Senior Microsoft Security Instructor (Red & Blue Team)

We are seeking an experienced Microsoft Security Instructor to deliver technical training in both offensive (Red Team) and defensive (Blue Team) security within Microsoft enterprise and cloud environments. Training covers cloud security, digital forensics, incident response, threat hunting, and security administration, for learners ranging from foundational to advanced levels.

Location: Caucasus Region (Relocation required)

Contract type: permanent, full-time

Package

• Competitive base salary (DOE)
• Full coverage of travel expense
• Fully furnished accommodation provided
• No income tax (due to the nature of the location)
• Full medical cover

Key Responsibilities

• Deliver instructor-led classroom and hands-on lab-based cybersecurity training.
• Prepare and maintain course materials, presentations, labs, and practical exercises.
• Keep training content aligned with current Microsoft technologies and cybersecurity best practices.
• Mentor students throughout the learning process and provide technical guidance.
• Develop and maintain realistic enterprise lab environments.
• Assess student performance through practical exercises, examinations, and/or capstone or CTF-style challenges.
• Collaborate with internal teams to continuously improve training quality.
• Stay current with emerging threats, attack techniques, and Microsoft security technologies.

Looking to advance your Cyber Security career with relocation support? Explore Cyber Security Jobs with Relocation Packages that include comprehensive packages to help you move and settle in your new role.

• Teach and model responsible disclosure practices, legal boundaries, and ethical conduct when delivering offensive security content.

Required Technical Expertise

Strong knowledge and hands-on experience in most of the following areas

Microsoft Infrastructure & Identity

• Windows Server administration
• Active Directory Domain Services and Group Policy
• DNS, DHCP, PKI, and enterprise networking
• Microsoft Entra ID (Azure AD), Conditional Access, and Privileged Identity Management (PIM)
• Microsoft 365 administration
• Windows client administration
• Hybrid identity and access management (on-prem to cloud)

Cloud Security

• Microsoft Azure administration and security
• Microsoft Defender for Cloud
• Hybrid cloud environments and cloud security best practices

Blue Team / Defensive Security

• Microsoft Defender suite

Discover our full range of relocation jobs with comprehensive support packages to help you relocate and settle in your new location.

• Microsoft Sentinel (cloud-native SIEM/SOAR
• Incident detection and response
• Threat hunting and security monitoring
• Endpoint and identity protection
• Log analysis and Windows hardening

Red Team / Offensive Security

• Active Directory and Microsoft Entra ID attacks
• Windows privilege escalation and lateral movement techniques
• Credential and Kerberos attacks
• PowerShell for offensive operations
• Enumeration of Windows environments
• Active Directory Certificate Services (AD CS) attacks
• Microsoft-focused penetration testing techniques (Azure, Microsoft 365, hybrid identity)

Digital Forensics

• Windows forensic investigations and artifact analysis
• Event log analysis and timeline creation
• Incident investigation, evidence collection, and analysis

Scripting & Automation

• PowerShell for Windows automation and security scripting

Essential Skills

• Excellent presentation and communication skills.
• Ability to explain complex technical concepts to audiences with different experience levels.
• Strong troubleshooting and problem-solving abilities.
• Experience developing practical labs and hands-on exercises.
• Passion for teaching and mentoring students.

Required & Preferred Qualifications

Required

• 5+ years of hands-on cybersecurity experience across infrastructure, cloud, or security operations.
• Demonstrated depth in at least two of: Red Team, Blue Team, digital forensics, or Microsoft cloud security.

Preferred

• Previous experience delivering technical cybersecurity training or instructing adult learners.
• Microsoft role-based certifications: AZ-104, AZ-500, SC-200, SC-300, SC-100, or equivalent.
• Foundational security certification: Security+ or CySA+ (entry-to-mid level).
• Advanced offensive security certification: OSCP, PNPT, CRTO, or CRTP.
• Advanced forensics certification: GCFA or GCFE.
• Experience working in enterprise Microsoft environments.