SNOC Operations Manager

Benefits: 401(k) 401(k) matching Dental insurance Employee discounts Health insurance Paid time off Tuition assistance Vision insurance SNOC Operations Manager The role The SNOC Operations Manager is the operational owner and responsible for leading and overseeing SNOC analysts across all three shifts in a 24/7 Security Operations Center (SOC) environment, ensuring operational efficiency, consistent performance, and adherence to established procedures. You lead by example, review analysts' work for accuracy and SOP compliance, and turn insights from daily operations into improved runbooks, tuning, and automation. You report to the Director of Technology, Innovation & Managed Services. What you'll do Shift leadership and quality Run shift start and handoff: verify attendance, brief the incoming team, and confirm coverage across our Day, Mid, Overlap and Night shifts Review shift checklists and tickets closed on prior and current shifts for completeness, accuracy and SOP adherence Monitor SLA compliance in real time and act before a breach, not after Investigate potential violations of operating standards and document determinations Produce the End-of-Shift (EOS) report and tuning briefs for management Incident response and escalation Serve as the escalation point for critical service deliverables and security incidents that need immediate response Coordinate containment actions across SIEM, EDR and network platforms with analysts and engineers Generate incident and status reports for internal leadership and clients Provide after-hours and weekend support as part of the on-call rotation Service delivery and client operations Maintain SNOC and client operational manuals: runbooks, playbooks and escalation matrices Create and review solutions, resolution templates and statuses in HaloPSA Validate that client reporting deliverables will be met on time Support managed services onboarding for new clients Help reconcile contracts to invoicing and services delivered each month, and maintain client in-scope asset inventories Detection tuning and automation Track trends across monitored environments, collect analyst feedback, and recommend and implement detection and configuration tuning Research, test and roll out automation that raises SNOC efficiency, including AI-assisted triage and scripted remediation Mature monitoring toward self-healing by analyzing fault and capacity trends Infrastructure and process ownership Own internal production infrastructure: patching, updates, incident management, root cause analysis and change management Drive remediation of vulnerability audit findings on internal systems Help implement and disseminate new processes, such as change management Manage team permissions and access following least-privilege principles Identify gaps, recommend training aligned to career paths, and help define department technology and budget needs What you bring Bachelor's degree in Computer Science or a related field, or equivalent work experience 3+ years of progressive IT engineering experience across vulnerability assessment, incident response, firewall management and advanced threat protection Strong hands-on experience in a SOC or NOC, ideally in an MSSP or multi-tenant environment Experience reviewing and hardening network device configurations Expert routing and switching knowledge: BGP, OSPF, MPLS Solid grasp of network-layer security: firewall policy, ACLs, segmentation Working knowledge of Linux/UNIX and Windows server environments Sound judgment under pressure, with strong attention to detail and accuracy Clear written and verbal communication with both technical teams and non-technical client stakeholders Ability to follow through, prioritize competing work and adapt quickly to new technology Availability for off-hours support, including 24x7 on-call rotation Nice to have Certifications: CCNA, CCNA CyberOps, CCNP, CCNP Security, CISSP, Network+, Security+ or equivalent Prior shift lead or supervisory experience Microsoft Sentinel and KQL experience PowerShell or Python scripting for automation Familiarity with frameworks our clients answer to: FFIEC, NCUA, HIPAA, CJIS, NIST CSF Interest in AI-assisted security operations and automation Schedule, location and how to apply Location: Miami Lakes, FL (on-site SOC) Type: Full-time Schedule: Assigned shift within our 24x7x365 rotation, plus on-call Travel: Minimal (training and conferences) Compensation: 85 -110k yearly #J-18808-Ljbffr Infosight, Inc.