SOC Supervisor

SAIC; United States; Remote; USD 110,000 - 170,000; Full time

Job summary

SAIC's Solutions and Technology group seeks a SOC Supervisor to lead a team of SOC Analysts and Technical Leads delivering first-level response to cybersecurity events across SIEM, EDR, and NDR platforms.

The role oversees alert triage, incident escalation, staff scheduling, and operational documentation while driving high-quality service delivery and continuous improvement. Some remote work across the United States is possible.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or related field with 5+ years of experience, or a Master's and 3+ years of experience.
• U.S. Citizen with ability to obtain/maintain a Public Trust.
• Minimum 3 years in a SOC/security operations environment; at least 1 year in a lead/supervisory capacity.
• Security+ required; CySA+, CEH, GSEC, or equivalent preferred.
• Strong knowledge of SIEM, EDR, and NDR technologies; familiar with common security events and incident response.

Responsibilities

• Provide direct supervision, coaching, and support to SOC analysts and Technical Leads, ensuring 24/7 readiness.
• Oversee triage of SIEM, EDR, and NDR alerts with proper prioritization, response, and escalation per playbooks.
• Serve as first escalation for complex alerts/incidents from Tier 0 enrichment and staff.
• Manage shift coverage, rotations, and scheduling for SOC Analysts with input from SOC leadership.
• Primarily day shift with rotating on-call duties.

Skills

Leadership

Communication

Time management

Multitasking

Customer service

Education

Bachelor's degree in Cybersecurity/IT

Master's degree in related field

Tools

SIEM

EDR

NDR

ITSM systems

AI solutions (Dropzone/GenAI)

Job description

SAIC's Solutions and Technology group has an opening for a SOC Supervisor. As the SOC Supervisor, you will be responsible for supervising a team of SOC Analysts and Technical Leads who provide first-level response to cybersecurity events across SIEM, EDR, and NDR platforms. You will oversee alert triage, incident escalation, staff scheduling, and operational documentation while driving high-quality service delivery and continuous improvement. For the right candidate, this position may be remote anywhere in the United States.

Key Responsibilities

• Provide direct supervision, coaching, and support to SOC analysts and Technical Leads, ensuring 24/7 operational readiness.
• Oversee triage of SIEM, EDR, and NDR alerts, ensuring proper prioritization, response, and escalation in accordance with defined playbooks.
• Act as the first line of escalation for complex alerts and incidents from Tier 0 enrichment and staff.
• Manage shift coverage, rotations, and scheduling for SOC Analysts with input and approval from SOC leadership.
• This is a primarily day shift position with rotating on-call duties.

Required Education & Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or a related field and 5+ years of experience, or a Masters and 3+ years of experience. An additional 4+ years of experience may be considered in lieu of a degree.
• Must be a U.S. Citizen with the ability to obtain and maintain a Public Trust.
• Minimum of 3 years of experience in a SOC or security operations environment.
• At least 1 year in a lead, senior analyst, or supervisory capacity.
• Certifications: Security+ required and one or more of the following preferred: CySA+, CEH, GSEC, or equivalent.
• Strong understanding of SIEM, EDR, and NDR technologies.
• Familiarity with common security event types, threats, and incident response best practices.
• Excellent leadership, communication, and time management skills.
• Ability to multitask and make decisions in a high-tempo environment.
• Customer service and relationship management skills at a mid-tier leadership level.
• Experience with ITSM/ticketing systems and documentation standards.
• Interest or experience working with AI solutions (e.g. Dropzone, GenAI)