> Markdown version of [/jobs/ext/2126277-soc-noc-engineer-lead-shift-work](https://www.wearedevelopers.com/jobs/ext/2126277-soc-noc-engineer-lead-shift-work). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SOC/NOC Engineer - Lead - Shift Work - **Company:** Applied Information Sciences, Inc. - **Location:** Reston, VA, United States - **Experience:** Expert - **Salary:** $120,000.0 - $181,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Systems Engineering, Microsoft Azure, CompTIA Security+, Cyber Security, Disaster Recovery, Monitoring of Systems, Microsoft Security Essentials, Virtual Desktops, Windows PowerShell, Phishing, Kusto Query Language, Security Information and Event Management, Backup and Restore, Azure Automation, Scripting, Cloud Monitoring, Azure Security Center, Microsoft Sentinel, Terraform - **Published:** August 19, 2026 - **Apply:** https://jobs.localjobnetwork.com/apply/add/88077449/1 ## About the Role * 7+ years of experience in security operations, network and infrastructure operations, and/or systems engineering, including operating Microsoft Azure and Microsoft 365 platforms. * Demonstrated experience leading or mentoring engineers within a SOC, NOC, or converged operations center. * Deep, hands-on experience with SIEM configuration and maintenance and a variety of SOC/NOC engineering and administration tools. * Strong experience managing Azure subscriptions and resources acrosscompute, storage, networking, and identity. * Proven ability to lead incident response and resolve fast-moving threats such as malware, phishing, and active vulnerabilities. * Strong engineering analysis, troubleshooting, and communication skills, including client-facing consulting ability. * Willingness to serve as senior escalation,participatein an on-call rotation, and perform off-hoursmaintenance as needed. * CompTIA Security+ certification * U.S. citizenship and the ability to pass client background checks. Preferred Qualifications * Advanced Microsoft security and cloud certifications such as SC-200, AZ-500, AZ-104, orCySA+. * Advancedforensicsskills to evaluate current malware and phishing threats. * Deep familiarity with Microsoft Sentinel and the Microsoft Defender suite. * Experience with operations tooling such as Azure Monitor, Azure Automation, Azure Backup, Azure Security Center, and Azure Update Manager, applied to IaaS and PaaS services (VMs, ASE, AKS, Azure Virtual Desktop, etc.). * Experience with automation and Infrastructure as Code (ARM, Terraform) and scripting (PowerShell, KQL). * Experience supporting security audits, accreditation, and ATO processes in regulated or government environments. * Experience in a managed services provider (MSP) or 24/7 enterprise operations environment. ## Description At AIS, we are dedicated to providing our employees with diverse opportunities to grow their careers while supporting a variety of impactful projects. For this position, we are seeking a talented individual to join AIS as a Lead Security Engineer. * Core Knowledge & Skills: Develops strategic security plans, applies advanced cryptography, manages security programs, and designs secure cloud architectures. * Work & Complexity: Leads strategic projects, integrates security into business processes, develops risk management strategies, and ensures compliance. * Quality & Independence: Delivers strategic projects, develops innovative solutions, maintains high standards, and ensures stakeholder satisfaction. * Teamwork & Communication: Leads and mentors teams, aligns efforts with organizational goals, manages performance, and develops training programs. * Consulting & Engagement: Provides high-level consulting, leads innovation initiatives, develops technology roadmaps, and manages vendor contracts. As your initial project assignment, you will support the unique needs of our client as a SOC/NOC Engineer - Lead - Shift Work. Job Summary As a Lead SOC/NOC Engineer, you will provide technical leadership for a 24/7 managed operations center responsible for the security, stability, and availability of our clients' large-scale Azure and Microsoft 365 environments. You will serve as the senior point of escalation for complex security and infrastructure issues, mentorSOCand NOC engineers, and own the design and continuous improvement of monitoring, alerting, and incident response capabilities. Blending deep security operations (SOC)expertisewith network and infrastructure operations (NOC) experience, you will set the standard for operational excellence, drive automation and efficiency, and act as a trusted advisor to clients on strengthening their security posture and operational resilience. Willingness to work off hours shifts to help a team cover 24x7x365 SLAs, including 4p-12a m-f and/or 12 hour shifts on Sat-Sun and holidays plus two day shifts per week. Willingness to be on call and swap shifts to cover for planned and unplanned absences of teammates. Key Responsibilities * Serve as the senior point of escalation for challenging and complex security and infrastructure issue resolution across Azure and Microsoft 365 environments. * Provide technical leadership, mentorship, and guidance to SOC and NOC engineers, and support their ongoing training and development. * Own the design, configuration, and maintenance of SIEM, monitoring, and alerting capabilities (e.g., Microsoft Sentinel, Microsoft Defender, Azure Monitor) to ensure rapid detection and response. * Build and refine comprehensive security and infrastructure dashboards, alerts, and monitoring tools to gauge the operational security and health of system components. * Lead incident response for high-severity security events and major infrastructure outages, coordinating across teams through resolution and post-incident review. * Develop andmaintainrunbooks, playbooks, procedures, and reporting templates, andestablishfeedback loops that continuously improve them. * Drive automation and innovation to improve the efficiency of security and infrastructure operations activities. * Participate in and lead audit, compliance, accreditation, and authority-to-operate (ATO) support activities, ensuring gaps in coverage areidentifiedand remediated. * Partner with client stakeholders, vendors, and third parties to enhance overall security posture and operational maturity within the managed environment. * Establish and enforce operational best practices, including patching, backup and restore, disaster recovery, and change management processes. * Provide clear, thorough written documentation for the operational procedures of the environments we support. * Lead shift coverage planning andparticipatein an on-call rotation to ensure continuous24x7operationalSLAs., Join a dedicated team supporting mission-critical operations for our clients. Ifyou'rea seasoned operations leader passionate about building world-class security and infrastructure operations, we encourage you to apply. ## Related Videos - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Skynet wants your Passwords! The Role of AI in Automating Social Engineering](https://www.wearedevelopers.com/videos/770-skynet-wants-your-passwords-the-role-of-ai-in-automating-social-engineering) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)