SNOC Operations Manager

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Employee discounts
• Health insurance
• Paid time off
• Tuition assistance
• Vision insurance

SNOC Operations Manager

The role

The SNOC Operations Manager is the operational owner and responsible for leading and overseeing SNOC analysts across all three shifts in a 24/7 Security Operations Center (SOC) environment, ensuring operational efficiency, consistent performance, and adherence to established procedures.

You lead by example, review analysts' work for accuracy and SOP compliance, and turn insights from daily operations into improved runbooks, tuning, and automation. You report to the Director of Technology, Innovation & Managed Services.

What you'll do

Shift leadership and quality

• Run shift start and handoff: verify attendance, brief the incoming team, and confirm coverage across our Day, Mid, Overlap and Night shifts
• Review shift checklists and tickets closed on prior and current shifts for completeness, accuracy and SOP adherence
• Monitor SLA compliance in real time and act before a breach, not after
• Investigate potential violations of operating standards and document determinations
• Produce the End-of-Shift (EOS) report and tuning briefs for management

Incident response and escalation

• Serve as the escalation point for critical service deliverables and security incidents that need immediate response
• Coordinate containment actions across SIEM, EDR and network platforms with analysts and engineers
• Generate incident and status reports for internal leadership and clients
• Provide after-hours and weekend support as part of the on-call rotation

Service delivery and client operations

• Maintain SNOC and client operational manuals: runbooks, playbooks and escalation matrices
• Create and review solutions, resolution templates and statuses in HaloPSA
• Validate that client reporting deliverables will be met on time
• Support managed services onboarding for new clients
• Help reconcile contracts to invoicing and services delivered each month, and maintain client in-scope asset inventories

Detection tuning and automation

• Track trends across monitored environments, collect analyst feedback, and recommend and implement detection and configuration tuning
• Research, test and roll out automation that raises SNOC efficiency, including AI-assisted triage and scripted remediation
• Mature monitoring toward self-healing by analyzing fault and capacity trends

Infrastructure and process ownership

• Own internal production infrastructure: patching, updates, incident management, root cause analysis and change management
• Drive remediation of vulnerability audit findings on internal systems
• Help implement and disseminate new processes, such as change management
• Manage team permissions and access following least-privilege principles
• Identify gaps, recommend training aligned to career paths, and help define department technology and budget needs

What you bring

• Bachelor's degree in Computer Science or a related field, or equivalent work experience
• 3+ years of progressive IT engineering experience across vulnerability assessment, incident response, firewall management and advanced threat protection
• Strong hands-on experience in a SOC or NOC, ideally in an MSSP or multi-tenant environment
• Experience reviewing and hardening network device configurations
• Expert routing and switching knowledge: BGP, OSPF, MPLS
• Solid grasp of network-layer security: firewall policy, ACLs, segmentation
• Working knowledge of Linux/UNIX and Windows server environments
• Sound judgment under pressure, with strong attention to detail and accuracy
• Clear written and verbal communication with both technical teams and non-technical client stakeholders
• Ability to follow through, prioritize competing work and adapt quickly to new technology
• Availability for off-hours support, including 24x7 on-call rotation

Nice to have

• Certifications: CCNA, CCNA CyberOps, CCNP, CCNP Security, CISSP, Network+, Security+ or equivalent
• Prior shift lead or supervisory experience
• Microsoft Sentinel and KQL experience
• PowerShell or Python scripting for automation
• Familiarity with frameworks our clients answer to: FFIEC, NCUA, HIPAA, CJIS, NIST CSF
• Interest in AI-assisted security operations and automation

Schedule, location and how to apply

• Location: Miami Lakes, FL (on-site SOC)
• Type: Full-time
• Schedule: Assigned shift within our 24x7x365 rotation, plus on-call
• Travel: Minimal (training and conferences)
• Compensation: 85 -110k yearly