Day-to-Day Responsibilities
Design network layouts and virtual machines that mirror a real organisation's systems for training or testing.
Build attack scenarios, such as phishing, malware spread or privilege escalation, using approved tools.
Set up monitoring and logging so trainers and participants can see what happened during an exercise.
Automate environment setup and reset so that the next training run can start quickly.
Work with SOC analysts, red teams and trainers to define exercise objectives and scoring.
Test the range regularly, apply patches and keep it isolated from live networks.
Write documentation and debrief reports after each exercise and recommend improvements.
