SNOC Operations Manager

Infosight, Inc.; Florida; On-site; USD 85,000 - 110,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Employee discounts

Health insurance

Paid time off

Tuition assistance

Vision insurance

Job summary

InfoSight, Inc. is seeking a SNOC Operations Manager to lead analysts across three shifts in a 24/7 SOC. You will oversee runbooks, tuning, automation, and incident response, reporting to the Director of Technology, Innovation & Managed Services.

This role emphasizes shift leadership, SOP adherence, and client service delivery. You will drive detection tuning, manage internal infrastructure, and collaborate on change management while supporting on-call rotations and on-site operations in Miami

Qualifications

• Bachelor’s degree or equivalent work experience in a technical field.
• 3+ years of progressive IT engineering experience in vulnerability assessment, incident response, firewall management, and threat protection.
• Strong SOC/NOC experience, preferably MSSP or multi-tenant.

Responsibilities

• Lead SNOC analysts across 24/7 shifts and ensure SOP compliance.
• Review shift checklists and tickets for accuracy and completeness.
• Monitor SLA compliance and act before breaches.
• Coordinate containment actions across SIEM/EDR and network platforms.
• Produce EOS reports and tuning briefs for management.
• Serve as escalation point for critical incidents and reporting to leadership.
• Maintain client-runbooks, playbooks, and escalation matrices.
• Roll out automation to improve SNOC efficiency and self-healing monitoring.
• Own internal production infrastructure and change management.

Skills

Communication

Attention to detail

Prioritization

On-call availability

Leadership

Education

Bachelor’s degree in Computer Science or related field

Tools

HaloPSA

Microsoft Sentinel

KQL

PowerShell

Python scripting

Job description

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Employee discounts
• Health insurance
• Paid time off
• Tuition assistance
• Vision insurance

SNOC Operations Manager

The role

The SNOC Operations Manager is the operational owner and responsible for leading and overseeing SNOC analysts across all three shifts in a 24/7 Security Operations Center (SOC) environment, ensuring operational efficiency, consistent performance, and adherence to established procedures.

You lead by example, review analysts' work for accuracy and SOP compliance, and turn insights from daily operations into improved runbooks, tuning, and automation. You report to the Director of Technology, Innovation & Managed Services.

What you'll do

Shift leadership and quality

• Run shift start and handoff: verify attendance, brief the incoming team, and confirm coverage across our Day, Mid, Overlap and Night shifts
• Review shift checklists and tickets closed on prior and current shifts for completeness, accuracy and SOP adherence
• Monitor SLA compliance in real time and act before a breach, not after
• Investigate potential violations of operating standards and document determinations
• Produce the End-of-Shift (EOS) report and tuning briefs for management

Incident response and escalation

• Serve as the escalation point for critical service deliverables and security incidents that need immediate response
• Coordinate containment actions across SIEM, EDR and network platforms with analysts and engineers
• Generate incident and status reports for internal leadership and clients
• Provide after-hours and weekend support as part of the on-call rotation

Service delivery and client operations

• Maintain SNOC and client operational manuals: runbooks, playbooks and escalation matrices
• Create and review solutions, resolution templates and statuses in HaloPSA
• Validate that client reporting deliverables will be met on time
• Support managed services onboarding for new clients
• Help reconcile contracts to invoicing and services delivered each month, and maintain client in-scope asset inventories

Detection tuning and automation

• Track trends across monitored environments, collect analyst feedback, and recommend and implement detection and configuration tuning
• Research, test and roll out automation that raises SNOC efficiency, including AI-assisted triage and scripted remediation
• Mature monitoring toward self-healing by analyzing fault and capacity trends

Infrastructure and process ownership

• Own internal production infrastructure: patching, updates, incident management, root cause analysis and change management
• Drive remediation of vulnerability audit findings on internal systems
• Help implement and disseminate new processes, such as change management
• Manage team permissions and access following least-privilege principles
• Identify gaps, recommend training aligned to career paths, and help define department technology and budget needs

What you bring

• Bachelor's degree in Computer Science or a related field, or equivalent work experience
• 3+ years of progressive IT engineering experience across vulnerability assessment, incident response, firewall management and advanced threat protection
• Strong hands-on experience in a SOC or NOC, ideally in an MSSP or multi-tenant environment
• Experience reviewing and hardening network device configurations
• Expert routing and switching knowledge: BGP, OSPF, MPLS
• Solid grasp of network-layer security: firewall policy, ACLs, segmentation
• Working knowledge of Linux/UNIX and Windows server environments
• Sound judgment under pressure, with strong attention to detail and accuracy
• Clear written and verbal communication with both technical teams and non-technical client stakeholders
• Ability to follow through, prioritize competing work and adapt quickly to new technology
• Availability for off-hours support, including 24x7 on-call rotation

Nice to have

• Certifications: CCNA, CCNA CyberOps, CCNP, CCNP Security, CISSP, Network+, Security+ or equivalent
• Prior shift lead or supervisory experience
• Microsoft Sentinel and KQL experience
• PowerShell or Python scripting for automation
• Familiarity with frameworks our clients answer to: FFIEC, NCUA, HIPAA, CJIS, NIST CSF
• Interest in AI-assisted security operations and automation

Schedule, location and how to apply

• Location: Miami Lakes, FL (on-site SOC)
• Type: Full-time
• Schedule: Assigned shift within our 24x7x365 rotation, plus on-call
• Travel: Minimal (training and conferences)
• Compensation: 85 -110k yearly