Remote Cybersecurity Operations Analyst - Evening Shift

SAIC; Tennessee; Remote; USD 40,000 - 80,000; Full time

Job summary

SAIC is seeking a Cybersecurity Ops Analyst to join the 24/7/365 ESOC. The role may work remotely anywhere in the United States, on 2nd shift (2pm-midnight) or 3rd shift (10pm-8am EST).

You will monitor, investigate, and respond to security events using SIEM and EDR tools, collaborating with GRC, architecture, and detection engineering teams. Ideal candidates have a Security+ and CySA+ certification, plus hands-on security operations experience, strong analytical and communication skills, and

Qualifications

• Bachelor’s degree with 2+ years of cybersecurity operations experience.
• U.S. Citizen.
• Minimum 2 years of cybersecurity operations experience.
• Must possess Security+ AND CySA+ certifications.
• Hands-on experience with SIEM and EDR technologies.
• Experience triaging incidents and escalation procedures.
• Knowledge of Windows, Linux and cloud environments.
• Understanding of MITRE ATT&CK framework in investigations.
• Strong written and verbal communication skills.

Responsibilities

• Monitor, triage, and investigate security alerts in ESOC.
• Analyze network, endpoint, system, and cloud telemetry using SIEM and EDR.
• Execute approved response actions and escalate as needed.
• Participate in proactive threat hunting to identify gaps.
• Document investigations and actions in incident system.
• Contribute to SOC continuous improvement and procedures.
• Support onboarding and training of new analysts.

Skills

SIEM

EDR

Incident response

Threat hunting

Network security

Windows OS

Linux OS

Cloud environments

MITRE ATT&CK

Communication skills

Education

Bachelor’s degree or 4+ years related experience

Tools

Splunk ES

Security+ certification

CySA+ certification

Job description

SAIC is seeking a Cybersecurity Ops Analyst to join the 24/7/365 ESOC. The role may work remotely anywhere in the United States, on 2nd shift (2pm-midnight) or 3rd shift (10pm-8am EST).

You will monitor, investigate, and respond to security events using SIEM and EDR tools, collaborating with GRC, architecture, and detection engineering teams. Ideal candidates have a Security+ and CySA+ certification, plus hands-on security operations experience, strong analytical and communication skills, and