GCyber logo

Cybersecurity Operations Team Lead

GCyber

Scott Air Force Base, ILJobSeen 1 day agoSeen in employer's feed 1 day ago

Most applications go out cold — see where you stand first. No sign-up to start.

You apply on the employer's site, with no Olive account needed.

Watch jobs like this.

Don't just apply. Show up ready.

Olive works from this exact posting.

At a glance

Compensation
No compensation found
Location
Scott Air Force Base, IL
Work Authorization
US work authorization required

Olive lists jobs from US employers, including remote roles you can work from the United States.

Requirements

Credentials this posting asks for.

CISSPGCIH Or GCIATS/SCI clearance

Job overview

GCyber seeks a Cybersecurity Operations Team Lead to lead a 24/7 cyber operations center supporting a Department of War agency. The lead oversees monitoring, incident response, and forensics; serves as the escalation point across shifts; manages staffing and incident reporting; and improves operations through metrics, procedures, and analyst development. The role requires an active TS/SCI clearance, specified experience, a bachelor's degree or substitute experience, and security certifications.

Skills & qualifications

RequiredNice to have

Skills

SOC OperationsShift DesignEscalation ManagementQuality ControlIncident HandoffsDoD Incident HandlingCJCSM 6510.01BSIEM InvestigationEDR InvestigationCalm Decision-MakingAnalyst CoachingCareer Path Development

Qualifications

7+ Years Experience5+ Years Security Analytics or RelatedBachelor's or 4 Additional Years ExperienceCISSPGCIH or GCIAActive TS/SCI ClearancePrior DoD SOC Leadership

Benefits

Paid Time Off
Parental Leave
401(k) Match
Medical Insurance
Dental Insurance
Vision Insurance
Tuition Assistance

Full job description

GCyber is seeking a Cybersecurity Operations Team Lead to support a large Department of War agency. You will lead a 24/7 cyber operations center responsible for monitoring, incident response, and forensics. You will maintain shift coverage, guide incident decisions, and improve response through consistent procedures and performance analysis.

As the Cybersecurity Operations Team Lead, you will:

  • Lead a team responsible for 24/7 monitoring, incident response, and forensics.

  • Serve as the escalation point for all shifts.

  • Manage incident declaration, escalation, and timely reporting to USCYBERCOM and JFHQ-DODIN.

  • Manage watch schedules, leave coverage, and staffing to maintain continuous operations.

  • Lead shift briefings, handoffs, and operational reviews, and resolve recurring performance issues.

  • Analyze triage, detection, and response metrics and implement measurable improvements.

  • Approve automated response actions under the tiered approval model.

  • Develop analysts for increased responsibility through mentoring and performance feedback.

Minimum Requirements and Experience

  • 7+ years of experience, including 5+ in security analytics, incident response, threat analysis or security engineering.

  • Bachelor's degree (4 additional years of experience may substitute).

  • CISSP, and GCIH or GCIA.

  • Active TS/SCI clearance; complete required tool training before system access.

Required Knowledge and Skills

  • Running a 24/7 SOC: shift design, escalation, quality control and handoffs.

  • DoD incident handling (CJCSM 6510.01B) and reporting timelines.

  • Hands-on SIEM and EDR investigation experience sufficient to guide analysts through complex events.

  • Calm decision-making during major incidents.

  • Coaching analysts and building career paths.

Preferred Qualifications

  • Prior experience leading a DoD 24/7 security operations center.

Our Benefits

GCyber is committed to the well-being and development of every employee. Our benefits are designed to support your personal and professional goals, from health and wellness programs to retirement savings and career development opportunities. Highlights include:

  • 26 Days of Paid Leave + Annual PTO Increase

  • An extra day of paid leave for every year of employment with GCyber

  • Paid Parental Leave

  • Additional Leave Allowances for Military Duty, Jury Duty, and Bereavement Leave

  • 401(k) Matching

  • 100% Company-funded Disability Insurance

  • 90% Company-Funded Health, Dental, and Vision Insurance, with contributions to insurance benefits for spouses, children, and family members

  • Training and Professional Development Plans

  • Commuter Benefits Plan

  • Parking and Transportation Allowance

Equal Opportunity Employer

GCyber is an Equal Opportunity Employer. This means you don't have to worry about whether your application process will be fair. We consider all applicants without regard to race, color, religion, age, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, veteran status, or disability.

Stay in Touch

For future job notifications please follow GCyber on LinkedIn. https://linkedin.com/company/gcyber

Powered by JazzHR

How this job compares

Set against the 1,024 open Security Operations jobs on Olive Jobs, counted November 8, 2026.

Pay
  • This postingNot listed
  • US median$113–201K/yr661 salary ranges
  • US median$24–29/hr98 hourly ranges
Openings
Olive Jobs lists 29 open Security Operations jobs in Illinois and 1,024 across the US. 5% of them nationwide are listed as remote or flexible.
Hiring the most in Illinois
Experience
This posting asks for at least 7 years of experience; Security Operations postings that state a minimum ask for 5 years at the median (900 postings).
Education
229 of the 1,024 open Security Operations jobs (22%) ask for a bachelor's degree or higher.

Counted across the open, public US postings on Olive Jobs on November 8, 2026. Pay medians are the middle values of the low ends and of the high ends of postings that list both ends of a range in the same cadence (a yearly salary or an hourly rate); a range's midpoint is halfway between its ends. Pay and experience figures resting on fewer than 20 postings are left out.

Prepare for this role

You've read the whole posting — now see how you match it.