Cybersecurity Operations Lead - 3rd Shift (Remote)

SAIC; United States; Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Remote work

Job summary

SAIC is seeking a dedicated Cybersecurity Operations Supervisor to support our 24/7/365 Enterprise Security Operations Center (ESOC) Detection & Response team. This role combines hands-on cybersecurity operations with technical leadership and operational oversight, with a remote possibility anywhere in the US.

The supervisor will oversee the 3rd shift (10:00 PM – 8:00 AM EST), mentor analysts, manage incidents, and drive continuous improvement across ESOC operations through collaboration with

Qualifications

• Bachelor's degree required; 5+ years in cybersecurity operations or equivalent.
• Must be a US Citizen.
• Minimum 5 years hands-on cybersecurity operations experience.
• Two of the following certifications: Security+, CySA+, GSEC, GCIH, CEH or related; must obtain one of CISSP/CASP/CISM/GSLC/GSOM within 8 months.

Responsibilities

• Oversee daily Detection & Response operations, ensuring monitoring, triage, investigation and escalation per procedures.
• Investigate security alerts/incidents using SIEM, EDR and other tools; analyze activity and coordinate response.
• Provide technical guidance and mentoring to analysts; support complex investigations and escalation.
• Manage personnel: performance evaluations, coaching, development, attendance, accountability.
• Oversee workloads, prioritization, and staffing to maintain 24/7/365 operation; ensure QA and timely case documentation.
• Monitor performance metrics, identify gaps, and drive improvements within authority.
• Lead onboarding, training, and development of analysts; share knowledge and provide feedback.
• Identify opportunities to improve SOC SOPs, playbooks, and workflows; implement changes.

Skills

Security operations

Team leadership

Incident response

SIEM

EDR

Cloud security

Windows

Linux

Network analysis

Communication

Education

Bachelor's degree

Tools

SIEM tools

EDR tools

AWS

Azure

Windows OS

Linux OS

Job description

SAIC is seeking a dedicated Cybersecurity Operations Supervisor to support our 24/7/365 Enterprise Security Operations Center (ESOC) Detection & Response team. This role combines hands-on cybersecurity operations with technical leadership and operational oversight, with a remote possibility anywhere in the US.

The supervisor will oversee the 3rd shift (10:00 PM – 8:00 AM EST), mentor analysts, manage incidents, and drive continuous improvement across ESOC operations through collaboration with