Cybersecurity Operations Technical Lead
GCyber Shiloh, Illinois, United States
IT Services and IT Consulting · 51-200 employees
Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
You will lead a team in threat intelligence, detection engineering, and automation to conduct complex investigations and intelligence-driven hunts. Additionally, you will translate technical findings into defensive priorities and provide clear recommendations to agency leadership.
What they look for
Requirements
Candidates must have 10+ years of information assurance experience, including specific backgrounds in incident response and cyber threat intelligence. An active TS/SCI clearance and relevant certifications such as GCIH, GCFA, GCTI, or CISSP are required.
Benefits
Full description
GCyber is seeking a Cybersecurity Operations Technical Lead to support a large Department of War agency. You will lead threat intelligence, detection engineering, analytics, and automation, directing complex investigations and intelligence-driven hunts. You will turn technical findings into defensive priorities and clear recommendations for leadership.
As the Cybersecurity Operations Technical Lead, you will:
- Lead a team responsible for threat intelligence, detection engineering, data science, and automation.
- Lead complex investigations and intelligence-driven threat hunts.
- Translate threat intelligence into detection requirements, hunt objectives, and defensive priorities.
- Partner with the intelligence community, USCYBERCOM, JFHQ-DODIN and peer CSSPs.
- Set technical direction for detection-as-code and automation, including human approval gates.
- Brief threat assessments to the agency's communications and cyber leadership.
- Develop team members through mentoring and technical guidance.
Minimum Requirements and Experience
- 10+ years of information assurance experience, including 5+ in incident response and 5+ in cyber threat intelligence.
- Experience leading DoD cyber investigations and working with the intelligence community.
- Bachelor's degree (4 additional years of experience may substitute).
- GCIH or GCFA, GCTI, and CISSP.
- Active TS/SCI clearance; complete required tool training before system access.
Required Knowledge and Skills
- Advanced persistent threat tradecraft, especially against logistics and defense targets.
- Intelligence-driven defense: from adversary reporting to detections and hunts.
- Leading complex incident investigations from initial detection through resolution.
- Building engineering practices: detection-as-code, testing and automation.
- Explaining technical threats to senior leaders in operational terms.
Preferred Qualifications
- Master's degree.
Our Benefits
GCyber is committed to the well-being and development of every employee. Our benefits are designed to support your personal and professional goals, from health and wellness programs to retirement savings and career development opportunities. Highlights include:
- 26 Days of Paid Leave + Annual PTO Increase
- An extra day of paid leave for every year of employment with GCyber
- Paid Parental Leave
- Additional Leave Allowances for Military Duty, Jury Duty, and Bereavement Leave
- 401(k) Matching
- 100% Company-funded Disability Insurance
- 90% Company-Funded Health, Dental, and Vision Insurance, with contributions to insurance benefits for spouses, children, and family members
- Training and Professional Development Plans
- Commuter Benefits Plan
- Parking and Transportation Allowance
Equal Opportunity Employer
GCyber is an Equal Opportunity Employer. This means you don't have to worry about whether your application process will be fair. We consider all applicants without regard to race, color, religion, age, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, veteran status, or disability.
Stay in Touch
For future job notifications please follow GCyber on LinkedIn. https://linkedin.com/company/gcyber
Similar roles
-
Information Security Engineer
TTEC Austin, Texas, United States · $65K–$70K/yr
-
Information Security Engineer
Percepta Austin, Texas, United States · $65K–$70K/yr
-
Information Technology Security Engineer
McLaren Health Care Grand Blanc, Michigan, United States
-
Application Security Engineer
Vestwell Scottsdale, Arizona, United States · $140K–$150K/yr
-
Staff Application Security Engineer
Vestwell Scottsdale, Arizona, United States · $190K–$200K/yr
-
Senior Security Engineer, Red Team
Nscale San Francisco, California, United States · $160K–$190K/yr