Head of Cyber Threat Intelligence & Detection

Synchrony Financial; Orlando (FL); Hybrid; USD 170,000 - 290,000; Full time

Job summary

Synchrony Financial seeks a Cyber Intelligence Leader to direct CTI, detection engineering, and cyber hunt programs across the enterprise. You will translate threat signals into actionable intel, drive multi-year strategy, and partner with JSOC, IR, and infrastructure teams to reduce dwell time.

You will lead a team delivering threat intelligence, detections, playbooks, and validated hunts mapped to MITRE ATT&CK, with strong emphasis on measurable improvements and auditable processes.

Qualifications

• Bachelor's degree in computer science or equivalent and 5+ years in security leadership.
• 8+ years in cybersecurity with depth in intelligence, hunting, detection, or IR.
• 3+ years leading enterprise programs with measurable outcomes.
• Experience operationalizing detections in SIEM/EDR and working with SOC/IR.

Responsibilities

• Define intelligence requirements and collection plans for financial services threats.
• Produce strategic, operational, and tactical intelligence with actor/campaign tracking.
• Translate intelligence into detection content, hunts, and prioritized mitigations.
• Lead intelligence lifecycle: collection, analysis, production, dissemination, feedback.
• Lead hypothesis-driven hunts mapped to MITRE ATT&CK and validated by telemetry.
• Coordinate hunts across endpoints, network, cloud, identity and edge/WAF.
• Escalate suspicious activity to Incident Response and support containment/remediation.
• Convert hunts into durable improvements: detections and enrichment.
• Lead a detection engineering function for enterprise-wide content and analytics.
• Develop detection standards and a structured tuning process.

Skills

Threat intel

Threat hunting

Detections engineering

Incident response

MITRE ATT&CK

Telemetry analysis

Executive briefing

Travel willingness

Education

Bachelor's degree in computer science

Tools

SIEM/EDR tooling

Job description

Synchrony Financial seeks a Cyber Intelligence Leader to direct CTI, detection engineering, and cyber hunt programs across the enterprise. You will translate threat signals into actionable intel, drive multi-year strategy, and partner with JSOC, IR, and infrastructure teams to reduce dwell time.

You will lead a team delivering threat intelligence, detections, playbooks, and validated hunts mapped to MITRE ATT&CK, with strong emphasis on measurable improvements and auditable processes.