Cybersecurity Operations Team Lead

GCyber • Scott Air Force Base, IL

17h

About The Position

GCyber is seeking a Cybersecurity Operations Team Lead to support a large Department of War agency. The role leads a 24/7 cyber operations center responsible for monitoring, incident response, and forensics. The lead maintains shift coverage, guides incident decisions, and improves response through consistent procedures and performance analysis.

Requirements

• At least 7 years of experience, including at least 5 years in security analytics, incident response, threat analysis, or security engineering.
• Bachelor's degree, or 4 additional years of experience as a substitute.
• CISSP certification and GCIH or GCIA certification.
• Active TS/SCI clearance; complete required tool training before system access.
• Knowledge of running a 24/7 SOC, including shift design, escalation, quality control, and handoffs.
• Knowledge of DoD incident handling (CJCSM 6510.01B) and reporting timelines.
• Hands-on SIEM and EDR investigation experience sufficient to guide analysts through complex events.
• Calm decision-making during major incidents.
• Ability to coach analysts and build career paths.

Nice To Haves

• Prior experience leading a DoD 24/7 security operations center.

Responsibilities

• Lead a team responsible for 24/7 monitoring, incident response, and forensics.
• Serve as the escalation point for all shifts.
• Manage incident declaration, escalation, and timely reporting to USCYBERCOM and JFHQ-DODIN.
• Manage watch schedules, leave coverage, and staffing to maintain continuous operations.
• Lead shift briefings, handoffs, and operational reviews, and resolve recurring performance issues.
• Analyze triage, detection, and response metrics and implement measurable improvements.
• Approve automated response actions under the tiered approval model.
• Develop analysts for increased responsibility through mentoring and performance feedback.

Benefits

• 26 days of paid leave, with an annual PTO increase of one additional day for every year employed at GCyber.
• Paid parental leave.
• Additional leave allowances for military duty, jury duty, and bereavement leave.
• 401(k) matching.
• 100% company-funded disability insurance.
• 90% company-funded health, dental, and vision insurance, with contributions to insurance benefits for spouses, children, and family members.
• Training and professional development plans.
• Commuter benefits plan.
• Parking and transportation allowance.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager