Cybersecurity Operations Supervisor 3rd Shift

SAIC • Remote Work, TN

1d • Remote

About The Position

SAIC is seeking a dedicated Cybersecurity Operations Supervisor to support its 24/7/365 Enterprise Security Operations Center (ESOC) Detection & Response team. This hands-on technical and operational leadership role combines cybersecurity operations, personnel management, and operational oversight. The position may be remote anywhere in the United States and is assigned to the third shift, 10:00 PM–8:00 AM EST, overseeing personnel across Sunday–Wednesday and Wednesday–Saturday schedules.

The supervisor conducts security investigations, manages assigned incidents, and provides technical guidance to analysts while overseeing daily cybersecurity operations. The role manages and develops assigned personnel, ensures the quality and timeliness of investigations, maintains operational readiness, and promotes accountability for team performance. It also supports continuous improvement of SOC processes, procedures, and operational capabilities through collaboration with internal cybersecurity teams and stakeholders.

The target salary range is $60,001–$100,000, with the estimate depending on experience and other factors. Applications are accepted on an ongoing basis with no deadline.

Requirements

• Bachelor’s degree and at least 5 years of experience; an additional 4+ years of experience may be considered in lieu of a degree.
• Must be a U.S. citizen.
• At least 5 years of hands-on experience in cybersecurity operations.
• At least two of the following or related certifications: CompTIA Security+, CySA+, GSEC, GCIH, or CEH.
• Must obtain one of the following certifications within the first 8 months of employment: CISSP, CASP, CISM, GSLC, or GSOM.
• Demonstrated cybersecurity operations leadership, including coordinating technical workloads, providing guidance and feedback, supporting analyst development, evaluating performance, and addressing operational or performance issues.
• Experience assessing security incident severity, determining escalation paths, and coordinating response activities with stakeholders.
• Advanced experience with security monitoring and incident response technologies, including SIEM, EDR, cloud security platforms, and network analysis tools.
• Working knowledge of Windows, Linux, network security, and AWS and Azure cloud environments, including the ability to analyze relevant security telemetry.
• Understanding of common cyber threats, attacker techniques, and incident response processes.
• Strong communication, organizational, and problem-solving skills, with the ability to provide technical guidance, deliver constructive feedback, and lead personnel in a remote environment.

Nice To Haves

• Previous experience in a formal supervisory or personnel-management role.
• Experience developing, implementing, or improving SOC standard operating procedures (SOPs), incident response playbooks, and operational workflows.
• Experience supporting security operations in large enterprise or government contracting environments, including geographically distributed or remote teams.

Responsibilities

• Supervise daily Detection & Response operations, including security monitoring, incident triage, investigation, and escalation in accordance with established procedures.
• Independently investigate security alerts and incidents using SIEM, EDR, and other security monitoring tools; analyze suspicious activity, determine potential impact, and support appropriate response actions.
• Provide technical guidance and investigative support to analysts, including assistance with complex investigations, troubleshooting, and incident escalation.
• Manage assigned personnel, including performance evaluations, coaching, professional development, attendance, and accountability for individual and team performance.
• Oversee operational workloads, investigation prioritization, task assignments, and staffing coverage to maintain 24/7/365 security operations.
• Ensure the accuracy, completeness, and timeliness of investigations, case documentation, and escalations through quality assurance and performance reviews.
• Monitor operational performance metrics, identify performance gaps, and implement corrective improvements within established authority.
• Lead analyst onboarding, training, and development through technical knowledge sharing, cross-training, and constructive feedback.
• Identify opportunities to improve detection and response workflows, operational procedures, and team effectiveness; recommend and implement improvements through established approval processes.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior