GCyber

Cybersecurity Operations Technical Lead

GCyber Shiloh, Illinois, United States

IT Services and IT Consulting · 51-200 employees

Yesterday
security Principal (10+ yrs) Full-time United States
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

About the role

You will lead a team in threat intelligence, detection engineering, and automation to conduct complex investigations and intelligence-driven hunts. Additionally, you will translate technical findings into defensive priorities and provide clear recommendations to agency leadership.

What they look for

Threat intelligence Detection engineering Data science Automation Incident response Cyber threat intelligence Detection-as-code Threat hunting Information assurance DoD cyber investigations Advanced persistent threat tradecraft Leadership Mentoring Technical guidance

Requirements

Candidates must have 10+ years of information assurance experience, including specific backgrounds in incident response and cyber threat intelligence. An active TS/SCI clearance and relevant certifications such as GCIH, GCFA, GCTI, or CISSP are required.

Benefits

Paid leave Paid parental leave Military duty leave Jury duty leave Bereavement leave 401(k) matching Disability insurance Health insurance Dental insurance Vision insurance Training and professional development Commuter benefits Parking and transportation allowance

Full description

GCyber is seeking a Cybersecurity Operations Technical Lead to support a large Department of War agency. You will lead threat intelligence, detection engineering, analytics, and automation, directing complex investigations and intelligence-driven hunts. You will turn technical findings into defensive priorities and clear recommendations for leadership.

As the Cybersecurity Operations Technical Lead, you will:

  • Lead a team responsible for threat intelligence, detection engineering, data science, and automation.
  • Lead complex investigations and intelligence-driven threat hunts.
  • Translate threat intelligence into detection requirements, hunt objectives, and defensive priorities.
  • Partner with the intelligence community, USCYBERCOM, JFHQ-DODIN and peer CSSPs.
  • Set technical direction for detection-as-code and automation, including human approval gates.
  • Brief threat assessments to the agency's communications and cyber leadership.
  • Develop team members through mentoring and technical guidance.

Minimum Requirements and Experience

  • 10+ years of information assurance experience, including 5+ in incident response and 5+ in cyber threat intelligence.
  • Experience leading DoD cyber investigations and working with the intelligence community.
  • Bachelor's degree (4 additional years of experience may substitute).
  • GCIH or GCFA, GCTI, and CISSP.
  • Active TS/SCI clearance; complete required tool training before system access.

Required Knowledge and Skills

  • Advanced persistent threat tradecraft, especially against logistics and defense targets.
  • Intelligence-driven defense: from adversary reporting to detections and hunts.
  • Leading complex incident investigations from initial detection through resolution.
  • Building engineering practices: detection-as-code, testing and automation.
  • Explaining technical threats to senior leaders in operational terms.

Preferred Qualifications

  • Master's degree.

Our Benefits

GCyber is committed to the well-being and development of every employee. Our benefits are designed to support your personal and professional goals, from health and wellness programs to retirement savings and career development opportunities. Highlights include:

  • 26 Days of Paid Leave + Annual PTO Increase
  • An extra day of paid leave for every year of employment with GCyber
  • Paid Parental Leave
  • Additional Leave Allowances for Military Duty, Jury Duty, and Bereavement Leave
  • 401(k) Matching
  • 100% Company-funded Disability Insurance
  • 90% Company-Funded Health, Dental, and Vision Insurance, with contributions to insurance benefits for spouses, children, and family members
  • Training and Professional Development Plans
  • Commuter Benefits Plan
  • Parking and Transportation Allowance

Equal Opportunity Employer

GCyber is an Equal Opportunity Employer. This means you don't have to worry about whether your application process will be fair. We consider all applicants without regard to race, color, religion, age, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, veteran status, or disability.

Stay in Touch

For future job notifications please follow GCyber on LinkedIn. https://linkedin.com/company/gcyber

Similar roles