> Markdown version of [/jobs/ext/4544160-it-security-soc-operations-lead](https://www.wearedevelopers.com/jobs/ext/4544160-it-security-soc-operations-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security & SOC Operations Lead

- **Company:** WorkNovas LLC
- **Location:** Miami, FL, United States
- **Experience:** Expert
- **Contract:** Franchise
- **Skills:** Active Directory, Microsoft Azure, Cyber Security, System Configuration, Information Technology Operations, PCI Data Security Standards, Azure Active Directory, Security Assertion Markup Language (SAML), Systems Integration, Okta
- **Published:** November 3, 2026
- **Apply:** https://www.thejobnetwork.com/job/d8ef5d41-d8b1-4e16-a417-9eee35fbeccd/it-security-soc-operations-lead

## About the Role

* 5+ years in security/IT operations or security engineering for a multi-unit retail or restaurant environment under PCI-DSS/SOX regulation, with hands-on experience administering enterprise security tooling, identity/access controls, security monitoring, integrations, and vendor relationships
 * Hands-on experience with Microsoft Entra ID / Active Directory and preferably Okta, PAM, EDR/XDR, email security, DLP/DSPM, and related security platform
 * Experience supporting a franchise or multi-brand corporate structure with a dual-domain identity footprint (an acquired subsidiary retaining its own AD/Azure tenant alongside the parent company's) is a strong plus.
 * Hands-on experience operating or onboarding a modern SOC/XDR or managed SOC service, preferably CrowdStrike Falcon or ReliaQuest GreyMatter
 * Administer Okta and Microsoft Entra ID / Active Directory identity, MFA policy exceptions, and SAML-based federated access

## Description

* Own, administer, maintain and continuously improve enterprise cybersecurity tooling, including CrowdStrike, Proofpoint, Varonis and related security platforms
 * Manage platform configuration, integrations, policies, detection rules, workflows, upgrades, licensing and vendor support
 * Coordinate PCI-DSS annual re-validation and weekly SOX log reporting
 * Operationally monitor and triage security alerts and events generated by enterprise cyber tooling
 * CISSP, Security+, or other relevant industry-recognized security certifications are preferred but not required

https://job.goodword.io/JobLanding/JobId=d8ef5d41-d8b1-4e16-a417-9eee35fbeccd?trafficsourceid=0
external