Chief Cyber Threat Intelligence & Detection Leader

Synchrony; Stamford (CT); Hybrid; USD 170,000 - 290,000; Full time

Job summary

Synchrony is seeking a Cyber Intelligence Leader to guide CTI, detection engineering, and cyber hunt initiatives. You will translate threat signals into actionable intelligence and measurable detection improvements across the enterprise, partnering with JSOC, Incident Response, and other teams.

The role requires 8–12+ years in cybersecurity with deep experience in threat intelligence, threat hunting, and SIEM/EDR, plus 3+ years of leadership. A flexible hybrid work model is available.

Qualifications

• Bachelor’s degree in computer science or an equivalent degree and a minimum 5 years of work experience.
• 8–12+ years of cybersecurity experience with depth in threat intelligence, threat hunting, detection engineering, and/or incident response.
• 3+ years leading teams and/or enterprise programs with measurable outcomes.
• Demonstrated experience building and operationalizing detections within a SIEM/EDR environment and partnering with SOC/IR.

Responsibilities

• Define intelligence requirements and collection plans focused on threats relevant to financial services and Synchrony’s environment.
• Produce strategic, operational, and tactical intelligence (executive reporting, actor/campaign tracking, TTP and IOC packages).
• Translate intelligence into detection content, hunt hypotheses, response playbooks, and prioritized mitigations.
• Manage the intelligence lifecycle (collection → analysis → production → dissemination → feedback).
• Lead hypothesis-driven hunts mapped to MITRE ATT&CK, focused on high-risk scenarios and validated by available telemetry.

Skills

Threat intelligence

Detection engineering

Cyber threat hunting

MITRE ATT&CK

Leadership

Executive communication

Education

Bachelor’s degree in computer science

Tools

SIEM/EDR

Telemetry analysis

Job description

Synchrony is seeking a Cyber Intelligence Leader to guide CTI, detection engineering, and cyber hunt initiatives. You will translate threat signals into actionable intelligence and measurable detection improvements across the enterprise, partnering with JSOC, Incident Response, and other teams.

The role requires 8–12+ years in cybersecurity with deep experience in threat intelligence, threat hunting, and SIEM/EDR, plus 3+ years of leadership. A flexible hybrid work model is available.