Network Operations Center Lead - Security Operations

Position Overview

We are seeking a Network Operations Center (NOC) Lead for Security Engineering to lead daily network monitoring and operations while strengthening the security and resilience of our infrastructure. This hands-on technical leader will guide NOC personnel, coordinate incident response and service restoration, and partner with Security Engineering to implement and maintain network security controls. The ideal candidate combines strong network troubleshooting and security engineering skills with the ability to coach a team, prioritize operational risk, and communicate clearly during incidents.

Key Responsibilities

• Lead daily NOC operations, prioritize alerts and tickets, coordinate work assignments, coach NOC personnel, review ticket quality, and maintain clear escalation paths and shift handoffs.
• Monitor network availability, performance, capacity, and security telemetry; investigate anomalies and restore services within established service targets.
• Serve as the technical escalation point for complex connectivity issues involving routing, switching, DNS, VPNs, wireless networks, and firewalls.
• Partner with Security Engineering to implement and maintain firewalls, network segmentation, secure remote access, and intrusion detection and prevention controls.
• Coordinate with security operations and incident response teams to triage suspected security incidents, preserve relevant logs, and execute approved containment and recovery actions.
• Lead major incident coordination, provide timely stakeholder updates, drive root cause analysis and corrective actions, and report on service availability, restoration times, recurring incidents, and remediation progress.
• Oversee approved network changes, patching, vulnerability remediation, configuration backups, and recovery validation with appropriate testing and rollback plans.
• Maintain monitoring coverage, tune alerts, automate routine operational tasks, and keep network diagrams, asset records, runbooks, and procedures current.