Back to jobs

Cybersecurity Operations Technical Lead

GCyber · Scott AFB, IL, US

Spotted 11h ago

Job details

Level
Staff / principal
Experience
10+ years
Education
Bachelor's degree
Posted
Nov 5, 2026
Last confirmed open
Nov 6, 2026
Job description

About this role

GCyber is seeking a Cybersecurity Operations Technical Lead to support a large Department of War agency. You will lead threat intelligence, detection engineering, analytics, and automation, directing complex investigations and intelligence-driven hunts. You will turn technical findings into defensive priorities and clear recommendations for leadership.

As the Cybersecurity Operations Technical Lead, you will:

  • Lead a team responsible for threat intelligence, detection engineering, data science, and automation.
  • Lead complex investigations and intelligence-driven threat hunts.
  • Translate threat intelligence into detection requirements, hunt objectives, and defensive priorities.
  • Partner with the intelligence community, USCYBERCOM, JFHQ-DODIN and peer CSSPs.
  • Set technical direction for detection-as-code and automation, including human approval gates.
  • Brief threat assessments to the agency's communications and cyber leadership.
  • Develop team members through mentoring and technical guidance.

Minimum Requirements and Experience

  • 10+ years of information assurance experience, including 5+ in incident response and 5+ in cyber threat intelligence.
  • Experience leading DoD cyber investigations and working with the intelligence community.
  • Bachelor's degree (4 additional years of experience may substitute).
  • GCIH or GCFA, GCTI, and CISSP.
  • Active TS/SCI clearance; complete required tool training before system access.

Required Knowledge and Skills

  • Advanced persistent threat tradecraft, especially against logistics and defense targets.
  • Intelligence-driven defense: from adversary reporting to detections and hunts.
  • Leading complex incident investigations from initial detection through resolution.
  • Building engineering practices: detection-as-code, testing and automation.
  • Explaining technical threats to senior leaders in operational terms.

Preferred Qualifications

  • Master's degree.

Our Benefits

GCyber is committed to the well-being and development of every employee. Our benefits are designed to support your personal and professional goals, from health and wellness programs to retirement savings and career development opportunities. Highlights include:

  • 26 Days of Paid Leave + Annual PTO Increase
  • An extra day of paid leave for every year of employment with GCyber
  • Paid Parental Leave
  • Additional Leave Allowances for Military Duty, Jury Duty, and Bereavement Leave
  • 401(k) Matching
  • 100% Company-funded Disability Insurance
  • 90% Company-Funded Health, Dental, and Vision Insurance, with contributions to insurance benefits for spouses, children, and family members
  • Training and Professional Development Plans
  • Commuter Benefits Plan
  • Parking and Transportation Allowance

Equal Opportunity Employer

GCyber is an Equal Opportunity Employer. This means you don't have to worry about whether your application process will be fair. We consider all applicants without regard to race, color, religion, age, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, veteran status, or disability.

Stay in Touch

For future job notifications please follow GCyber on LinkedIn. https://linkedin.com/company/gcyber

ldVPDeKcwd

Interested in this role?Continue on GCyber's careers page.
Apply on GCyber