Cybersecurity Operations Supervisor 3rd Shift

SAIC • Flexwork, TN

2d

About The Position

SAIC is seeking a dedicated Cybersecurity Operations Supervisor to support its 24/7/365 Enterprise Security Operations Center (ESOC) Detection & Response team. The role combines hands-on cybersecurity operations with technical leadership, personnel management, and operational oversight. The position may be remote anywhere in the United States for the right candidate and is assigned to third shift, 10:00 PM–8:00 AM EST, overseeing personnel across Sunday–Wednesday and Wednesday–Saturday schedules.

The Supervisor is a hands-on technical and operational leader who conducts security investigations, manages assigned security incidents, and provides technical guidance to analysts while overseeing daily cybersecurity operations. The role is responsible for managing and developing assigned personnel, ensuring the quality and timeliness of investigations, maintaining operational readiness, and driving accountability for team performance. It also supports continuous improvement of SOC processes, procedures, and operational capabilities in collaboration with internal cybersecurity teams and stakeholders.

Requirements

• Bachelor’s degree and at least 5 years of experience; an additional 4+ years of experience may be considered in lieu of a degree.
• Must be a U.S. citizen.
• At least 5 years of hands-on cybersecurity operations experience.
• At least two certifications from CompTIA Security+, CySA+, GSEC, GCIH, CEH, or other related certifications.
• Must obtain one of CISSP, CASP, CISM, GSLC, or GSOM within the first 8 months after the start date.
• Demonstrated leadership experience in cybersecurity operations, including coordinating technical workloads, guiding and providing feedback to staff, supporting analyst development, evaluating performance, and addressing operational or performance-related issues.
• Experience assessing incident severity, determining escalation paths, and coordinating response activities with relevant stakeholders.
• Advanced experience with security monitoring and incident response technologies, including SIEM, EDR, cloud security platforms, and network analysis tools.
• Working knowledge of Windows, Linux, network security, and AWS and Azure cloud environments, including the ability to analyze relevant security telemetry.
• Understanding of common cyber threats, attacker techniques, and incident response processes.
• Strong communication, organizational, and problem-solving skills, including the ability to provide technical guidance, deliver constructive feedback, and lead personnel in a remote environment.

Nice To Haves

• Previous experience in a formal supervisory or personnel-management role.
• Experience developing, implementing, or improving SOC standard operating procedures (SOPs), incident response playbooks, and operational workflows.
• Experience supporting security operations in large enterprise or government contracting environments, including geographically distributed or remote teams.

Responsibilities

• Supervise daily Detection & Response operations, including security monitoring, incident triage, investigation, and escalation in accordance with established procedures.
• Independently investigate security alerts and incidents using SIEM, EDR, and other security monitoring tools; analyze suspicious activity, determine potential impact, and support appropriate response actions.
• Provide technical guidance and investigative support to analysts, including assistance with complex investigations, troubleshooting, and incident escalation.
• Manage assigned personnel, including performance evaluations, coaching, professional development, attendance, and individual and team accountability.
• Oversee operational workloads, investigation prioritization, task assignments, and staffing coverage to maintain 24/7/365 security operations.
• Ensure the accuracy, completeness, and timeliness of incident investigations, case documentation, and escalations through routine quality assurance and performance reviews.
• Monitor operational performance metrics, identify performance gaps, and implement corrective improvements within established authority.
• Lead analyst onboarding, training, and development through technical knowledge sharing, cross-training, and constructive feedback.
• Identify opportunities to improve detection and response workflows, operational procedures, and team effectiveness; recommend and implement improvements through established approval processes.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager