SNOC Operations Manager

Infosight, Inc.•Miami Lakes, FL

12d•$85,000 - $110,000•Onsite

About The Position

The SNOC Operations Manager leads and oversees SNOC analysts across all three shifts in a 24/7 Security Operations Center environment. This role is responsible for operational efficiency, consistent performance, and compliance with established procedures. The manager reviews analyst work, leads shift handoffs, monitors service-level performance, and uses operational insights to improve runbooks, detection tuning, and automation. The role reports to the Director of Technology, Innovation & Managed Services. The manager serves as an escalation point for critical service deliverables and security incidents, coordinates response across security and network platforms, and prepares incident, status, and end-of-shift reports for leadership and clients. The role also owns operational documentation and service delivery processes, supports client onboarding and reporting, and helps reconcile contracted services with invoicing and delivered work. The position owns internal production infrastructure and associated maintenance, incident management, root cause analysis, change management, and vulnerability remediation. It also supports analyst development, access control, and department technology and budget planning. The role is based at an on-site SOC in Miami Lakes, Florida, with an assigned shift in a 24x7x365 rotation, on-call duties, and minimal travel for training and conferences. Compensation is $85,000–$110,000 per year.

Requirements

Bachelor's degree in Computer Science or a related field, or equivalent work experience.
At least 3 years of progressive IT engineering experience across vulnerability assessment, incident response, firewall management, and advanced threat protection.
Strong hands-on experience in a SOC or NOC, ideally in an MSSP or multi-tenant environment.
Experience reviewing and hardening network device configurations.
Expert routing and switching knowledge, including BGP, OSPF, and MPLS.
Solid grasp of network-layer security, including firewall policy, ACLs, and segmentation.
Working knowledge of Linux/UNIX and Windows server environments.
Sound judgment under pressure and strong attention to detail and accuracy.
Clear written and verbal communication with technical teams and non-technical client stakeholders.
Ability to follow through, prioritize competing work, and adapt quickly to new technology.
Availability for off-hours support, including a 24x7 on-call rotation.

Nice To Haves

Certifications such as CCNA, CCNA CyberOps, CCNP, CCNP Security, CISSP, Network+, Security+, or equivalent.
Prior shift lead or supervisory experience.
Microsoft Sentinel and KQL experience.
PowerShell or Python scripting for automation.
Familiarity with frameworks clients answer to, including FFIEC, NCUA, HIPAA, CJIS, and NIST CSF.
Interest in AI-assisted security operations and automation.

Responsibilities

Lead shift starts and handoffs, verify attendance, brief incoming teams, and confirm coverage across Day, Mid, Overlap, and Night shifts.
Review shift checklists and tickets for completeness, accuracy, and adherence to standard operating procedures.
Monitor SLA compliance in real time and act to prevent breaches.
Investigate potential violations of operating standards and document determinations.
Prepare end-of-shift reports and tuning briefs for management.
Act as the escalation point for critical service deliverables and security incidents requiring immediate response.
Coordinate containment actions across SIEM, EDR, and network platforms with analysts and engineers.
Generate incident and status reports for internal leadership and clients.
Provide after-hours and weekend support as part of the on-call rotation.
Maintain SNOC and client operational manuals, including runbooks, playbooks, and escalation matrices.
Create and review solutions, resolution templates, and statuses in HaloPSA.
Validate that client reporting deliverables will be completed on time.
Support managed-services onboarding for new clients.
Help reconcile contracts with monthly invoicing and services delivered, and maintain client in-scope asset inventories.
Track trends across monitored environments, gather analyst feedback, and recommend and implement detection and configuration tuning.
Research, test, and deploy automation to improve SNOC efficiency, including AI-assisted triage and scripted remediation.
Analyze fault and capacity trends to advance monitoring toward self-healing.
Own internal production infrastructure, including patching, updates, incident management, root cause analysis, and change management.
Drive remediation of vulnerability audit findings on internal systems.
Help implement and disseminate new processes, such as change management.
Manage team permissions and access according to least-privilege principles.
Identify skills gaps, recommend career-path-aligned training, and help define department technology and budget needs.