Cybersecurity Ops Analyst

SAIC

. Lead identification, prioritization, and response to intrusion activities and anomalous behavior on a 24/7/365 Detection & Response Team .

Posted 10/6/2026full-timeRemote • Tennessee • United StatesJuniorMid-LevelWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity operations, including incident response, network forensics, and risk assessment. Proven leadership in managing teams, enhancing anomaly detection, and collaborating for incident resolution.

Highest-signal resume keywords

Cybersecurity Operations ExperienceIncident Response ManagementNetwork Forensics AnalysisSecurity+ CertificationCySA+ Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Intrusion DetectionAnomalous Behavior AnalysisSIEM ToolsEDR ToolsIncident DocumentationMalicious Traffic AssessmentEvent AnalysisRisk AssessmentCorrelation Content DevelopmentData File Review

Soft Skills

LeadershipCommunicationMultitaskingCollaborationMentoring

Certifications & Qualifications

Security+ CertificationCySA+ Certification

Industry Keywords

CybersecurityIncident Resolution24/7 MonitoringVulnerability AssessmentKnowledge Sharing

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead identification, prioritization, and response to intrusion activities and anomalous behavior on a 24/7/365 Detection & Response Team
Assess the impact of potentially malicious traffic on network and infrastructure
Analyze security anomalies and incidents using network forensics via a SIEM and host-level forensics via an EDR tool
Document incidents and maintain incident tickets
Communicate and escalate issues and incidents as necessary
Handle IP/URL/hash block requests and develop correlation content
Conduct second-level real-time monitoring and security-alert analysis
Delegate event-analysis tasks to Cybersecurity Ops Associates
Provide feedback on tuning for enhanced anomaly detection
Retrieve and review data files associated with security events
Evaluate malicious activity and vulnerability information to assess risk
Collaborate with other teams for incident resolution
Manage shift operations, including training, mentoring, oversight, timecard and expense approval, performance feedback, performance reviews, and shift coverage
Review and improve documentation procedures
Participate in knowledge sharing

Requirements

What you’ll need

Bachelor’s degree and two (2) years or more experience OR AA Degree in a related discipline and three (3) years or more experience
Minimum of two (2) years of cybersecurity operations-related experience
Security+ certification
CySA+ certification
Strong leadership skills; proven ability to lead and motivate a team effectively
Excellent verbal and written communication skills
Ability to multitask and collaborate to solve complex technical problems
US citizenship required
Three (3) years of cybersecurity operations-related experience desirable

Benefits

Comp & perks

24/7/365 Security Operations Center operation
Second-shift schedule (2pm–midnight, Wednesday–Saturday)