Senior Cybersecurity Ops Lead - Remote Ready

Saic; Tennessee; Hybrid; USD 80,000 - 120,000; Full time

Job summary

SAIC is seeking a Cybersecurity Ops Analyst Sr. for the Enterprise Security Operations Center in Oak Ridge, Tennessee. This senior role supports complex incident investigations, forensic log analysis, and cross-enterprise response activities.

Ideal candidates bring hands-on experience with SIEM (prefer Splunk), EDR, and cloud telemetry. US citizenship is required. The position follows a 4x10 schedule and may require 24/7/365 support as needed.

Qualifications

• Bachelor’s degree with 5+ years of related experience; master’s with 3+ years allowed.
• 3+ years of cybersecurity operations experience: monitoring, incident response, or investigations.
• Must possess CySA+, SSCP, or equivalent.

Responsibilities

• Lead investigation and triage of escalated security cases.
• Coordinate containment, eradication, and recovery activities.
• Develop timelines, evidence summaries, and technical findings for post-incident reviews.
• Identify detection gaps and drive improvements across ESOC.
• Support playbooks, tabletop exercises, and training across the team.
• Mentor junior analysts and share knowledge to raise operational maturity.
• Contribute to 24/7/365 coverage and cross-functional coordination.

Skills

Leadership

Communication

Multitasking

Team mentoring

Analytical thinking

Education

Bachelor’s degree +5+ yrs

Master’s degree +3+ yrs

Alternative: 4+ yrs experience in lieu

Tools

Splunk

EDR/Endpoint tooling

Job description

SAIC is seeking a Cybersecurity Ops Analyst Sr. for the Enterprise Security Operations Center in Oak Ridge, Tennessee. This senior role supports complex incident investigations, forensic log analysis, and cross-enterprise response activities.

Ideal candidates bring hands-on experience with SIEM (prefer Splunk), EDR, and cloud telemetry. US citizenship is required. The position follows a 4x10 schedule and may require 24/7/365 support as needed.