{"id":943876,"url":"https://alion.io/job/metrostar-sr-cyber-operations-engineer-iii-nocsoc","title":"Sr. Cyber Operations Engineer III (NOC/SOC)","company":{"id":678241,"name":"MetroStar","domain":"metrostar.com","url":"https://alion.io/company/metrostar-2","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":88,"open_postings":16,"ghost_share":0,"stale_share":0.625,"repost_share":0.063,"time_to_fill_p50_days":20,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States","Arlington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":180000,"max":220000,"currency":"USD","period":"year","gross":null,"usd_annual":220000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"DNS","optional":false},{"name":"Incident Management","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false}],"status":"live","first_seen_at":"2026-08-14T18:41:04Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-10-29T02:50:16Z","board_verified":true,"closed_at":null,"days_open":75,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":75},"description":"As Sr. Cyber Operations Engineer III (NOC/SOC), you’ll help strengthen the reliability and security of complex enterprise environments. You will bring together network operations, security operations, monitoring, automation, and incident response to improve situational awareness and operational resilience.\nWe know that you can’t have great technology services without amazing people. At MetroStar, we are obsessed with our people and have led a two-decade legacy of building the best and brightest teams. Because we know our future relies on our deep understanding and relentless focus on our people, we live by our mission: A passion for our people. Value for our customers.\nIf you think you can see yourself delivering our mission and pursuing our goals with us, then check out the job description below!\nWhat you’ll do:\nIntegrated Operations: Support the design, implementation, and continuous improvement of integrated Network Operations Center (NOC) and Security Operations Center (SOC) capabilities that provide centralized visibility into enterprise infrastructure, networks, cloud environments, endpoints, applications, and cybersecurity events.\nMonitoring & Observability: Implement and optimize enterprise monitoring using Microsoft Sentinel, Azure Monitor, Log Analytics, Microsoft Defender, and other network and security monitoring platforms to provide real-time visibility into system health, availability, performance, and security.\nSecurity Monitoring & Threat Detection: Develop and tune security monitoring, correlation rules, alerts, dashboards, and threat detection capabilities to identify suspicious activity, vulnerabilities, indicators of compromise, and potential cybersecurity incidents.\nNetwork Operations: Monitor enterprise network availability, connectivity, utilization, latency, and performance while identifying and resolving issues affecting critical systems and services.\nIncident Management: Lead technical investigation, triage, escalation, coordination, and resolution of network, infrastructure, cloud, and cybersecurity incidents while ensuring incidents are appropriately documented and communicated.\nSIEM & Security Tooling: Configure and optimize Security Information and Event Management (SIEM), endpoint detection and response (EDR), network monitoring, vulnerability management, and security analytics platforms to improve operational awareness and threat detection.\nAutomation & Orchestration: Develop automated workflows, scripts, playbooks, and Security Orchestration, Automation, and Response (SOAR) capabilities using PowerShell, Python, Azure Logic Apps, or similar technologies to accelerate detection, response, remediation, and operational workflows.\nOperational Processes: Develop and maintain NOC/SOC standard operating procedures, incident response playbooks, escalation procedures, operational runbooks, and knowledge management documentation.\nPerformance & Reporting: Develop operational dashboards, KPIs, SLA metrics, incident trends, availability reports, and security metrics to measure NOC/SOC effectiveness and identify opportunities for continuous improvement.\nStakeholder Collaboration: Work closely with client stakeholders, cybersecurity teams, network engineers, cloud engineers, system administrators, application teams, and leadership to maintain enterprise situational awareness and rapidly resolve operational and security issues.\nWhat you’ll need to succeed:\nActive Top Secret security clearance.\nBachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical discipline.\n10+ years of experience in network operations, cybersecurity operations, infrastructure operations, systems engineering, or related technical roles.\n5+ years of experience supporting enterprise NOC, SOC, or integrated network/security operations environments.\nStrong experience with Microsoft Sentinel, Microsoft Defender, Azure Monitor, Log Analytics, or comparable SIEM, security monitoring, and observability technologies.