Cyber Threat Intel & Detection Ops Lead

GCyber; Illinois; On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Paid leave 26 days

Parental leave

401(k) matching

Health, dental, vision 90% coverage

Training and professional development

Commuter benefits

Parking and transportation allowance

Job summary

GCyber is seeking a Cybersecurity Operations Technical Lead to guide threat intelligence, detection engineering, analytics, and automation for a large government agency. You will direct complex investigations and intelligence-driven hunts, turning findings into defensive priorities for leadership.

You will mentor team members and set technical direction for detection-as-code, gate-reviewed automation, and operational threat communications.

Qualifications

• 10+ years of information assurance experience, including 5+ in incident response and 5+ in cyber threat intelligence.
• Experience leading DoD cyber investigations and working with the intelligence community.
• Bachelor's degree (4 additional years of experience may substitute).
• GCIH or GCFA, GCTI, and CISSP.
• Active TS/SCI clearance; complete required tool training before system access.

Responsibilities

• Lead threat intelligence, detection engineering, data science, and automation.
• Lead complex investigations and intelligence-driven threat hunts.
• Translate threat intelligence into detection requirements, hunt objectives, and defensive priorities.
• Partner with the intelligence community, USCYBERCOM, JFHQ-DODIN and peer CSSPs.
• Set technical direction for detection-as-code and automation, including human approval gates.
• Brief threat assessments to the agency's communications and cyber leadership.
• Develop team members through mentoring and technical guidance.

Skills

Threat intelligence

Incident response

Cyber threat hunting

Leadership

Detection engineering

Automation

Communication with leadership

Education

Bachelor's degree

Master's degree

Job description

GCyber is seeking a Cybersecurity Operations Technical Lead to guide threat intelligence, detection engineering, analytics, and automation for a large government agency. You will direct complex investigations and intelligence-driven hunts, turning findings into defensive priorities for leadership.

You will mentor team members and set technical direction for detection-as-code, gate-reviewed automation, and operational threat communications.