Cyber Operations & Threat Intelligence Integration Lead

salary statement
estimated starting salary range: usd $/yr.

- usd $/yr. Salary to be determined by the education, experience, knowledge, skills, and abilities of the applicant, internal equity, and alignment with market data.
description

the cyber operations & threat intelligence integration lead will directly support the trmc chief security officer (cso) to institutionalize, executing, and scaling the end-to-end information flow of actionable cyber threat intelligence and operational cyber data across the mrtfb. The incumbent will design, establish, and facilitate a recurring battle rhythm of classified operational syncs (secret and ts/sci), liaise directly with the rcc csg, maintain technical artifact sharing for cots vetting, and ensure rapid response to urgent cyber tasking orders (ctos).

• designing and executing a recurring classified meeting structure on secret and ts/sci networks
• initiating operations at a weekly cadence to rapidly clear the historical information backlog, transitioning to a bi-weekly sustainment schedule as coordination matures
• managing all end-to-end administration for the classified syncs, to include:

• • identifying and validating appropriate points of contact (pocs) across all army, navy, and air force ranges
  • creating and maintaining secure invitee rosters and access verification lists
  • drafting and disseminating secure meeting announcements, read-aheads, and structured agendas
  • capturing highly technical discussion points, action items, and outstanding requirements

• synthesizing complex cyber threat intelligence and operational discussions into executive-ready summaries (exsums), decision records, and formal leadership briefings within 24 hours of session completion
• monitoring, analyzing, and translating incoming intelligence feeds, national-level cyber threat reports, and emerging cyber tasking orders (ctos) published.
• converting highly complex technical intelligence and adversary tactics, techniques, and procedures (ttps) into clear, actionable defensive priorities tailored for range enclaves and local security postures
• interfacing directly with technical cyber teams conducting supply chain risk management (scrm) checks and vulnerability scanning
• coordinating the efficient delivery of these assessment artifacts to ranges to assist them in building the required “body of evidence” for local enclave software approvals
• building and managing an enterprise-wide action item tracking system to log range-specific inquiries, technical disconnects, and outstanding resource requests
• driving accountability by coordinating directly with service cyber leads and range commanders council (rcc) representatives to resolve tracked actions
• assisting ranges in identifying, cataloging, and mapping their top critical test systems and determining the specific protective measures and data feeds required to secure those environments

#li-hk1

requirements

• active dod top secret with current sci eligibility (verified in diss)
• 8+ years of progressive experience in dod cybersecurity, cyber threat intelligence, defensive cyberspace operations (dco), or rdt&e range defense
• strong understanding of uscybercom operational constructs, cyber tasking orders (ctos), cybersecurity service provider (cssp) methodologies, and cyber threat intelligence frameworks (e.g., mitre att&ck, d3fend)
• experience leading and facilitating classified technical meetings with military, civilian, and contractor stakeholders
• demonstrated ability to author clear, concise executive-level staff products (exsums, information papers, formal briefs)
• bachelor’s degree in cybersecurity, computer science, information technology, or a related discipline
• must meet dod 8140/8570 iam/iat level iii baseline requirements (e.g., cissp, cism, gslc)

desired skills

• pri…