Cybersecurity Operations Technical Lead

GCyber • Shiloh, IL

2d

About The Position

GCyber is seeking a Cybersecurity Operations Technical Lead to support a large Department of War agency. The role leads threat intelligence, detection engineering, analytics, and automation, while directing complex investigations and intelligence-driven hunts. The Technical Lead turns technical findings into defensive priorities and clear recommendations for leadership.

The position leads a multidisciplinary team and sets technical direction for detection-as-code and automation, including human approval gates. It also partners with the intelligence community, USCYBERCOM, JFHQ-DODIN, and peer CSSPs; briefs threat assessments to agency communications and cyber leadership; and develops team members through mentoring and technical guidance.

Requirements

• 10 or more years of information assurance experience, including 5 or more years in incident response and 5 or more years in cyber threat intelligence.
• Experience leading DoD cyber investigations and working with the intelligence community.
• Bachelor's degree, or 4 additional years of experience in place of the degree.
• GCIH or GCFA, GCTI, and CISSP certifications.
• Active TS/SCI clearance.
• Complete required tool training before system access.
• Knowledge of advanced persistent threat tradecraft, especially against logistics and defense targets.
• Experience or knowledge in intelligence-driven defense, from adversary reporting to detections and hunts.
• Ability to lead complex incident investigations from initial detection through resolution.
• Knowledge of engineering practices including detection-as-code, testing, and automation.
• Ability to explain technical threats to senior leaders in operational terms.

Nice To Haves

• Master's degree.

Responsibilities

• Lead a team responsible for threat intelligence, detection engineering, data science, and automation.
• Lead complex investigations and intelligence-driven threat hunts.
• Translate threat intelligence into detection requirements, hunt objectives, and defensive priorities.
• Partner with the intelligence community, USCYBERCOM, JFHQ-DODIN, and peer CSSPs.
• Set technical direction for detection-as-code and automation, including human approval gates.
• Brief threat assessments to the agency's communications and cyber leadership.
• Develop team members through mentoring and technical guidance.

Benefits

• 26 days of paid leave, with an annual PTO increase of an extra day for every year of employment with GCyber.
• Paid parental leave.
• Additional leave allowances for military duty, jury duty, and bereavement leave.
• 401(k) matching.
• 100% company-funded disability insurance.
• 90% company-funded health, dental, and vision insurance, with contributions to insurance benefits for spouses, children, and family members.
• Training and professional development plans.
• Commuter benefits plan.
• Parking and transportation allowance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior