Cybersecurity Operations Supervisor 3rd Shift

SAIC • Oak Ridge, TN

2d • Remote

About The Position

SAIC is seeking a dedicated Cybersecurity Operations Supervisor to support its 24/7/365 Enterprise Security Operations Center (ESOC) Detection & Response team. This role combines hands-on cybersecurity operations with technical leadership, personnel management, and operational oversight. The position may be remote anywhere in the United States for the right candidate and is assigned to the third shift, 10:00 PM–8:00 AM EST, overseeing personnel across Sunday–Wednesday and Wednesday–Saturday schedules.

The Supervisor is a hands-on technical and operational leader who conducts security investigations, manages assigned incidents, and provides technical guidance to analysts while overseeing daily cybersecurity operations. The role includes managing and developing personnel, ensuring the quality and timeliness of investigations, maintaining operational readiness, and driving accountability for team performance. The Supervisor also supports continuous improvement of SOC processes, procedures, and capabilities in collaboration with internal cybersecurity teams and stakeholders.

Requirements

• Bachelor’s degree and at least 5 years of experience; an additional 4 years of experience may be considered in lieu of a degree.
• Must be a U.S. citizen.
• At least 5 years of hands-on cybersecurity operations experience.
• At least two of the following or related certifications: CompTIA Security+, CySA+, GSEC, GCIH, or CEH.
• Must obtain one of the following within the first 8 months of the start date: CISSP, CASP, CISM, GSLC, or GSOM.
• Demonstrated cybersecurity operations leadership, including coordinating technical workloads, guiding and providing feedback to personnel, supporting analyst development, evaluating performance, and addressing operational or performance issues.
• Experience assessing incident severity, determining escalation paths, and coordinating response activities with stakeholders.
• Advanced experience with SIEM, EDR, cloud security platforms, and network analysis tools.
• Working knowledge of Windows, Linux, network security, and AWS and Azure cloud environments, including the ability to analyze relevant security telemetry.
• Understanding of common cyber threats, attacker techniques, and incident response processes.
• Strong communication, organizational, and problem-solving skills, including the ability to provide technical guidance, deliver constructive feedback, and lead personnel in a remote environment.

Nice To Haves

• Previous experience in a formal supervisory or personnel-management role.
• Experience developing, implementing, or improving SOC standard operating procedures, incident response playbooks, and operational workflows.
• Experience supporting security operations in large enterprise or government contracting environments, including geographically distributed or remote teams.

Responsibilities

• Supervise daily Detection & Response operations, including security monitoring, incident triage, investigation, and escalation according to established procedures.
• Independently investigate security alerts and incidents using SIEM, EDR, and other monitoring tools; analyze suspicious activity, determine potential impact, and support appropriate response actions.
• Provide technical guidance and investigative support to analysts, including help with complex investigations, troubleshooting, and incident escalation.
• Manage assigned personnel, including performance evaluations, coaching, professional development, attendance, and accountability.
• Oversee operational workloads, investigation priorities, task assignments, and staffing coverage for 24/7/365 operations.
• Ensure incident investigations, case documentation, and escalations are accurate, complete, and timely through quality assurance and performance reviews.
• Monitor operational performance metrics, identify gaps, and implement corrective improvements within established authority.
• Lead analyst onboarding, training, and development through technical knowledge sharing, cross-training, and constructive feedback.
• Identify opportunities to improve detection and response workflows, procedures, and team effectiveness, and recommend and implement improvements through established approval processes.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior