Cybersecurity Ops Associate 2nd Shift

Description

SAIC has an opening for a Cybersecurity Ops Associate. This position can be worked 100% remotely for the right candidate. It is a second‑shift role (2:00 p.m. – 12:00 a.m.) Sunday‑Wednesday. The Cybersecurity Ops Associate is responsible for monitoring and analysis of identified security events in support of the real‑time 24/7/365 Enterprise Security Operations Center’s Detection & Response team. The associate will perform daily operations utilizing a SIEM and monitoring events from multiple sources, including firewall logs, system logs, network and host‑based intrusion detection systems, applications, databases, cloud infrastructure, and other security information monitoring tools. Working as part of the ESOC team, the associate helps protect information assets from unauthorized access or alteration and assists in detection, analysis, and mitigation of potential threats.

Responsibilities

• Responds and reacts to events in the SAIC monitored environment and escalates for further analysis as needed.
• Continuously monitors security event systems using the Enterprise Security Operation Center’s SIEM tool.
• Provides initial response and support to potential intrusion or security breach alerts.
• Collects and compiles historical data on security incidents for trend analysis and improvement of security measures.
• Assists in containment measures during an incident to prevent further unauthorized access or data loss.
• Investigates and approves/denies IP/URL block requests.
• Contributes to the development of signature patterns based on known or anticipated threats to enhance detection capabilities.
• Provides feedback on signature tuning for better detection of anomalies.
• Creates and maintains incident tickets as needed.
• Performs PCAP analysis and correlation of events.
• Determines urgency and potential impact of security events.
• Assists with analysis of malicious actor actions to determine initial infection vectors, establish timelines, and assess any data loss.
• Develops and maintains security documentation, including SOPs, incident reports, and policies.
• Communicates and escalates issues and alerts as required by process or management.
• Supports various Enterprise Security Operations Center activities as additional responsibilities.

Qualifications

• Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity, or a related field (or 4+ years of experience in lieu of a degree).
• CompTIA Security+ certification.
• U.S. citizenship.
• Availability to work flexible hours in a 24 × 7 × 365 environment.
• Working knowledge of security architectures and devices.
• Working knowledge of technology and security topics, including operating systems, network security, protocols, application security, infrastructure hardening, and security baselines.
• Can‑do attitude.
• Self‑motivated and quick learner.
• Excellent verbal and written communication skills.
• Ability to multitask.

Pay

Target salary range $40,001 – $80,000.

Schedule

Full‑time, second shift (2:00 p.m. – 12:00 a.m.) Sunday‑Wednesday, evening shift. Remote work possible.