SAIC is seeking a dedicated Cybersecurity Operations Supervisor to support our
24/7/365 Enterprise Security Operations Center (ESOC) Detection & Response team.
This position combines hands-on cybersecurity operations with technical
leadership, personnel management, and operational oversight. For the right
candidate, this position may be remote anywhere in the US.
The supervisor will be assigned to 3rd shift, with responsibility for overseeing
personnel across both weekly schedules (Sunday – Wednesday and Wednesday –
Saturday).
• Third shift: 10:00 PM – 8:00 AM EST
The Supervisor is responsible for supporting security investigations,
maintaining team performance, developing analysts, and driving continuous
improvement across ESOC operations.
Role Overview:
The Cybersecurity Operations Supervisor serves as a hands-on technical and
operational leader within the Detection & Response team. This position conducts
security investigations, manages assigned security incidents, and provides
technical guidance to analysts while overseeing daily cybersecurity operations.
The Supervisor is responsible for managing and developing assigned personnel,
ensuring the quality and timeliness of security investigations, maintaining
operational readiness, and driving accountability for team performance. The role
also supports continuous improvement of SOC processes, procedures, and
operational capabilities through collaboration with internal cybersecurity teams
and stakeholders.
Job Duties:
Supervise daily D&R operations, ensuring effective security monitoring,
incident triage, investigation and escalation in accordance with established
procedures.
Independently investigate security alerts and incidents using SIEM, EDR, and
other security monitoring tools to analyze suspicious activity, determine
potential impact, and support appropriate response actions.
Provide technical guidance and investigative support to cybersecurity
analysts, assisting with complex investigations, troubleshooting, and
incident escalation.
Manage assigned personnel, including performance evaluations, coaching,
professional development, attendance, and accountability for individual and
team performance.
Oversee operational workloads, investigation prioritization, task
assignments, and staffing coverage to maintain effective 24/7/365 security
operations.
Ensure the accuracy, completeness, and timeliness of incident investigations,
case documentation, and escalation activities through routine quality
assurance and performance reviews.
Monitor and assess operational performance metrics, identify performance
gaps, and implement corrective improvements within established authority.
Lead the onboarding, training, and development of cybersecurity analyst
through technical knowledge sharing, cross-training, and constructive
feedback.
Identify opportunities to improve detection and response workflows,
operational procedures, and team effectiveness, recommending and implementing
improvements through established approval processes.
QUALIFICATIONS
Required Education and Experience:
Bachelor’s degree and 5+ years of experience. An additional 4+ years of
experience may be considered in lieu of a degree.
Must be a US Citizen.
Must have a minimum of 5 years of hands-on experience in cybersecurity
operations.
Must possess at least two of the following certifications: CompTIA Security+,
CySA+, GSEC, GCIH, CEH or other related certifications.
Must obtain one of the following certifications within the first 8 months of
start date: CISSP, CASP, CISM, GSLC, or GSOM.
Demonstrated leadership experience in a cybersecurity operations environment,
including coordinating technical workloads, providing guidance and feedback,
supporting analyst development, evaluating performance, and addressing
operational or performance-related issues.
Experience assessing security incident severity, determining appropriate
escalation paths, and coordinating response activities with relevant
stakeholders.
Advanced experience with security monitoring and incident response
technologies, including SIEM, EDR, cloud security platforms, and network
analysis tools.
Working knowledge of Windows, Linux, network security and cloud environments
(AWS and Azure), including the ability to analyst relevant security
telemetry.
Understanding of common cyber threats, attacker techniques, and incident
response processes.
Strong communication, organizational, and problem-solving skills, with the
ability to provide technical guidance, deliver constructive feedback, and
effectively lead personnel in a remote environment.
Preferred Qualifications:
Previous experience in a formal supervisory or personnel-management role.
Experience developing, implementing, or improving SOC standard operating
procedures (SOPs), incident response playbooks, and operational workflows.
Experience supporting security operations in large, enterprise or government
contracting environments, including geographically distributed or remote
teams.
SAIC® [http://www.saic.com/] is a premier mission integrator focused on
advancing the power of technology and innovation to serve and protect our world.
Our robust portfolio of offerings across the defense, space, intelligence, and
civilian markets includes secure high-end solutions in mission IT, enterprise
IT, engineering services, and professional services. We integrate emerging
technology, rapidly and securely, into mission critical operations that
modernize and enable critical national imperatives.
We are approximately 23,000 strong; driven by mission, united by purpose, and
inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered
in Reston, Virginia, SAIC has annual revenues of approximately $7.3 billion. For
more information, visit saic.com [http://www.saic.com/]. For ongoing news,
please visit our newsroom [http://www.saic.com/who-we-are/newsroom/].