{"id":3188503,"url":"https://alion.io/job/saic-cybersecurity-operations-supervisor-3rd-shift","title":"Cybersecurity Operations Supervisor 3rd Shift","company":{"id":58788,"name":"SAIC","domain":"saic.com","url":"https://alion.io/company/saic","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":82,"open_postings":57,"ghost_share":0,"stale_share":0.93,"repost_share":0,"time_to_fill_p50_days":18,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Oak Ridge, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":114000,"max_usd":221000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1306},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Linux","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-23T20:49:47Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-26T03:29:46Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"SAIC is seeking a dedicated Cybersecurity Operations Supervisor to support our 24/7/365 Enterprise Security Operations Center (ESOC) Detection & Response team. This position combines hands-on cybersecurity operations with technical leadership, personnel management, and operational oversight. For the right candidate, this position may be remote anywhere in the US.\nThe supervisor will be assigned to 3rd shift, with responsibility for overseeing personnel across both weekly schedules (Sunday - Wednesday and Wednesday - Saturday).\nThird shift: 10:00 PM - 8:00 AM EST\nThe Supervisor is responsible for supporting security investigations, maintaining team performance, developing analysts, and driving continuous improvement across ESOC operations.\nRole Overview:\nThe Cybersecurity Operations Supervisor serves as a hands-on technical and operational leader within the Detection & Response team. This position conducts security investigations, manages assigned security incidents, and provides technical guidance to analysts while overseeing daily cybersecurity operations.\nThe Supervisor is responsible for managing and developing assigned personnel, ensuring the quality and timeliness of security investigations, maintaining operational readiness, and driving accountability for team performance. The role also supports continuous improvement of SOC processes, procedures, and operational capabilities through collaboration with internal cybersecurity teams and stakeholders.\nJob Duties:\nSupervise daily D&R operations, ensuring effective security monitoring, incident triage, investigation and escalation in accordance with established procedures. \nIndependently investigate security alerts and incidents using SIEM, EDR, and other security monitoring tools to analyze suspicious activity, determine potential impact, and support appropriate response actions. \nProvide technical guidance and investigative support to cybersecurity analysts, assisting with complex investigations, troubleshooting, and incident escalation. \nManage assigned personnel, including performance evaluations, coaching, professional development, attendance, and accountability for individual and team performance. \nOversee operational workloads, investigation prioritization, task assignments, and staffing coverage to maintain effective 24/7/365 security operations. \nEnsure the accuracy, completeness, and timeliness of incident investigations, case documentation, and escalation activities through routine quality assurance and performance reviews. \nMonitor and assess operational performance metrics, identify performance gaps, and implement corrective improvements within established authority. \nLead the onboarding, training, and development of cybersecurity analyst through technical knowledge sharing, cross-training, and constructive feedback. \nIdentify opportunities to improve detection and response workflows, operational procedures, and team effectiveness, recommending and implementing improvements through established approval processes.\n Required Education and Experience:\nBachelor’s degree and 5+ years of experience. An additional 4+ years of experience may be considered in lieu of a degree. \nMust be a US Citizen. \nMust have a minimum of 5 years of hands-on experience in cybersecurity operations.\nMust possess at least two of the following certifications: CompTIA Security+, CySA+, GSEC, GCIH, CEH or other related certifications.\nMust obtain one of the following certifications within the first 8 months of start date: CISSP, CASP, CISM, GSLC, or GSOM.\nDemonstrated leadership experience in a cybersecurity operations environment, including coordinating technical workloads, providing guidance and feedback, supporting analyst development, evaluating performance, and addressing operational or performance-related issues. \nExperience assessing security incident severity, determining appropriate escalation paths, and coordinating response activities with relevant stakeholders. \nAdvanced experience with security monitoring and incident response technologies, including SIEM, EDR, cloud security platforms, and network analysis tools. \nWorking knowledge of Windows, Linux, network security and cloud environments (AWS and Azure), including the ability to analyst relevant security telemetry. \nUnderstanding of common cyber threats, attacker techniques, and incident response processes.\nStrong communication, organizational, and problem-solving skills, with the ability to provide technical guidance, deliver constructive feedback, and effectively lead personnel in a remote environment.\nPreferred Qualifications:\nPrevious experience in a formal supervisory or personnel-management role.\nExperience developing, implementing, or improving SOC standard operating procedures (SOPs), incident response playbooks, and operational workflows. \nExperience supporting security operations in large, enterprise or government contracting environments, including geographically distributed or remote teams.","description_format":"text","description_chars":4994,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Digital Government","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-24T00:56:30Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":18,"reasons":["conf:5","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/saic-cybersecurity-operations-supervisor-3rd-shift","json_url":"https://alion.io/job/saic-cybersecurity-operations-supervisor-3rd-shift.json","meta":{"generated_at":"2026-10-26T03:56:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5377,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58788},"rest":"https://alion.io/mcp/rest/get_company?id=58788"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsaic-cybersecurity-operations-supervisor-3rd-shift"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsaic-cybersecurity-operations-supervisor-3rd-shift"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsaic-cybersecurity-operations-supervisor-3rd-shift"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/saic-cybersecurity-operations-supervisor-3rd-shift\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsaic-cybersecurity-operations-supervisor-3rd-shift"}]}