Cybersecurity Operations Supervisor, 3rd Shift

SAIC

. Supervise daily detection and response operations, including security monitoring, incident triage, investigation, and escalation .

Posted 10/24/2026full-timeRemote • Tennessee • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in cybersecurity operations, including incident detection, response, and investigation using SIEM and EDR tools. Proven leadership in managing personnel, improving operational workflows, and ensuring effective incident management in a 24/7 environment.

Highest-signal resume keywords

Cybersecurity Operations ManagementIncident Response CoordinationSIEM And EDR ExpertiseLeadership In CybersecuritySecurity Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident InvestigationSecurity MonitoringIncident TriagePerformance Metrics AnalysisCloud SecurityNetwork AnalysisWindows AdministrationLinux AdministrationCyber Threat AnalysisOperational Procedure Improvement

Soft Skills

Strong CommunicationOrganizational SkillsProblem-Solving Skills

Tools & Technologies

SIEM ToolsEDR ToolsCloud Security PlatformsNetwork Security ToolsAWSAzure

Certifications & Qualifications

CompTIA Security+CySA+GSECGCIHCEHCISSPCASPCISMGSLCGSOM

Industry Keywords

CybersecurityIncident ResponseSOC SOPsGovernment ContractingEnterprise Security Operations

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityLinux

About the role

Key responsibilities & impact

Supervise daily detection and response operations, including security monitoring, incident triage, investigation, and escalation
Independently investigate security alerts and incidents using SIEM, EDR, and other security monitoring tools
Provide technical guidance and investigative support to cybersecurity analysts
Manage personnel, including performance evaluations, coaching, professional development, attendance, and accountability
Oversee workloads, investigation prioritization, task assignments, and staffing coverage for 24/7/365 operations
Ensure accuracy, completeness, and timeliness of incident investigations, case documentation, and escalations
Monitor operational performance metrics, identify gaps, and implement corrective improvements
Lead analyst onboarding, training, technical knowledge sharing, cross-training, and development
Improve detection and response workflows, operational procedures, and team effectiveness

Requirements

What you’ll need

Bachelor’s degree and 5+ years of experience; an additional 4+ years of experience may be considered in lieu of a degree
Must be a US Citizen
Minimum of 5 years of hands-on experience in cybersecurity operations
Must possess at least two certifications from CompTIA Security+, CySA+, GSEC, GCIH, CEH, or related certifications
Must obtain CISSP, CASP, CISM, GSLC, or GSOM within the first 8 months of start date
Demonstrated leadership experience in a cybersecurity operations environment
Experience assessing security incident severity, escalation paths, and response coordination
Advanced experience with SIEM, EDR, cloud security platforms, and network analysis tools
Working knowledge of Windows, Linux, network security, AWS, and Azure
Understanding of common cyber threats, attacker techniques, and incident response processes
Strong communication, organizational, and problem-solving skills
Preferred: formal supervisory or personnel-management experience
Preferred: experience developing or improving SOC SOPs, incident response playbooks, and operational workflows
Preferred: experience in large enterprise or government contracting security operations environments