Cybersecurity Operations Technical Lead

GCyber; Shiloh (IL); On-site; USD 140,000 - 190,000; Full time

Job summary

GCyber seeks a Cybersecurity Operations Technical Lead to oversee threat intelligence, detection engineering, analytics, and automation for a large DoD-related agency. You will direct complex investigations and intelligence-driven hunts, translating findings into defensive priorities and leadership-ready recommendations.

This role requires 10+ years in information assurance (5+ incident response, 5+ threat intel), DoD investigation experience, and TS/SCI clearance. Master’s degree preferred.

Qualifications

• 10+ years information assurance experience with 5+ in incident response and 5+ in cyber threat intel.
• Experience leading DoD cyber investigations and collaboration with intelligence community.
• Active TS/SCI clearance and completion of required tool training before access.

Responsibilities

• Lead threat intelligence, detection engineering, data science, and automation teams.
• Direct complex investigations and intelligence-driven threat hunts.
• Translate threat intelligence into detection requirements and hunt objectives.
• Set technical direction for detection-as-code and automation.
• Brief threat assessments to agency leadership and cyber leadership.
• Develop team members through mentoring and technical guidance.

Skills

Threat intelligence

Incident response

Detection engineering

Automation

Leadership

Communication with leadership

Education

Bachelor's degree

Master's degree

Tools

GCIH

GCFA

GCTI

CISSP

Job description

GCyber is seeking a Cybersecurity Operations Technical Lead to support a large Department of War agency. You will lead threat intelligence, detection engineering, analytics, and automation, directing complex investigations and intelligence-driven hunts. You will turn technical findings into defensive priorities and clear recommendations for leadership.

As The Cybersecurity Operations Technical Lead, You Will

• Lead a team responsible for threat intelligence, detection engineering, data science, and automation.
• Lead complex investigations and intelligence-driven threat hunts.
• Translate threat intelligence into detection requirements, hunt objectives, and defensive priorities.
• Partner with the intelligence community, USCYBERCOM, JFHQ-DODIN and peer CSSPs.
• Set technical direction for detection-as-code and automation, including human approval gates.
• Brief threat assessments to the agency's communications and cyber leadership.
• Develop team members through mentoring and technical guidance.

Minimum Requirements And Experience

• 10+ years of information assurance experience, including 5+ in incident response and 5+ in cyber threat intelligence.
• Experience leading DoD cyber investigations and working with the intelligence community.
• Bachelor's degree (4 additional years of experience may substitute).
• GCIH or GCFA, GCTI, and CISSP.
• Active TS/SCI clearance; complete required tool training before system access.

Required Knowledge And Skills

• Advanced persistent threat tradecraft, especially against logistics and defense targets.
• Intelligence-driven defense: from adversary reporting to detections and hunts.
• Leading complex incident investigations from initial detection through resolution.
• Building engineering practices: detection-as-code, testing and automation.
• Explaining technical threats to senior leaders in operational terms.

Preferred Qualifications

• Master's degree.