SOC/NOC Operations Manager

Description:
Hybrid 2 Days Onsite/3 Days Remote in Washington, DC

Our client seeks a SOC/NOC Operations Manager to lead 24x7 cybersecurity and network operations within a complex federal enterprise environment. The manager will oversee security and network monitoring, guide shift-based teams, drive incident response coordination, and ensure performance against defined SLAs and KPIs.

Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $78.00 to $88.00/hr. w2

Responsibilities:

• Lead day-to-day operations of SOC/NOC functions in a 24x7 monitoring environment.
• Manage and coordinate analyst shifts to ensure continuous coverage and operational readiness.
• Oversee incident triage, escalation, and response coordination across security and infrastructure teams.
• Serve as primary liaison between SOC/NOC, incident response, engineering, and infrastructure teams.
• Monitor and improve operational performance metrics and SLA adherence.
• Develop and maintain operational procedures, runbooks, and escalation workflows.
• Provide leadership, coaching, and oversight for Tier 1-3 analysts and operations staff.
• Deliver operational reporting and dashboards to stakeholders and leadership.
• Identify process improvement opportunities to enhance detection, response, and operational efficiency.
• Support compliance with federal cybersecurity frameworks and organizational standards.

Experience Requirements:

• 7+ years in cybersecurity operations, NOC operations, or IT operations.
• 3+ years in a leadership or management role overseeing SOC/NOC teams.
• Demonstrated experience with SOC/NOC oversight, shift coordination, incident triage and escalation, cross-team coordination, and KPI/SLA reporting.
• Strong understanding of incident response lifecycle and operational workflows.
• Experience in 24x7 environments with rotating shifts or global operations.
• Technical environment familiarity preferred: Splunk, Microsoft Sentinel, Microsoft Defender, Rapid7 InsightVM, Veracode, Device42, Xacta, Jira, Confluence, Okta, CyberArk, Entra PIM, AWS, Azure (M365 G5), Appian, Oracle, Intune, Microsoft Purview, and hybrid on-prem/cloud.
• Preferred: experience supporting federal agencies or regulated environments, familiarity with Zero Trust and enterprise monitoring architectures, and certifications such as CISSP, CISM, Security+, and ITIL.
• Soft skills: leadership, clear communication, high-pressure operations, analytical and problem-solving abilities.