Cybersecurity has large-scale versions of the challenges common to sociotechnical systems; in this high-risk, dynamic environment, attacks on organizations and governments are increasing in frequency, sophistication, and severity. In this paper, we summarize existing understanding of situation awareness in cybersecurity and propose additional factors that reflect emerging technology in the domain, incorporate the rising role of automation in cybersecurity, and are relevant to diverse organizations. To do this, we apply a distributed, sociotechnical systems approach to SA and consider the importance of multiteam cognition. Finally, we describe strategies for measurement to support future empirical research in cybersecurity.