SNOC Engineer III

Dyopath; United States; Remote; USD 89,000 - 121,000; Full time

Benefits offered by this job

Life Insurance

401(k) with company match

FSA & HSA options

Pet Insurance

Job summary

DYOPATH is seeking a SNOC Engineer III who thrives on solving complex cyber threats in a fast-paced environment. This remote, first-shift role offers an opportunity to lead investigations, enhance monitoring, and mentor junior engineers.

You will develop runbooks, refine SIEM rules, and collaborate across teams to strengthen detection and response. Relevant experience with SIEM platforms (Microsoft Sentinel, Wazuh) and cloud environments (Azure, AWS) is highly valued.

Qualifications

• Bachelor's degree in Cybersecurity, IT, or related field (or equivalent experience).
• Experience with SIEM and monitoring platforms (e.g., Microsoft Sentinel, Wazuh).
• Strong networking, endpoint protection, identity protection, and cloud experience.
• Experience in threat detection, log analysis, and alert triage.
• Excellent written and verbal communication.
• Experience with detection engineering and automation.

Responsibilities

• Act as technical lead for high-severity incidents.
• Perform advanced threat analysis using SIEM, EDR, identity protection, and network telemetry.
• Investigate complex alerts across endpoint, identity, email, cloud, and network.
• Develop and refine detection capabilities and automated responses.
• Provide escalation support and post-incident documentation.
• Collaborate with teams to implement remediation and risk mitigation.

Skills

Advanced threat detection

SIEM & monitoring

Networking fundamentals

Incident investigation

Leadership in high-severity events

Communication skills

Automation & detection engineering

Education

Bachelor's degree in Cybersecurity/IT or related field

Tools

Microsoft Sentinel

Wazuh

SentinelOne

Azure

AWS

Job description

Are you energized by solving complex challenges and helping protect environments from evolving cyber threats?DYOPATH is looking for a SNOC Engineer III who thrives on advanced problem-solving, technical leadership, and a commitment to operational excellence in a fast-paced operations environment.

Why You'll Love Working Here

• Purpose with Passion – A culture guided by the L.O.V.E. philosophy (Living Our Values Every Day).
• Grow & Thrive – Certification, training, and professional development opportunities.
• Award-Winning Culture – Known for outstanding service internally and externally.
• Teamwork & Respect – A collaborative, uplifting environment where achievements are celebrated.
• Life Insurance
• 401(k) with company match
• FSA & HSA options
• Pet Insurance
• ...and more!
• Full benefits overview available at dyopath.com/careers

Role Overview

• Location: Remote
• Schedule: 1st Shift; Standard Business Hours
• Salary: $105,000 (annually)

Your Mission as a SNOC Engineer III

• Drive continuous improvement within SNOC operations by identifying opportunities to enhance monitoring, response workflows, automation, and operational efficiency.
• Serve as the primary escalation point for complex incidents, providing advanced technical analysis and resolution support to the SNOC engineering team.
• Support the development and maintenance of operational documentation including runbooks, incident response procedures, investigation guides, and knowledge base articles.
• Identify and analyze potential risks, vulnerabilities, and suspicious activity across network, system, endpoint, identity, and cloud environments, recommending remediation actions.
• Assist in strengthening monitoring capabilities by improving detection logic, tuning alerts, and contributing to SIEM analytics rules and automation workflows.
• Provide mentorship and technical guidance to junior SNOC engineers during investigations, troubleshooting, and incident response activities.
• Support compliance initiatives by ensuring operational activities, incident investigations, and response actions are properly documented to support audits and reporting.
• Participate in validation and testing of incident response procedures, disaster recovery plans, and operational readiness exercises.

Operations Responsibilities

• Act as the technical lead for high-severity incidents, coordinating investigation activities and guiding containment, eradication, and recovery efforts.
• Perform advanced threat analysis using SIEM, EDR, identity protection, and network telemetry platforms to identify malicious or suspicious activity.
• Investigate complex alerts and correlated incidents across endpoint, identity, email, cloud, and network platforms.
• Develop and refine detection capabilities including SIEM analytics rules, threat hunting queries, alert enrichment logic, and automated response playbooks.
• Provide escalation support during major incidents, assisting with root cause analysis, containment strategies, and post-incident documentation.
• Collaborate with engineering, infrastructure, and client teams to implement remediation actions and long-term risk mitigation strategies.
• Support onboarding and integration of telemetry from new platforms and technologies into the monitoring environment.
• Ensure investigations, incidents, and operational actions are accurately documented within ticketing and case management systems.

What You Bring to the Team

A successful SNOC Engineer III candidates bring a combination of advanced technical expertise, operational excellence, and strong communication skills.

Education & Certifications

• Bachelor's degree in Cybersecurity, Information Technology, or a related field preferred (or equivalent experience).

Preferred Certifications:

• GIAC (GCIH, GCIA, GCFA)
• CompTIA CySA+ or CASP+
• Microsoft Certified: Azure Security Engineer Associate
• AWS Certified Specialty
• Cisco CCNP or equivalent

Experience & Skills

• Advanced knowledge of operations, incident investigation, and threat detection methodologies.
• Experience with SIEM and monitoring platforms such as Microsoft Sentinel, Wazuh, SentinelOne, or similar technologies.
• Strong understanding of networking fundamentals, endpoint protection, identity protection, and cloud environments (Azure, AWS, or similar).
• Experience performing advanced log analysis, threat hunting, and alert triage across multiple telemetry sources.
• Ability to troubleshoot complex issues and provide leadership during high-severity operational events.
• Strong written and verbal communication skills for both internal operational documentation and client-facing discussions.
• Experience improving monitoring through detection engineering, alert tuning, and automation.
• Familiarity with frameworks, compliance standards, and operational best practices.

Why This Role Rocks

As a SNOC Engineer III, you won't just respond to threats. You'll help shape DYOPATH's operational maturity. You'll lead advanced investigations, engineer better detection capabilities, mentor teammates, and make a direct impact on protecting client environments. You'll grow your expertise while contributing to a team that values collaboration, curiosity, and continuous improvement.

Equal Opportunity Employer

DYOPATH is committed to a work environment free of all forms of discrimination. DYOPATH recruits and hires without regard to age, color, disability, gender, gender identity, genetic information, marital status, military status, national origin, race, religion, sexual orientation, veteran status, or any other legally protected characteristic. For more information about DYOPATH, please visit our website at www.dyopath.com . The above information has been designed to indicate the general nature and level of work performed by employees in this classification. It is not designed to contain or to be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of the employee assigned to this job.