Cybersecurity Operations Technical Lead

GCyber is seeking a Cybersecurity Operations Technical Lead to support a large Department of War agency. You will lead threat intelligence, detection engineering, analytics, and automation, directing complex investigations and intelligence-driven hunts. You will turn technical findings into defensive priorities and clear recommendations for leadership.

As the Cybersecurity Operations Technical Lead, you will:

• Lead a team responsible for threat intelligence, detection engineering, data science, and automation.
• Lead complex investigations and intelligence-driven threat hunts.
• Translate threat intelligence into detection requirements, hunt objectives, and defensive priorities.
• Partner with the intelligence community, USCYBERCOM, JFHQ-DODIN and peer CSSPs.
• Set technical direction for detection-as-code and automation, including human approval gates.
• Brief threat assessments to the agency's communications and cyber leadership.
• Develop team members through mentoring and technical guidance.

Minimum Requirements and Experience

• 10+ years of information assurance experience, including 5+ in incident response and 5+ in cyber threat intelligence.
• Experience leading DoD cyber investigations and working with the intelligence community.
• Bachelor's degree (4 additional years of experience may substitute).
• GCIH or GCFA, GCTI, and CISSP.
• Active TS/SCI clearance; complete required tool training before system access.

Required Knowledge and Skills

• Advanced persistent threat tradecraft, especially against logistics and defense targets.
• Intelligence-driven defense: from adversary reporting to detections and hunts.
• Leading complex incident investigations from initial detection through resolution.
• Building engineering practices: detection-as-code, testing and automation.
• Explaining technical threats to senior leaders in operational terms.

Preferred Qualifications

• Master's degree.