lbs.

• Bachelor's degree, or equivalent work experience.
• 8 or more years of relevant experience.
• Effective communication, presentation skills, leadership, problem-solving, and analytical skills.
• Proven collaboration and influencing skills.

• Experience configuring…