Cybersecurity Ops Analyst – Shift Lead

SAIC

. Lead identification, prioritization, and response to intrusion activities and anomalous behavior on a 24/7/365 Detection & Response Team .

Posted 11/10/2026full-timeRemote • Tennessee • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity operations, including incident response, anomaly detection, and risk assessment. Proficient in leading teams, managing shift operations, and utilizing SIEM tools for effective security monitoring.

Highest-signal resume keywords

Cybersecurity Operations ExperienceIncident Response ManagementSIEM Tools ProficiencySecurity+ CertificationLeadership Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident AnalysisNetwork ForensicsHost ForensicsAnomaly DetectionRisk AssessmentEvent AnalysisVulnerability ReviewDocumentation ProceduresData RetrievalCorrelation Content Development

Soft Skills

LeadershipCommunicationCollaborationMultitaskingSelf-Motivation

Tools & Technologies

SIEM ToolsAntivirus SoftwareIDS TechnologiesIPS Technologies

Certifications & Qualifications

Security+CySA+GCIHCASP+GSEC

Industry Keywords

Intrusion DetectionAnomalous BehaviorCybersecurityIncident Management24/7 Monitoring

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead identification, prioritization, and response to intrusion activities and anomalous behavior on a 24/7/365 Detection & Response Team
Assess the impact of potentially malicious traffic on networks and infrastructure
Analyze security anomalies and incidents using SIEM-based network forensics and EDR-based host forensics
Document incidents and maintain incident tickets
Communicate and escalate issues and incidents as necessary
Handle IP, URL, and hash block requests and develop correlation content
Conduct second-level real-time monitoring and security alert analysis
Delegate event analysis tasks to Cybersecurity Ops Associates
Provide feedback on tuning for enhanced anomaly detection
Retrieve and review data files associated with security events
Evaluate malicious activity and review vulnerability information to assess risk
Collaborate with other teams to resolve incidents
Manage shift operations, including training, mentoring, timecard and expense approval, performance feedback and reviews, and shift coverage
Review and improve documentation procedures
Participate in knowledge sharing

Requirements

What you’ll need

Bachelor's degree and 2+ years of experience, or an AA degree in a related discipline and 3+ years of experience; an additional 4+ years of experience may be considered in lieu of a degree
Minimum of two years of cybersecurity operations-related experience
Security+ and CySA+ certifications required
Strong leadership skills and proven ability to lead and motivate a team effectively
Can-do attitude
Self-motivated and quick learner
Excellent verbal and written communication skills
Ability to multitask and collaborate to solve complex technical problems
Must be a US Citizen
Desirable: 3+ years of cybersecurity operations-related experience
Desirable: GCIH, CASP+, GSEC, or additional relevant certifications
Desirable: experience with SIEM tools, antivirus, and IDS/IPS technologies