Senior Cybersecurity Ops Analyst

🔥 0 minutes ago

🎸 Tennessee – Remote

🎸 Tennessee – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SAIC

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1969

☁️ SaaS

📣 Marketing

🏢 Enterprise

🔥 Funding within the last year

💰 $500M Post-IPO Debt - SAIC on 2025-09

SaaS • Marketing • Enterprise

SAIC is represented in the supplied content by marketing and product copy that matches Bitly — a cloud-based link management and QR-code platform. The material describes a SaaS offering for URL shortening, dynamic QR Codes, link analytics, mobile-friendly landing pages, branded links, UTM campaign tracking, digital business cards, developer APIs and AI-enhanced features. It targets marketers, developers, and enterprises across industries (retail, CPG, hospitality, media, healthcare, finance, education) and emphasizes integrations, analytics, and enterprise-grade capabilities. Note: the provided text appears to be Bitly’s website content rather than information about SAIC; if you intended the defense/technology firm SAIC (Science Applications International Corporation), please provide relevant content.

📋 Description

• Take escalated cybersecurity cases and coordinate triage, investigation, containment, eradication, and recovery activities • Conduct incident investigations using forensic analysis, SIEM, EDR, endpoint, identity, email, network, cloud, and other enterprise security telemetry • Determine incident scope, impact, root cause, and potential data exposure • Coordinate approved remediation actions including account disablement, session revocation, email purge, endpoint isolation, IP or URL blocking, and access review • Develop investigative timelines, case narratives, evidence summaries, technical findings, and response documentation • Work across the ESOC and cybersecurity organization to validate findings, communicate risk, coordinate response, and resolve incidents • Identify detection, control, forensic visibility, response, and process improvement gaps • Support purple team exercises and convert findings into improved monitoring, investigation, and response procedures • Lead tabletop exercises validating response processes, escalation paths, communication workflows, analyst readiness, and cross-functional coordination • Provide training, mentoring, and knowledge sharing to junior team members • Create, maintain, and improve incident response playbooks, forensic investigation guides, case templates, escalation procedures, and operational documentation • Support threat hunting and proactive analysis efforts • Contribute to ESOC continuous improvement, AI and automation, case management, workflow refinement, documentation, and operational reporting • Support 24/7/365 operational needs during high-priority incidents or elevated-tempo events • Perform additional duties and operational tasks as assigned

🎯 Requirements

• Bachelor’s degree and 5+ years of related experience; master’s degree and 3+ years of related experience • An additional 4+ years of experience may be considered in lieu of a degree • 3+ years of cybersecurity operations experience supporting enterprise security monitoring, incident response, forensic analysis, or cyber investigations • Hands-on experience with enterprise SIEM technologies, preferably Splunk • Hands-on experience using EDR or endpoint security platforms to investigate suspicious activity, endpoint behavior, malware, account compromise, and incident scope • Must possess CySA+, SSCP, or equivalent certification • Strong leadership skills with a proven ability to lead and motivate a team effectively • Self-motivated and quick learner • Excellent verbal and written communication skills • Ability to multitask and collaborate to solve complex technical problems • US Citizenship is required • CISSP, GCIH, or GCFA certifications are desirable

🏖️ Benefits

• 4x10 schedule, 7:00 a.m. EST to 5:00 p.m. EST, Monday through Thursday • Remote work option for qualified candidates within the United States • 24/7/365 operational coverage support as required