Cybersecurity Ops Analyst

🔥 6 minutes ago

🎸 Tennessee – Remote

🎸 Tennessee – Remote

⏰ Full Time

🟢 Junior

🟡 Mid-level

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SAIC

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1969

☁️ SaaS

📣 Marketing

🏢 Enterprise

💰 $500M Post-IPO Debt - SAIC on 2025-09

SaaS • Marketing • Enterprise

SAIC is represented in the supplied content by marketing and product copy that matches Bitly — a cloud-based link management and QR-code platform. The material describes a SaaS offering for URL shortening, dynamic QR Codes, link analytics, mobile-friendly landing pages, branded links, UTM campaign tracking, digital business cards, developer APIs and AI-enhanced features. It targets marketers, developers, and enterprises across industries (retail, CPG, hospitality, media, healthcare, finance, education) and emphasizes integrations, analytics, and enterprise-grade capabilities. Note: the provided text appears to be Bitly’s website content rather than information about SAIC; if you intended the defense/technology firm SAIC (Science Applications International Corporation), please provide relevant content.

📋 Description

• Perform advanced security event analysis as part of the 24/7/365 Enterprise Security Operations Center Detection & Response team • Monitor, triage, and investigate security alerts and anomalous activity • Determine severity, scope, potential impact, and appropriate response actions • Analyze and correlate network, endpoint, system, and cloud telemetry using SIEM and EDR technologies • Evaluate suspicious activity, threat intelligence, and vulnerability information to identify potential threats and assess organizational risk • Execute approved response actions, including IP, URL, and hash blocks and endpoint isolation • Escalate confirmed or suspected incidents to appropriate incident response teams • Participate in proactive threat hunting to identify suspicious behavior, indicators of compromise, and detection gaps • Document investigations, findings, evidence, and response actions in the incident tracking system • Recommend detection tuning, process enhancements, and procedure and documentation updates • Support onboarding and training of new analysts through knowledge sharing, cross-training, and technical assistance • Collaborate with cybersecurity teams including GRC, architecture, and detection engineering

🎯 Requirements

• Bachelor’s degree and 2+ years of experience, or an Associate’s degree in a related discipline and 3+ years of experience • An additional 4+ years of experience may be considered in lieu of a degree • Must be a US Citizen • Minimum 2 years of cybersecurity operations related experience • Security+ and CySA+ certifications required • Hands-on experience with SIEM and EDR technologies, including security alert investigation, endpoint analysis, and correlation of security events • Experience triaging security incidents, assessing severity and potential impact, and determining escalation procedures • Working knowledge of network security fundamentals and identification of suspicious network activity • Working knowledge of Windows, Linux, and cloud environments, including relevant security logs, events, and telemetry • Understanding of attacker tactics, techniques, and procedures, including the MITRE ATT&CK framework • Ability to independently investigate complex or unfamiliar security events and exercise sound technical judgment • Strong written and verbal communication skills, including clear documentation and coordination with technical and nontechnical stakeholders • Ability to share technical knowledge and guide less experienced analysts • Preferred: hands-on experience with Splunk Enterprise Security • Preferred: experience with full incident response lifecycles, including containment, eradication, recovery, and post-incident analysis • Preferred: proactive threat hunting and detection tuning experience • Preferred: familiarity with Python, PowerShell, or similar scripting and automation technologies

🏖️ Benefits

• Remote work anywhere in the United States • 2nd shift or 3rd shift schedule option • Equal Opportunity Employer