Microsoft Certified Trainer

MICROSOFT SECURITY ANALYST & SECURITY ENGINEER- PRACTICAL TRAINING PROGRAMME

About the Programme

We are looking for an experienced Microsoft Security Analyst / Security Engineer to serve as atechnical instructor for a practical Microsoft Security training programme.

Language Requirement: Fluency in EnglishCommunication: Excellent communication is required.

Our target students are IT Support professionals, System Administrators, Network Engineers, andindividuals with general IT/technical knowledge who want to transition into Microsoft SecurityOperations and Security Engineering.

TRAINING OBJECTIVE:

The objective is to transform participants from general IT/technical roles into practitioners who can:

Identify Microsoft security issues

Investigate and analyse security incidents

Recommend remediation

Implement security controls

Verify remediation

Document Microsoft security issues in real-world environments

REQUIRED TECHNICAL AREAS

The instructor must have strong practical experience with:

Microsoft Defender XDR

Microsoft Defender for Endpoint

Microsoft Defender for Office 365

Microsoft Defender for Cloud

Microsoft Defender for Cloud Apps

Microsoft Sentinel

Microsoft Entra ID

Conditional Access

Identity Protection

Microsoft Intune

Microsoft Purview

Microsoft Secure Score / Security Posture

Kusto Query Language (KQL)

Advanced Hunting

PowerShell

Incident Response

Threat Hunting

Vulnerability Management

Zero Trust

Security assessment and remediation

PRACTICAL SKILLS STUDENTS ARE EXPECTED TO DEVELOP

Students should be able to:

1. Investigate Microsoft security alerts and incidents.
2. Analyse compromised users and endpoints.
3. Investigate suspicious sign-ins and identity threats.
4. Perform endpoint investigation and remediation.
5. Configure and troubleshoot Conditional Access.
6. Configure Microsoft Defender security controls.
7. Create KQL queries and Advanced Hunting queries.
8. Build Sentinel detection rules.
9. Investigate phishing and email security incidents.
10. Investigate cloud security alerts.
11. Assess Microsoft 365 security posture.
12. Identify security gaps and recommend remediation.
13. Implement security improvements.
14. Verify whether remediation was successful.
15. Produce professional security incident and assessment reports.

TRAINING STYLE

This must be a hands-on, scenario-based programme, not a theory-only course.

We expect approximately 70–80% practical labs and real-world scenarios.

Students should regularly work through the following security lifecycle:

DETECT → TRIAGE → INVESTIGATE → ANALYSE → CONTAIN → REMEDIATE → VERIFY → REPORT

The instructor should provide:

Practical labs

Assignments

Troubleshooting exercises

Enterprise security scenarios

PROGRAMME STRUCTURE

Duration: 12 Weekend Days

Schedule:

• Saturday & Sunday
• 2–3 hours per day
• 1 day for Assignment Review (1–2 hours before the next class)

Venue: Microsoft Teams

Time: 8:00 PM – 10:30 PM WAT (UTC+1)

The time may change slightly based on demand.

REAL-WORLD SCENARIOS

The instructor should be capable of creating scenarios involving:

Compromised Microsoft 365 account

Phishing attack

Malware infection

Suspicious PowerShell activity

Risky sign-in

Ransomware detection

Unprotected endpoint

Misconfigured Conditional Access

Excessive administrator privileges

Defender onboarding problems

Sentinel detection alerts

Data security incidents

Vulnerability/security posture issues

DELIVERABLES

The successful instructor will be expected to provide:

Complete course syllabus

Practical lab roadmap

Training presentations/materials

Lab exercises

Real-world case studies

KQL exercises

Assignments

Assessments

Final practical project

Student reference materials

IDEAL CANDIDATE

We are looking for someone with real production experience, not someone who has only studiedMicrosoft certifications.

Preferred Certifications

• SC-200
• SC-300
• AZ-500
• SC-100
• MS-102
• Microsoft Security-related certifications

Certifications are useful, but demonstrable practical experience is more important.

APPLICATION REQUIREMENT

Please provide the following:

1. Your Microsoft Security experience.
2. Microsoft security products you have implemented/administered.
3. Relevant certifications.
4. Your proposed training syllabus.
5. Examples of practical labs you can deliver.
6. Your teaching/training experience.
7. Your hourly or complete-course fee.
8. Your availability.
9. A short description of a real Microsoft security incident you have investigated and how youresolved it.

Shortlisted candidates may be required to conduct a 30-minute practical demonstration beforeengagement.

IMPORTANT

We are specifically looking for an instructor who can teach students how to solve real Microsoftsecurity problems — not simply prepare them for an examination.

Details of the programme will be shared with you once you are fully engaged.

Note: This is a long-term project. We only require instructors with clear communication skills who canteach at least 80% practical skills.

Best Regards

Abby