SOC/NOC Engineer - Lead - Shift Work
Core
Provide technical leadership for a 24/7 managed operations center responsible for the security, stability, and availability of clients' large-scale Azure and Microsoft 365 environments.
Role type
Senior IC SOC/NOC Lead
Builds
Production security monitoring, alerting, and incident response capabilities for Azure and Microsoft 365 environments
Domain
Cybersecurity operations / Cloud Infrastructure (Azure, Microsoft 365)
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Azure management, Microsoft 365 administration, SIEM configuration, incident response leadership, team mentorship, automation, compliance auditing, runbook development, shift management
Preferred skills
Advanced Microsoft security certifications (SC-200, AZ-500, AZ-104, CySA+), forensics skills, deep familiarity with Microsoft Sentinel and Defender suite, Infrastructure as Code (ARM, Terraform), scripting (PowerShell, KQL), MSP experience
Technologies
Microsoft Sentinel, Microsoft Defender, Azure Monitor, Azure Automation, Azure Backup, Azure Security Center, Azure Update Manager, ARM, Terraform, PowerShell, KQL
Responsibilities
Serve as senior escalation point for complex security and infrastructure issues; mentor SOC and NOC engineers; design and maintain SIEM, monitoring, and alerting capabilities; lead incident response for high-severity events; develop and maintain runbooks, playbooks, and reporting templates; drive automation and innovation; participate in audit, compliance, and ATO support; establish operational best practices; lead shift coverage planning
Seniority
Senior, hands-on IC with leadership responsibilities