Cybersecurity Ops Lead: Threat Hunts & Detection

GCyber; Illinois; On-site; USD 150,000 - 190,000; Full time

Job summary

GCyber is seeking a Cybersecurity Operations Technical Lead to support a large Department of War agency. You will lead threat intelligence, detection engineering, analytics, and automation, directing complex investigations and intelligence-driven hunts.

You will turn technical findings into defensive priorities and clear recommendations for leadership. The role also involves mentoring and developing team members, setting direction for detection-as-code, and briefing senior leadership on risk and

Qualifications

• 10+ years of information assurance experience, including 5+ in incident response and 5+ in cyber threat intelligence.
• Experience leading DoD cyber investigations and working with the intelligence community.
• Bachelor's degree (4 additional years of experience may substitute).
• GCIH or GCFA, GCTI, and CISSP.
• Active TS/SCI clearance; complete required tool training before system access.

Responsibilities

• Lead threat intelligence, detection engineering, data science, and automation.
• Lead complex investigations and intelligence-driven threat hunts.
• Translate threat intelligence into detection requirements, hunt objectives, and defensive priorities.
• Partner with the intelligence community, USCYBERCOM, JFHQ-DODIN and peer CSSPs.
• Set technical direction for detection-as-code and automation, including human approval gates.
• Brief threat assessments to the agency's communications and cyber leadership.
• Develop team members through mentoring and technical guidance.

Skills

Threat intelligence

Incident response

Cyber threat intelligence

Detection engineering

Automation

Leadership

Education

Bachelor's degree

Master's degree

Job description

GCyber is seeking a Cybersecurity Operations Technical Lead to support a large Department of War agency. You will lead threat intelligence, detection engineering, analytics, and automation, directing complex investigations and intelligence-driven hunts.

You will turn technical findings into defensive priorities and clear recommendations for leadership. The role also involves mentoring and developing team members, setting direction for detection-as-code, and briefing senior leadership on risk and