Remote: Senior Cyber Threat Operations Lead

studentclearinghouse; Herndon (VA); Remote; USD 175,000 - 212,000; Full time

Benefits offered by this job

401k matching

Paid time off

Education assistance

Parental leave

Job summary

The National Student Clearinghouse seeks a Technical Specialist, Threat Operations to lead threat operations, translate signals into risk decisions, and advance AI-enabled workflows while ensuring governance and auditability.

The role is remote-first with periodic on-site work in Herndon, VA; you will guide detection, triage, incident response, threat intel, and CTEM programs, collaborating with engineering and security partners.

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT, or related field.
• Active CISSP, CISM, GIAC, CySA+, or Microsoft Security certification or willingness to obtain within 1 year.
• 10+ years of direct cybersecurity operations experience.

Responsibilities

• Oversee detection, triage, and validation of security alerts.
• Translate technical findings into risk-based recommendations and actions.
• Lead escalation during high-severity incidents with proper scoping and remediation.
• Develop and mature the threat operations program roadmap including CTEM.
• Align MITRE ATT&CK coverage with detection and response outcomes.
• Lead investigations involving cloud control plane threats (AWS/OCI).
• Collaborate with engineering to validate remediation and risk acceptance actions.

Skills

Cybersecurity operations

Incident response

Threat analysis

Cloud security (AWS/OCI)

AI governance

Leadership through influence

Security governance

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

AWS Security

OCI

MDR/MSSP

SIEM

Job description

The National Student Clearinghouse seeks a Technical Specialist, Threat Operations to lead threat operations, translate signals into risk decisions, and advance AI-enabled workflows while ensuring governance and auditability.

The role is remote-first with periodic on-site work in Herndon, VA; you will guide detection, triage, incident response, threat intel, and CTEM programs, collaborating with engineering and security partners.