GCyber logo

Cybersecurity Operations Technical Lead

GCyber

Scott Air Force Base, ILJobSeen 1 day agoSeen in employer's feed 1 day ago

Most applications go out cold — see where you stand first. No sign-up to start.

You apply on the employer's site, with no Olive account needed.

Watch jobs like this.

Don't just apply. Show up ready.

Olive works from this exact posting.

At a glance

Compensation
No compensation found
Location
Scott Air Force Base, IL
Work Authorization
US work authorization required

Olive lists jobs from US employers, including remote roles you can work from the United States.

Requirements

Credentials this posting asks for.

GCIH Or GCFAGCTICISSPTS/SCI clearance

Job overview

GCyber seeks a Cybersecurity Operations Technical Lead to support a Department of War agency. The lead will direct threat intelligence, detection engineering, analytics, and automation; oversee complex investigations and intelligence-driven hunts; and translate technical findings into defensive priorities and leadership recommendations. The role also sets technical direction, partners with intelligence and cyber organizations, briefs agency leadership, and mentors team members.

Skills & qualifications

RequiredNice to have

Skills

Advanced Persistent Threat TradecraftIntelligence-Driven DefenseIncident InvestigationDetection-as-CodeTestingAutomationThreat Communication

Qualifications

10+ Years Information Assurance Experience5+ Years Incident Response Experience5+ Years Cyber Threat Intelligence ExperienceDoD Cyber Investigation LeadershipIntelligence Community ExperienceBachelor's or 4 Additional Years ExperienceGCIH or GCFAGCTICISSPActive TS/SCI ClearanceRequired Tool TrainingMaster's Degree

Benefits

Paid Time Off
Parental Leave
401(k) Match
Medical Insurance
Dental Insurance
Vision Insurance
Tuition Assistance

Full job description

GCyber is seeking a Cybersecurity Operations Technical Lead to support a large Department of War agency. You will lead threat intelligence, detection engineering, analytics, and automation, directing complex investigations and intelligence-driven hunts. You will turn technical findings into defensive priorities and clear recommendations for leadership.

As the Cybersecurity Operations Technical Lead, you will:

  • Lead a team responsible for threat intelligence, detection engineering, data science, and automation.

  • Lead complex investigations and intelligence-driven threat hunts.

  • Translate threat intelligence into detection requirements, hunt objectives, and defensive priorities.

  • Partner with the intelligence community, USCYBERCOM, JFHQ-DODIN and peer CSSPs.

  • Set technical direction for detection-as-code and automation, including human approval gates.

  • Brief threat assessments to the agency's communications and cyber leadership.

  • Develop team members through mentoring and technical guidance.

Minimum Requirements and Experience

  • 10+ years of information assurance experience, including 5+ in incident response and 5+ in cyber threat intelligence.

  • Experience leading DoD cyber investigations and working with the intelligence community.

  • Bachelor's degree (4 additional years of experience may substitute).

  • GCIH or GCFA, GCTI, and CISSP.

  • Active TS/SCI clearance; complete required tool training before system access.

Required Knowledge and Skills

  • Advanced persistent threat tradecraft, especially against logistics and defense targets.

  • Intelligence-driven defense: from adversary reporting to detections and hunts.

  • Leading complex incident investigations from initial detection through resolution.

  • Building engineering practices: detection-as-code, testing and automation.

  • Explaining technical threats to senior leaders in operational terms.

Preferred Qualifications

  • Master's degree.

Our Benefits

GCyber is committed to the well-being and development of every employee. Our benefits are designed to support your personal and professional goals, from health and wellness programs to retirement savings and career development opportunities. Highlights include:

  • 26 Days of Paid Leave + Annual PTO Increase

  • An extra day of paid leave for every year of employment with GCyber

  • Paid Parental Leave

  • Additional Leave Allowances for Military Duty, Jury Duty, and Bereavement Leave

  • 401(k) Matching

  • 100% Company-funded Disability Insurance

  • 90% Company-Funded Health, Dental, and Vision Insurance, with contributions to insurance benefits for spouses, children, and family members

  • Training and Professional Development Plans

  • Commuter Benefits Plan

  • Parking and Transportation Allowance

Equal Opportunity Employer

GCyber is an Equal Opportunity Employer. This means you don't have to worry about whether your application process will be fair. We consider all applicants without regard to race, color, religion, age, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, veteran status, or disability.

Stay in Touch

For future job notifications please follow GCyber on LinkedIn. https://linkedin.com/company/gcyber

Powered by JazzHR

How this job compares

Set against the 569 open Incident Response jobs on Olive Jobs, counted November 8, 2026.

Pay
  • This postingNot listed
  • US median$115–206K/yr435 salary ranges
  • US median$40–60/hr20 hourly ranges
Openings
Olive Jobs lists 11 open Incident Response jobs in Illinois and 569 across the US. 10% of them nationwide are listed as remote or flexible.
Hiring the most across the US
Experience
This posting asks for at least 10 years of experience — more than three in four Incident Response postings that state a minimum ask for (median 5 years, across 510 postings).
Education
159 of the 569 open Incident Response jobs (28%) ask for a bachelor's degree or higher.

Counted across the open, public US postings on Olive Jobs on November 8, 2026. Pay medians are the middle values of the low ends and of the high ends of postings that list both ends of a range in the same cadence (a yearly salary or an hourly rate); a range's midpoint is halfway between its ends. Pay and experience figures resting on fewer than 20 postings are left out.

Prepare for this role

You've read the whole posting — now see how you match it.