Cybersecurity Ops Analyst (Shift Lead)

Job ID: 2618982
Location: Remote Work, TN, US
Date Posted: 2026-11-10
Category: Cyber
Subcategory: Cybersecurity Ops
Schedule: Full-Time
Shift: Day Job
Travel: No
Minimum Clearance Required: None
Clearance Level Must Be Able to Obtain: None
Potential for Remote Work: ORA_REMOTE
Description
SAIC has an opening for a Cybersecurity Ops Analyst. This position is located in Oak Ridge, Tennessee. SAIC is open to the position working remotely anywhere in the United States.
The SAIC Cybersecurity Ops Analyst (Shift Leader) leads advanced security event analysis as part of the 24/7/365 Security Operations Center's Detection & Response team. They manage daily activities using a SIEM, monitoring events from multiple sources while overseeing a team of Cybersecurity Ops Associates.
In addition to their incident response duties, the Shift Leader manages the operations of the shift, including timecard and expense approval, as well as daily training and performance tracking. They also participate in threat hunting, intelligence gathering, and strive to improve procedures and processes within the ESOC.
Job Duties:

• Conduct Lead the identification, prioritization, and response to intrusion activities and anomalous behavior as shift leader on an 24/7/365 Detection & Response Team.
• Assess the impact of potentially malicious traffic on the network and infrastructure.
• Perform in-depth analysis of security anomalies and incidents using network forensics via a SIEM and host level forensic via an EDR tool.
• Document all incidents within the shift and maintain incident tickets.
• Communicate and escalate issues and incidents as necessary.
• Handle IP/URL/Hash block requests and develop new correlation content.
• Conduct second-level real-time monitoring and analysis of security alerts.
• Delegate event analysis tasks to Cybersecurity Ops Associates, as required.
• Provide feedback on tuning for enhanced anomaly detection.
• Retrieve and review data files associated with security events.
• Evaluate malicious activity, and review vulnerability information to assess risk.
• Collaborate with other teams for incident resolution.
• Manage shift operations: Train, mentor, and oversee Cybersecurity Ops Associates, including approving timecards, expenses, providing feedback, writing performance reviews and ensuring shift coverage for 24/7/365 operation.
• Continually review and improve documentation procedures.
• Participate in knowledge sharing.
• Additional responsibilities will include the ability to train, mentor Cybersecurity Ops Associates.

Qualifications
Required Education and Experience Requirements:

• Bachelors and 2+ years of experience or an AA Degree in related discipline and 3+ years of experience. An additional 4+ years of experience may be considered in lieu of a degree.
• Must have a minimum of two (2) year cybersecurity operations related experience.
• Must possess the following certification(s): Security+ AND CySA+
• Strong leadership skills; proven ability to lead and motivate a team effectively.
• Can-do attitude.
• Self-motivated and quick-learner.
• Excellent communication skills both verbal and written.
• Ability to multitask and collaborate to solve complex technical problems.

Desirables:

• 3+ years cybersecurity operations related experience.
• One or more of the following certifications: GCIH, CASP+, GSEC, or additional relevant certifications.
• Experience with SIEM tools, antivirus, and IDS/IPS technologies.

Target salary range: $40,001 - $80,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.
SAIC is a premier technology integrator providing full life cycle services and solutions in the technical, engineering, intelligence, and enterprise information technology markets. SAIC is Redefining Ingenuity through its deep customer and domain knowledge to enable the delivery of systems engineering and integration offerings for large, complex projects. SAIC's approximately 15,000 employees are driven by integrity and mission focus to serve customers in the U.S. federal government. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $4.5 billion. For more information, visit saic.com. For information on the benefits SAIC offers, see .