Cybersecurity Operations Lead: Threat Intel & Automation

GCyber; Shiloh (IL); Híbrido; USD 180.000 - 240.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Paid leave 26 days

PTO increase annually

Parental leave

Military/Jury/Bereavement leave

401(k) matching

Disability insurance

Health/Dental/Vision coverage

Training & development

Commuter benefits

Parking allowance

Descripción de la vacante

GCyber is seeking a Cybersecurity Operations Technical Lead to guide threat intelligence, detection engineering, analytics, and automation for a large DoD-related agency. You will direct complex investigations and intelligence-driven hunts, translating findings into defensive priorities and actionable recommendations for leadership.

You will lead a team across threat intel, detection engineering, data science, and automation, partnering with the IC, USCYBERCOM, DODIN, and CSSPs to set direction

Formación

• 10+ years information assurance experience.
• 5+ years in incident response and 5+ years in cyber threat intelligence.
• Experience leading DoD cyber investigations and collaborating with the IC.
• Bachelor's degree; 4 additional years of experience may substitute.
• GCIH, GCFA, GCTI, and CISSP certifications.
• Active TS/SCI clearance; complete required tool training before system access.

Responsabilidades

• Lead threat intelligence, detection engineering, data science, and automation.
• Lead complex investigations and intelligence-driven threat hunts.
• Translate threat intelligence into detection requirements, hunt objectives, and defensive priorities.
• Partner with the intelligence community, USCYBERCOM, JFHQ-DODIN and peer CSSPs.
• Set technical direction for detection-as-code and automation.
• Brief threat assessments to leadership.
• Develop team members through mentoring and technical guidance.

Conocimientos

Threat intel leadership

Incident response leadership

DoD investigations

Mentoring & guidance

Executive communications

Detection-as-code

Educación

Bachelor's degree

Master's degree

TS/SCI clearance

Descripción del empleo

GCyber is seeking a Cybersecurity Operations Technical Lead to guide threat intelligence, detection engineering, analytics, and automation for a large DoD-related agency. You will direct complex investigations and intelligence-driven hunts, translating findings into defensive priorities and actionable recommendations for leadership.

You will lead a team across threat intel, detection engineering, data science, and automation, partnering with the IC, USCYBERCOM, DODIN, and CSSPs to set direction