Director of Cyber Threat Intelligence & Detection

Synchrony; Florida; Hybrid; USD 170,000 - 290,000; Full time

Job summary

Synchrony seeks a Cyber Intelligence Leader to steer CTI, detection engineering, and cyber hunt initiatives. You will translate threat signals into actionable intelligence, proactive hunts, and measurable detection improvements across the enterprise.

You will define intelligence requirements, produce strategic to tactical intelligence, and map detections to MITRE ATT&CK. You’ll lead detection engineering, collaborate with SOC/IR, and govern backlogs and audit-ready documentation.

Qualifications

• Bachelor’s degree in computer science or equivalent.
• 8–12+ years in cybersecurity with threat intel, hunting, detection, or IR.
• 3+ years leading teams or enterprise programs with measurable outcomes.
• Experience building detections in SIEM/EDR and partnering with SOC/IR.
• Knowledge of MITRE ATT&CK and threat frameworks.
• Strong communication and ability to brief executives.

Responsibilities

• Lead CTI, detection engineering, and cyber hunt programs.
• Translate threat signals into actionable intelligence and detections.
• Define intelligence requirements and collection plans.
• Lead hunts aligned to MITRE ATT&CK and validated by telemetry.
• Collaborate with SOC/IR and respond to incidents with containment guidance.
• Maintain detection backlog, governance, and audit-ready docs.

Skills

Threat intelligence

Threat hunting

Detection engineering

Incident response

MITRE ATT&CK

SIEM/EDR

Executive briefing

Education

Bachelor's degree in computer science

Tools

SIEM

EDR

Job description

Synchrony seeks a Cyber Intelligence Leader to steer CTI, detection engineering, and cyber hunt initiatives. You will translate threat signals into actionable intelligence, proactive hunts, and measurable detection improvements across the enterprise.

You will define intelligence requirements, produce strategic to tactical intelligence, and map detections to MITRE ATT&CK. You’ll lead detection engineering, collaborate with SOC/IR, and govern backlogs and audit-ready documentation.