Cybersecurity Operations Technical Lead

GCyber; Shiloh (IL); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Paid leave 26 days

PTO increase annually

Parental leave

Military/Jury/Bereavement leave

401(k) matching

Disability insurance

Health/Dental/Vision coverage

Training & development

Commuter benefits

Parking allowance

Job summary

GCyber is seeking a Cybersecurity Operations Technical Lead to guide threat intelligence, detection engineering, analytics, and automation for a large DoD-related agency. You will direct complex investigations and intelligence-driven hunts, translating findings into defensive priorities and actionable recommendations for leadership.

You will lead a team across threat intel, detection engineering, data science, and automation, partnering with the IC, USCYBERCOM, DODIN, and CSSPs to set direction

Qualifications

• 10+ years information assurance experience.
• 5+ years in incident response and 5+ years in cyber threat intelligence.
• Experience leading DoD cyber investigations and collaborating with the IC.
• Bachelor's degree; 4 additional years of experience may substitute.
• GCIH, GCFA, GCTI, and CISSP certifications.
• Active TS/SCI clearance; complete required tool training before system access.

Responsibilities

• Lead threat intelligence, detection engineering, data science, and automation.
• Lead complex investigations and intelligence-driven threat hunts.
• Translate threat intelligence into detection requirements, hunt objectives, and defensive priorities.
• Partner with the intelligence community, USCYBERCOM, JFHQ-DODIN and peer CSSPs.
• Set technical direction for detection-as-code and automation.
• Brief threat assessments to leadership.
• Develop team members through mentoring and technical guidance.

Skills

Threat intel leadership

Incident response leadership

DoD investigations

Mentoring & guidance

Executive communications

Detection-as-code

Education

Bachelor's degree

Master's degree

TS/SCI clearance

Job description

GCyber is seeking a Cybersecurity Operations Technical Lead to support a large Department of War agency. You will lead threat intelligence, detection engineering, analytics, and automation, directing complex investigations and intelligence-driven hunts. You will turn technical findings into defensive priorities and clear recommendations for leadership.

As the Cybersecurity Operations Technical Lead, you will:

• Lead a team responsible for threat intelligence, detection engineering, data science, and automation.
• Lead complex investigations and intelligence-driven threat hunts.
• Translate threat intelligence into detection requirements, hunt objectives, and defensive priorities.
• Partner with the intelligence community, USCYBERCOM, JFHQ-DODIN and peer CSSPs.
• Set technical direction for detection-as-code and automation, including human approval gates.
• Brief threat assessments to the agency's communications and cyber leadership.
• Develop team members through mentoring and technical guidance.

Minimum Requirements and Experience

• 10+ years of information assurance experience, including 5+ in incident response and 5+ in cyber threat intelligence.
• Experience leading DoD cyber investigations and working with the intelligence community.
• Bachelor's degree (4 additional years of experience may substitute).
• GCIH or GCFA, GCTI, and CISSP.
• Active TS/SCI clearance; complete required tool training before system access.

Required Knowledge and Skills

• Advanced persistent threat tradecraft, especially against logistics and defense targets.
• Intelligence-driven defense: from adversary reporting to detections and hunts.
• Leading complex incident investigations from initial detection through resolution.
• Building engineering practices: detection-as-code, testing and automation.
• Explaining technical threats to senior leaders in operational terms.

Preferred Qualifications

• Master's degree.

Our Benefits

GCyber is committed to the well-being and development of every employee. Our benefits are designed to support your personal and professional goals, from health and wellness programs to retirement savings and career development opportunities. Highlights include:

• 26 Days of Paid Leave + Annual PTO Increase
• An extra day of paid leave for every year of employment with GCyber
• Paid Parental Leave
• Additional Leave Allowances for Military Duty, Jury Duty, and Bereavement Leave
• 401(k) Matching
• 100% Company-funded Disability Insurance
• 90% Company-Funded Health, Dental, and Vision Insurance, with contributions to insurance benefits for spouses, children, and family members
• Training and Professional Development Plans
• Commuter Benefits Plan
• Parking and Transportation Allowance

Equal Opportunity Employer

GCyber is an Equal Opportunity Employer. This means you don't have to worry about whether your application process will be fair. We consider all applicants without regard to race, color, religion, age, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, veteran status, or disability.

Stay in Touch

For future job notifications please follow GCyber on LinkedIn. https://linkedin.com/company/gcyber