Head of Cyber Threat Intelligence & Detection

Synchrony Financial; New York (NY); Hybride; USD 170 000 - 290 000; Plein temps

Résumé du poste

Synchrony Financial seeks a Cyber Intelligence Leader to drive CTI, detection engineering, and cyber hunt programs. You will translate signals into actionable intelligence, create proactive hunts, and improve enterprise detection using cross‑functional collaboration with JSOC, IR, and vulnerability teams.

The role requires 8–12+ years in cybersecurity with leadership experience and strong knowledge of MITRE ATT&CK, SIEM/EDR integrations, and telemetry across multiple environments.

Qualifications

• Bachelor's degree in computer science or equivalent.
• 8–12+ years of cybersecurity experience with depth in threat intelligence, threat hunting, detection engineering, and/or incident response.
• 3+ years leading teams and/or enterprise programs with measurable outcomes.
• Demonstrated experience building and operationalizing detections within a SIEM/EDR environment and partnering with SOC/IR.
• Strong knowledge of adversary tactics and frameworks (MITRE ATT&CK) and applying them to detection coverage.
• Proficiency working with security telemetry across endpoint, network, cloud, and edge; strong investigative mindset.
• Strong written and verbal communication skills; ability to brief executives and produce clear technical documentation/runbooks.
• Ability and flexibility to travel for business as required

Responsabilités

• Define intelligence requirements and collection plans focused on threats relevant to financial services and Synchrony's environment.
• Produce strategic, operational, and tactical intelligence (executive reporting, actor/campaign tracking, TTP and IOC packages).
• Translate intelligence into detection content, hunt hypotheses, response playbooks, and prioritized mitigations.
• Coordinate hunts across endpoint, network, cloud, identity, and edge/WAF; document repeatable hunt playbooks.
• Lead hypothesis-driven hunts mapped to MITRE ATT&CK, focused on high-risk scenarios and validated by available telemetry.
• Escalate validated suspicious activity to Incident Response and support containment/remediation as needed.

Connaissances

Threat intelligence

Threat hunting

Detection engineering

Incident response

MITRE ATT&CK

Scripting

Executive briefing

Formation

Bachelor's degree in computer science

Outils

SIEM

EDR

Threat intel tools

Description du poste

Synchrony Financial seeks a Cyber Intelligence Leader to drive CTI, detection engineering, and cyber hunt programs. You will translate signals into actionable intelligence, create proactive hunts, and improve enterprise detection using cross‑functional collaboration with JSOC, IR, and vulnerability teams.

The role requires 8–12+ years in cybersecurity with leadership experience and strong knowledge of MITRE ATT&CK, SIEM/EDR integrations, and telemetry across multiple environments.