VP, Cyber Threat Intelligence & Detection Engineering

Synchrony; Orlando (FL); Hybrid; USD 170,000 - 290,000; Full time

Job summary

Synchrony is seeking a Cyber Intelligence Leader to oversee CTI, detection engineering, and cyber hunt programs. You will translate external and internal threat signals into actionable intelligence and proactive hunts, partnering with JSOC, Incident Response, and other teams to strengthen cyber defenses.

The role requires 8–12+ years of cybersecurity experience with leadership, strong knowledge of MITRE ATT&CK, and experience operationalizing detections in SIEM/EDR environments.

Qualifications

• Bachelor’s degree in computer science or equivalent.
• 8+ years in cybersecurity with focus on threat intelligence, hunting, detection engineering, or IR.
• Proven experience leading teams or enterprise programs with measurable outcomes.

Responsibilities

• Define intelligence requirements and collection plans for financial services threats.
• Produce strategic, operational, and tactical intelligence and IOC packages.
• Translate intelligence into detections, hunt hypotheses, and response playbooks.
• Lead detection engineering and maintain detection content across the enterprise.
• Coordinate hunts across endpoints, network, cloud, identity, and WAF; develop hunt playbooks.
• Escalate validated activity to Incident Response and support containment/remediation.
• Drive validation through MITRE ATT&CK mappings and real incidents.

Skills

Threat intelligence

Threat hunting

Detection engineering

Incident response

SIEM/EDR

MITRE ATT&CK

Leadership

Education

Bachelor’s degree in computer science

Tools

SIEM

EDR

Telemetry sources

Job description

Synchrony is seeking a Cyber Intelligence Leader to oversee CTI, detection engineering, and cyber hunt programs. You will translate external and internal threat signals into actionable intelligence and proactive hunts, partnering with JSOC, Incident Response, and other teams to strengthen cyber defenses.

The role requires 8–12+ years of cybersecurity experience with leadership, strong knowledge of MITRE ATT&CK, and experience operationalizing detections in SIEM/EDR environments.