Lead SOC/NOC Engineer - Azure & Microsoft 365

AIS (Applied Information Sciences); Virginia (IL); On-site; USD 120,000 - 181,000; Full time

Job summary

Blending deep security operations with network and infrastructure operations, you will set the standard for operational excellence, drive automation, and advise clients on strengthening their security posture and resilience. Willingness to work off hours and on-call rotations is required.

Qualifications

• 7+ years in security ops, network/infrastructure, and/or systems engineering with Azure and M365.
• Experience leading or mentoring engineers within a SOC/NOC.
• Hands-on SIEM configuration and diverse SOC/NOC tools.
• Willingness to participate in on-call rotations and off-hours maintenance.
• CompTIA Security+ certification and U.S. citizenship.

Responsibilities

• Serve as senior escalation point for complex security and infrastructure issues across Azure and M365.
• Mentor SOC and NOC engineers and support their ongoing development.
• Own design, configuration, and maintenance of SIEM, monitoring, and alerting capabilities.
• Build dashboards and monitoring tools to gauge security and health of components.
• Lead incident response for high-severity events and coordinate post-incident reviews.
• Develop runbooks, playbooks, and templates; improve them with feedback.
• Drive automation to improve efficiency of security and operations.
• Support audit, accreditation, and ATO activities and remediate gaps.
• Collaborate with clients, vendors, and third parties to enhance security posture.
• Establish patching, backup, DR, and change-management best practices.
• Provide clear documentation of operational procedures.
• Lead shift coverage planning and participate in on-call rotations.

Skills

Security operations

SOC/NOC leadership

SIEM configuration

Azure & M365

Incident response

Communication skills

On-call readiness

CompTIA Security+

U.S. citizenship

Tools

Microsoft Sentinel

Microsoft Defender

Azure Monitor

Azure Security Center

Azure Automation

Terraform

PowerShell

Job description

Blending deep security operations with network and infrastructure operations, you will set the standard for operational excellence, drive automation, and advise clients on strengthening their security posture and resilience. Willingness to work off hours and on-call rotations is required.