Cyber Operations Team Lead, 24/7 SOC (TS/SCI)

GCyber; Illinois; On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Paid Leave and PTO

Parental Leave

401(k) Matching

Health/Dental/Vision Insurance

Professional Development

Job summary

GCyber is seeking a Cybersecurity Operations Team Lead to run a 24/7 security operations center for a large DoD-related agency in Illinois. You will oversee monitoring, incident response, and forensics, ensuring continuous coverage and timely decisions.

You will mentor analysts, design shift coverage, and drive process improvements with metrics-based performance reviews. Strong DoD incident handling knowledge is essential.

Qualifications

• 7+ years in security analytics, incident response, threat analysis or security engineering.
• Bachelor's degree; 4 additional years of experience may substitute.
• CISSP and GCIH or GCIA certifications.
• Active TS/SCI clearance; complete required tool training before system access.

Responsibilities

• Lead a 24/7 monitoring, incident response, and forensics team.
• Escalation point for all shifts.
• Manage incident declaration, escalation, and reporting to USCYBERCOM and JFHQ-DODIN.
• Maintain watch schedules, leave coverage, and staffing for continuous operations.
• Lead shift briefings, handoffs, and reviews; resolve recurring issues.
• Analyze triage, detection, and response metrics; implement improvements.
• Approve automated response actions under tiered approvals.
• Develop analysts through mentoring and performance feedback.

Skills

24/7 SOC

Incident leadership

Decision making under pressure

Mentoring staff

SIEM/EDR investigations

Education

Bachelor's degree

Tools

SIEM

EDR

Job description

GCyber is seeking a Cybersecurity Operations Team Lead to run a 24/7 security operations center for a large DoD-related agency in Illinois. You will oversee monitoring, incident response, and forensics, ensuring continuous coverage and timely decisions.

You will mentor analysts, design shift coverage, and drive process improvements with metrics-based performance reviews. Strong DoD incident handling knowledge is essential.