SNOC Engineer III

Are you energized by solving complex challenges and helping protect environments from evolving cyber threats? DYOPATH is looking for a SNOC Engineer III who thrives on advanced problem-solving, technical leadership, and a commitment to operational excellence in a fast-paced operations environment.

Why You'll Love Working Here

• Purpose with Passion – A culture guided by the L.O.V.E. philosophy (Living Our Values Every Day).
• Grow & Thrive – Certification, training, and professional development opportunities.
• Award-Winning Culture – Known for outstanding service internally and externally.
• Teamwork & Respect – A collaborative, uplifting environment where achievements are celebrated.

Benefits

• Medical, Dental & Vision Coverage
• Life Insurance
• 401(k) with company match
• "You Pick a Day" paid holiday
• FSA & HSA options
• Pet Insurance
• ...and more!
• Full benefits overview available at dyopath.com/careers

Role Overview

• Location: Remote
• Schedule: 1st Shift; Standard Business Hours 
• Salary: $105,000 (annually) 

Your Mission as a SNOC Engineer III

• Drive continuous improvement within SNOC operations by identifying opportunities to enhance monitoring, response workflows, automation, and operational efficiency.
• Serve as the primary escalation point for complex incidents, providing advanced technical analysis and resolution support to the SNOC engineering team.
• Support the development and maintenance of operational documentation including runbooks, incident response procedures, investigation guides, and knowledge base articles.
• Identify and analyze potential risks, vulnerabilities, and suspicious activity across network, system, endpoint, identity, and cloud environments, recommending remediation actions.
• Assist in strengthening monitoring capabilities by improving detection logic, tuning alerts, and contributing to SIEM analytics rules and automation workflows.
• Provide mentorship and technical guidance to junior SNOC engineers during investigations, troubleshooting, and incident response activities.
• Support compliance initiatives by ensuring operational activities, incident investigations, and response actions are properly documented to support audits and reporting.
• Participate in validation and testing of incident response procedures, disaster recovery plans, and operational readiness exercises.

Operations Responsibilities

• Act as the technical lead for high-severity incidents, coordinating investigation activities and guiding containment, eradication, and recovery efforts.
• Perform advanced threat analysis using SIEM, EDR, identity protection, and network telemetry platforms to identify malicious or suspicious activity.
• Investigate complex alerts and correlated incidents across endpoint, identity, email, cloud, and network platforms.
• Develop and refine detection capabilities including SIEM analytics rules, threat hunting queries, alert enrichment logic, and automated response playbooks.
• Provide escalation support during major incidents, assisting with root cause analysis, containment strategies, and post-incident documentation.
• Collaborate with engineering, infrastructure, and client teams to implement remediation actions and long-term risk mitigation strategies.
• Support onboarding and integration of telemetry from new platforms and technologies into the monitoring environment.
• Ensure investigations, incidents, and operational actions are accurately documented within ticketing and case management systems.

What You Bring to the Team

Education & Certifications

• Bachelor's degree in Cybersecurity, Information Technology, or a related field preferred (or equivalent experience).

Preferred Certifications:

• GIAC (GCIH, GCIA, GCFA)
• CompTIA CySA+ or CASP+
• Microsoft Certified: Azure Security Engineer Associate
• AWS Certified Specialty
• Cisco CCNP or equivalent

Experience & Skills

• Advanced knowledge of operations, incident investigation, and threat detection methodologies.
• Experience with SIEM and monitoring platforms such as Microsoft Sentinel, Wazuh, SentinelOne, or similar technologies.
• Strong understanding of networking fundamentals, endpoint protection, identity protection, and cloud environments (Azure, AWS, or similar).
• Experience performing advanced log analysis, threat hunting, and alert triage across multiple telemetry sources.
• Ability to troubleshoot complex issues and provide leadership during high-severity operational events.
• Strong written and verbal communication skills for both internal operational documentation and client-facing discussions.
• Experience improving monitoring through detection engineering, alert tuning, and automation.
• Familiarity with frameworks, compliance standards, and operational best practices.

Why This Role Rocks

As a SNOC Engineer III, you won't just respond to threats. You'll help shape DYOPATH's operational maturity. You'll lead advanced investigations, engineer better detection capabilities, mentor teammates, and make a direct impact on protecting client environments. You'll grow your expertise while contributing to a team that values collaboration, curiosity, and continuous improvement.