SOC Team Lead - 24/7 Incident Response (Remote)

Science Applications International Corp.; Tennessee; Hybrid; USD 80,000 - 120,000; Full time

Job summary

Science Applications International Corp. (SAIC) is seeking a SOC Supervisor within its Solutions and Technology group to supervise SOC Analysts and Technical Leads delivering first-line response to cybersecurity events across SIEM, EDR, and NDR.

You will oversee alert triage, incident escalation, staff scheduling, and operational documentation to drive high-quality service delivery. This role is primarily a day shift with rotating on-call duties and may be remote anywhere in the United States.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or related field with 5+ years of experience, or a Master's with 3+ years; additional 4+ years may substitute.
• U.S. Citizen capable of obtaining and maintaining a Public Trust.
• Minimum 3 years in a SOC/security operations environment.
• At least 1 year in a lead/senior analyst/supervisory capacity.
• Security+ required; CySA+/CEH/GSEC or equivalent preferred.
• Strong knowledge of SIEM, EDR, and NDR technologies.
• Experience with ITSM/ticketing systems and documentation standards.
• Interest or experience with AI solutions (e.g. Dropzone, GenAI).

Responsibilities

• Provide direct supervision, coaching, and support to SOC analysts and Technical Leads for 24/7 readiness.
• Oversee triage of SIEM, EDR, and NDR alerts with proper prioritization and escalation.
• Act as first-line escalation for complex alerts and incidents.
• Manage shift coverage, rotations, and scheduling with SOC leadership input.
• Day shift with rotating on-call duties.

Skills

Supervision

SOC operations

Incident response

SIEM/EDR/NDR

Leadership

Education

Bachelor's degree in Cybersecurity/IT

Master's degree

Tools

ITSM systems

Ticketing tools

Job description

Science Applications International Corp. (SAIC) is seeking a SOC Supervisor within its Solutions and Technology group to supervise SOC Analysts and Technical Leads delivering first-line response to cybersecurity events across SIEM, EDR, and NDR.

You will oversee alert triage, incident escalation, staff scheduling, and operational documentation to drive high-quality service delivery. This role is primarily a day shift with rotating on-call duties and may be remote anywhere in the United States.