Senior Cyber Threat Intelligence Leader (Remote)

Synchrony; Orlando (FL); Hybrid; USD 170,000 - 290,000; Full time

Benefits offered by this job

WFH flexibility

Hub access

Job summary

Synchrony seeks a Cyber Intelligence Leader to drive CTI, detection engineering, and cyber hunt initiatives. Lead strategic and operational threat intelligence, craft detection content, and coordinate across JSOC, Incident Response, and infrastructure teams to strengthen enterprise defenses.

You will define intelligence requirements, map detections to MITRE ATT&CK, and oversee hunts with auditable processes and measurable outcomes. Requires senior-level experience and willingness to travel.

Qualifications

• Bachelor's degree in computer science or equivalent with 5+ years in security
• 8-12+ years of cybersecurity experience in threat intel, hunting, detection, and incident response
• 3+ years leading enterprise programs with measurable outcomes
• Experience operationalizing detections within a SIEM/EDR environment and partnering with SOC/IR
• Strong knowledge of adversary tactics and MITRE ATT&CK mapping
• Experience with telemetry across endpoint, network, cloud, and edge
• Excellent written/verbal communication; ability to brief executives
• Ability to travel for business as required

Responsibilities

• Define intelligence requirements and collection plans for financial services threats
• Produce strategic, operational, and tactical intelligence (exec reports, actor/campaign tracking)
• Translate intelligence into detection content, hunts, and playbooks
• Manage the intelligence lifecycle (collection to feedback)
• Lead hypothesis-driven hunts mapped to MITRE ATT&CK
• Coordinate hunts across endpoints, network, cloud, identity, and edge/WAF
• Escalate suspicious activity to Incident Response and support containment
• Translate hunt findings into detections and remediation actions
• Lead detection engineering to build and maintain enterprise content
• Develop detections standards and a structured tuning process
• Ensure detections are threat-informed and Measured
• Drive validation through purple-team/attack simulations and lessons learned
• Partner with SOC to improve alert fidelity and escalation criteria
• Maintain a detection backlog and release cadence
• Perform other duties as assigned

Skills

Threat intelligence

Detection engineering

Cyber hunt

Executive briefing

Investigative mindset

Education

Bachelor's degree in computer science or equivalent

Tools

SIEM/EDR

MITRE ATT&CK

Threat intel platforms

Python scripting

Job description

Synchrony seeks a Cyber Intelligence Leader to drive CTI, detection engineering, and cyber hunt initiatives. Lead strategic and operational threat intelligence, craft detection content, and coordinate across JSOC, Incident Response, and infrastructure teams to strengthen enterprise defenses.

You will define intelligence requirements, map detections to MITRE ATT&CK, and oversee hunts with auditable processes and measurable outcomes. Requires senior-level experience and willingness to travel.