Cybersecurity Operations Technical Lead

GCyber is seeking a Cybersecurity Operations Technical Lead to support a large Department of War agency. You will lead threat intelligence, detection engineering, analytics, and automation, directing complex investigations and intelligence-driven hunts. You will turn technical findings into defensive priorities and clear recommendations for leadership. As the Cybersecurity Operations Technical Lead, you will: • Lead a team responsible for threat intelligence, detection engineering, data science, and automation. • Lead complex investigations and intelligence-driven threat hunts. • Translate threat intelligence into detection requirements, hunt objectives, and defensive priorities. • Partner with the intelligence community, USCYBERCOM, JFHQ-DODIN and peer CSSPs. • Set technical direction for detection-as-code and automation, including human approval gates. • Brief threat assessments to the agency's communications and cyber leadership. • Develop team members through mentoring and technical guidance. Minimum Requirements and Experience • 10+ years of information assurance experience, including 5+ in incident response and 5+ in cyber threat intelligence. • Experience leading DoD cyber investigations and working with the intelligence community. • Bachelor's degree (4 additional years of experience may substitute). • GCIH or GCFA, GCTI, and CISSP. • Active TS/SCI clearance; complete required tool training before system access. Required Knowledge and Skills • Advanced persistent threat tradecraft, especially against logistics and defense targets. • Intelligence-driven defense: from adversary reporting to detections and hunts. • Leading complex incident investigations from initial detection through resolution. • Building engineering practices: detection-as-code, testing and automation. • Explaining technical threats to senior leaders in operational terms. Preferred Qualifications • Master's degree.