24/7 DoD Cybersecurity Operations Lead

GCyber; Illinois; On-site; USD 140,000 - 190,000; Full time

Job summary

GCyber is seeking a Cybersecurity Operations Team Lead to guide a 24/7 security operations center that monitors, responds to incidents, and performs forensic analysis for a large DoD agency. You will oversee shift coverage, coordinate decisions, and drive improvements through defined procedures and performance metrics.

You will mentor analysts, manage escalation and reporting to USCYBERCOM and JFHQ-DODIN, and lead briefings and reviews to reduce recurring issues and strengthen defensive posture.

Qualifications

• 7+ years in security analytics, incident response, threat analysis or security engineering.
• Bachelor's degree (4 additional years of experience may substitute).
• CISSP, and GCIH or GCIA.

Responsibilities

• Lead 24/7 SOC monitoring, incident response and forensics.
• Escalation point for all shifts.
• Manage incident declaration, escalation and reporting to USCYBERCOM and JFHQ-DODIN.
• Maintain watch schedules, leave coverage and staffing for continuous operations.
• Lead shift briefings, handoffs and operational reviews.
• Analyze metrics and drive improvements.
• Approve automated responses under tiered approval.
• Develop analysts through mentoring and performance feedback.

Skills

Security analytics

Incident response

Threat analysis

Coaching / mentoring

People leadership

Education

Bachelor's degree

CISSP

GCIH or GCIA

Tools

SIEM

EDR

Job description

GCyber is seeking a Cybersecurity Operations Team Lead to guide a 24/7 security operations center that monitors, responds to incidents, and performs forensic analysis for a large DoD agency. You will oversee shift coverage, coordinate decisions, and drive improvements through defined procedures and performance metrics.

You will mentor analysts, manage escalation and reporting to USCYBERCOM and JFHQ-DODIN, and lead briefings and reviews to reduce recurring issues and strengthen defensive posture.