GCyber is seeking a Cybersecurity Operations Technical Lead to support a large Department of War agency. You will lead threat intelligence, detection engineering, analytics, and automation, directing complex investigations and intelligence-driven hunts. You will turn technical findings into defensive priorities and clear recommendations for leadership.
As the Cybersecurity Operations Technical Lead, you will:
- Lead a team responsible for threat intelligence, detection engineering, data science, and automation.
- Lead complex investigations and intelligence-driven threat hunts.
- Translate threat intelligence into detection requirements, hunt objectives, and defensive priorities.
- Partner with the intelligence community, USCYBERCOM, JFHQ-DODIN and peer CSSPs.
- Set technical direction for detection-as-code and automation, including human approval gates.
- Brief threat assessments to the agency's communications and cyber leadership.
- Develop team members through mentoring and technical guidance.
Minimum Requirements and Experience
- 10+ years of information assurance experience, including 5+ in incident response and 5+ in cyber threat intelligence.
- Experience leading DoD cyber investigations and working with the intelligence community.
- Bachelor's degree (4 additional years of experience may substitute).
- GCIH or GCFA, GCTI, and CISSP.
- Active TS/SCI clearance; complete required tool training before system access.
Required Knowledge and Skills
- Advanced persistent threat tradecraft, especially against logistics and defense targets.
- Intelligence-driven defense: from adversary reporting to detections and hunts.
- Leading complex incident investigations from initial detection through resolution.
- Building engineering practices: detection-as-code, testing and automation.
- Explaining technical threats to senior leaders in operational terms.
Preferred Qualifications
- Master's degree.
Skills Required
- 10+ years of information assurance experience
- 5+ years of incident response experience
- 5+ years of cyber threat intelligence experience
- Experience leading Department of Defense cyber investigations
- Experience working with the intelligence community
- Bachelor's degree, or four additional years of experience as a substitute
- GCIH or GCFA certification
- GCTI certification
- CISSP certification
- Active TS/SCI security clearance
- Completion of required tool training before system access
- Master's degree
What We Do
GCyber was founded to create innovative information technology solutions for the federal, state, and commercial markets. GCyber engineers have provided professional services supporting the information technology industry for over 15 years. Along with our engineering staff, we have relationships with partners, vendors, and analysts who have specialized expertise in the federal market. GCyber’s broad experience, focus toward execution with measurable results, and commitment to innovation provide responsive and long-lasting solutions to our customers. It is the mission of GCyber to always remain focused on our customer’s goals and improving their existing landscape. Our company accomplishes this by focusing on opportunities for innovation, while remaining mindful of industry successes and failures in the deployment of technologies. If your road map needs increasingly innovative solutions, GCyber can help you get there.
.png){kind=logo}
