Network & Security Operations Manager

The Network & Security Operations Manager leads the combined Network Operations Center (NOC) and Tier 1 Security Operations Center (SOC), ensuring the reliability, performance, and security of enterprise and customer environments. This role oversees 24/7 operational monitoring, incident response, service restoration, and threat detection workflows. The manager is responsible for team leadership, operational processes, automation initiatives, budget management, and supporting the commercial growth of the NOC/SOC services through customer engagement and sales support. Operational Leadership – NOC & SOC Direct daily operations for NOC and Tier 1 SOC teams, including network monitoring, alert triage, remediation coordination, and security event handling. Ensure adherence to incident management best practices and standardized workflows, including runbooks and response playbooks. Monitor and report on operational and security performance metrics, including SLAs, KPIs, MTTR/MTTD, and SOC event handling indicators. Lead ongoing improvements to availability monitoring, observability, and threat detection practices. Triage first-level incidents for handoff to Tier 2 staff Team Management Hire, coach, and develop NOC and SOC analysts, fostering strong capabilities in networking fundamentals, cybersecurity triage, problem-solving, and customer communication. Promote a culture that values security, accountability, collaboration, and continuous improvement. Manage staffing, scheduling, performance evaluations, and skills development across a 24/7 operation. Cybersecurity & SOC Best Practices Ensure Tier 1 SOC operations follow industry standards such as NIST, CIS controls, and MITRE ATT&CK-based detection workflows. Partner with cybersecurity engineers on tuning SIEM rules, improving alert fidelity, and enhancing threat detection capabilities. Maintain awareness of emerging threats and update SOC processes, escalation procedures, and response documentation accordingly. Validate the accuracy and completeness of ticketing, evidence collection, and escalations. Automation & Process Optimization Identify tasks across NOC and SOC operations that can benefit from automation or orchestration. Collaborate with engineering and security teams to build automation solutions using scripting languages, workflow tools, or SOAR capabilities. Reduce false positives and operational noise by improving monitoring configurations, alert thresholds, and SIEM detection logic. Budget & Resource Management Own and oversee the NOC/SOC operational budget, including staffing, tooling, SIEM licensing, monitoring solutions, and vendor relationships. Forecast costs, track spend, and optimize resource allocation to meet operational and financial goals. Evaluate, justify, and lead procurement for new tools, platforms, or operational enhancements. Practice Growth & Proposal Support Lead initiatives to grow and mature the NOC/SOC practice by identifying opportunities to enhance service offerings, expand capabilities, and improve operational value for customers. Actively participate in proposal capture efforts, including contributing to solution design, operational narratives, technical writing, and staffing or pricing inputs. Partner with sales, product, and marketing teams to support competitive proposals, customer renewals, and expansion opportunities. Represent NOC/SOC operations in customer briefings, demonstrations, and strategy discussions that support business development goals. Service Expansion & Customer Engagement Support sales, product, and marketing teams in presenting NOC/SOC capabilities and value propositions to prospective customers. Contribute to the development of service offerings, packaging, and pricing for managed network and security services. Participate in customer onboarding, technical reviews, and periodic business reviews as an operational subject matter expert. Help drive the growth and maturity of the NOC/SOC practice through strategic improvements and alignment with customer needs. Required Qualifications BA/BS or equivalent 5+ years of experience in network operations, cybersecurity operations, or similar infrastructure roles. 2+ years managing a NOC, SOC, or 24/7 operational team. Strong understanding of network protocols, monitoring tools, SIEM platforms, and incident management processes. Direct experience with SOC operations, including security event triage and industry best practices. Demonstrated ability to manage departmental budgets and optimize operational costs. Hands-on experience implementing automation using scripting languages or orchestration tools. Security Clearance Level: Must possess or be able to obtain and maintain a Top Secret Clearance Location: On-site at GDIT's Integrated Technology Center in Bossier City, LA GDIT IS YOUR PLACEAt GDIT, the mission is our purpose, and our people are at the center of everything we do. Growth: AI-powered career tool that identifies career steps and learning opportunities Support: An internal mobility team focused on helping you achieve your career goals Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off Flexibility: Full-flex work week to own your priorities at work and at home Community: Award-winning culture of innovation and a military-friendly workplace Explore an enterprise IT career at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your desire to drive operations forward. #J-18808-Ljbffr