SOC Analyst, Cybersecurity Training Contributor
Well BP
About the Role
Well BP is developing a hands-on cybersecurity workforce training program designed to provide learners with practical experience investigating alerts and responding to incidents in a simulated Security Operations Center (SOC). We are seeking experienced security operations professionals to develop scenario-based training content. This project-based, part-time contract role offers flexible scheduling.
Key Responsibilities
- Develop realistic alert and incident investigation scenarios.
- Create supporting logs, tickets, and other investigation artifacts.
- Write investigation walkthroughs and analyst guidance.
- Develop assessment questions and scoring criteria.
- Review content for technical accuracy, clarity, and relevance.
- Collaborate with the content team to incorporate feedback.
- Deliver agreed project milestones within established timelines.
- Create original materials that protect employer and client confidentiality.
Requirements & Tech Stack
- Current or recent hands-on experience in security operations, incident response, or managed security services.
- Working knowledge of threat detection, incident response, and log analysis.
- Practical experience with SIEM and EDR tools.
- Familiarity with Windows and Linux environments.
- Strong written communication skills and the ability to explain technical concepts clearly.
- Ability to manage scoped assignments independently in a remote environment.
- Based in the United States and authorized to work in the United States.
Preferred Qualifications
- Experience with Splunk, Microsoft Sentinel, CrowdStrike, Wireshark, or comparable security tools.
- Experience developing technical training materials.
- Experience training, mentoring, or onboarding junior analysts.
- Relevant certifications, such as Security+, CySA+, GCIH, GCIA, or BTL1.
Compensation and Commitment
- Hourly contract rate: $40 to $60, depending on experience.
- Engagement duration: Approximately 10 to 20 total hours per engagement.
- Flexible scheduling, with scope and deadlines agreed before each engagement.
- Engagements begin in November 2026 and continue on a rolling basis.