\nHands-on experience with network monitoring, SIEM, EDR/XDR, vulnerability management, incident management, and enterprise observability platforms.\nStrong understanding of TCP/IP, DNS, routing, firewalls, VPNs, load balancing, network segmentation, and enterprise network architectures.\nExperience monitoring and troubleshooting Microsoft Azure, hybrid cloud, on-premises infrastructure, networks, applications, and security services.\nExperience developing detection rules, dashboards, alerts, automated response workflows, operational runbooks, and incident response playbooks.\nProficiency with PowerShell, Python, Kusto Query Language (KQL), or similar scripting/query languages used for operations and security automation.\nExperience supporting large enterprise, public sector, or regulated environments and familiarity with NIST RMF, applicable security baselines, compliance requirements, and incident reporting processes.\nCISSP, CySA+, GIAC, Microsoft Security, Azure, or equivalent certifications\nStrong troubleshooting, analytical, communication, and incident management skills with the ability to operate effectively during high-priority operational or cybersecurity events.\nSALARY RANGE: $180,000.00 - $220,000.00\nThe salary range for this position is determined based on qualifications, skills, and relevant experience. The final salary offered will be determined based on several factors including: \nThe candidate's professional background and relevant work experience\nThe specific responsibilities of the role and organizational needs\nInternal equity and alignment with current team compensation\nThis role is also eligible for additional compensation, subject to the terms and policies of MetroStar, which may include:\nPerformance-based bonuses\nCompany-paid training and/or certifications\nReferral bonuses\nApplication Deadline: Applications will be accepted on a rolling basis until the position is filled; candidates are encouraged to apply as early as possible for full consideration.\nAdditional Compensation: This role may also be eligible for bonuses and/or additional incentives based on individual and company performance.\nBenefits: All full-time employees are eligible to participate in our benefits programs:\nHealth, dental, and vision insurance\n401(k) retirement plan with company match\nPaid time off (PTO) and holidays\nParental Leave and dependent care\nFlexible work arrangements\nProfessional development opportunities\nEmployee assistance and wellness programs\nLike we said, we are big fans of our people. That’s why we offer a generous benefits package, professional growth, and valuable time to recharge. Learn more about our company culture code and benefits. Plus, check out our accolades.\nCommitment to Non-Discrimination\nAll qualified applicants will receive consideration for employment based on merit and without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.\n What we want you to know:\nIn compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.\n Not ready to apply now? \nSign up to join our newsletter here.","description_format":"text","description_chars":7594,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity","Flexible schedule","Parental leave","Professional development","Retirement plans","Vision insurance","Wellness"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Digital Government","Security Operations","AI Consulting & Integration"],"lifecycle":[{"event":"open","at":"2026-09-15T19:43:27Z"}],"visa":[],"liveness":{"score":8,"band":"cold","label":"Long shot","p_open":1,"p_active":0.294,"p_room":0.28,"age_days":74,"expected_fill_days":20,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-10-28T05:59:10Z"},"pay":{"stated_usd_annual":220000,"is_top_pay":true},"html_url":"https://alion.io/job/metrostar-sr-cyber-operations-engineer-iii-nocsoc","json_url":"https://alion.io/job/metrostar-sr-cyber-operations-engineer-iii-nocsoc.json","meta":{"generated_at":"2026-10-29T02:54:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4392,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":678241},"rest":"https://alion.io/mcp/rest/get_company?id=678241"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmetrostar-sr-cyber-operations-engineer-iii-nocsoc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmetrostar-sr-cyber-operations-engineer-iii-nocsoc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmetrostar-sr-cyber-operations-engineer-iii-nocsoc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/metrostar-sr-cyber-operations-engineer-iii-nocsoc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmetrostar-sr-cyber-operations-engineer-iii-nocsoc"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":943876}},{"tool":"search_jobs","arguments":{"company":"metrostar.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":943876},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}