Head of Cyber Threat Intelligence & Detection

Synchrony Bank; Stamford (CT); On-site; USD 170,000 - 290,000; Full time

Benefits offered by this job

Flexible work options

Office hub access

Job summary

Synchrony Bank in Stamford, CT is seeking a Cyber Intelligence Leader to guide CTI, Detection Engineering, and Cyber Hunt programs. You will translate external and internal threat signals into actionable intelligence, proactive hunts, and measurable detection improvements across the enterprise.

The role collaborates with JSOC, Incident Response, and Vulnerability Management to reduce dwell time and strengthen defenses.

Qualifications

• Bachelor’s degree in computer science or equivalent; minimum 5 years in cybersecurity.
• 8–12+ years in cybersecurity with depth in threat intelligence, hunting, detection engineering and/or IR.
• 3+ years leading teams or enterprise programs with measurable outcomes.
• Experience building and operationalizing detections within a SIEM/EDR environment and partnering with SOC/IR.
• Strong knowledge of adversary tactics, MITRE ATT&CK, and applying them to detection coverage.
• Proficiency with security telemetry across endpoint, network, cloud and edge.
• Excellent written and verbal communication; able to brief executives and produce clear runbooks.
• Ability and willingness to travel for business as required

Responsibilities

• Define intelligence requirements and collection plans for financial services threats and Synchrony’s environment.
• Produce strategic, operational, and tactical intelligence and IOC packages.
• Translate intelligence into detection content, hunt hypotheses, response playbooks, and prioritized mitigations.
• Lead the intelligence lifecycle from collection to dissemination to feedback.
• Lead hypothesis-driven hunts aligned with MITRE ATT&CK and validated by telemetry.
• Coordinate hunts across endpoints, network, cloud, identity, and edge/WAF; document hunt playbooks.
• Escalate validated activity to Incident Response and support containment/remediation.
• Convert hunt findings into durable improvements in detections and data onboarding.
• Lead a detection engineering function to build and maintain enterprise-wide detection content.
• Develop detections standards and a structured tuning process.
• Ensure detections are threat-informed and aligned to JSOC workflow and triage capacity.
• Drive validation through purple-team/attack simulations and incident lessons learned.
• Partner with SOC to improve alert fidelity and escalation guidance.
• Maintain a detection backlog and change control for auditability.
• Perform other duties and projects as assigned

Skills

Threat intelligence

Threat hunting

Detection engineering

Leadership

Executive briefing

MITRE ATT&CK

Communication

Travel readiness

Education

Bachelor’s degree in computer science or equivalent

Tools

SIEM

EDR

Job description

Synchrony Bank in Stamford, CT is seeking a Cyber Intelligence Leader to guide CTI, Detection Engineering, and Cyber Hunt programs. You will translate external and internal threat signals into actionable intelligence, proactive hunts, and measurable detection improvements across the enterprise.

The role collaborates with JSOC, Incident Response, and Vulnerability Management to reduce dwell time and strengthen defenses.