Note: The job is a remote job and is open to candidates in USA. World Wide Technology is a technology solutions company providing cybersecurity, cloud, infrastructure, and digital services. The SOC Team Lead manages third-shift SOC analysts and oversees security monitoring, detection engineering, threat hunting, incident response governance, and operational execution. The role also focuses on analyst development, process improvement, audit-ready documentation, and coordination with cross-functional security and technology teams.
Responsibilities
- Lead a team of SOC analysts as their direct manager, including coaching, performance management, and career development
- Own shift coverage, scheduling, and escalation readiness so the SOC maintains consistent quality across the shift's hours
- Develop analysts through mentorship and reinforcement of structured, evidence-based investigation practices
- Own day-to-day SOC execution: queue health, triage consistency, escalation discipline, and documentation quality
- Set and reinforce expectations for how alerts, investigations, and incidents are handled across the team
- Identify and resolve workflow inefficiencies that slow response or create friction for analysts
- Turn recurring pain points into measurable process, automation, or documentation improvements
- Set detection engineering priorities based on threat intelligence, control gaps, incident learnings, and monitoring weaknesses
- Oversee tuning across SIEM, SOAR, EDR, NDR, and log analytics platforms to improve fidelity and reduce noise
- Ensure new detections, use cases, behavioral analytics, and ATT&CK-aligned content are actionable and fit SOC workflows
- Partner with platform owners and engineering teams to improve telemetry quality and close detection gaps
- Feed hunt findings, incident patterns, and control observations back into the detection pipeline
- Ensure incidents are identified, tracked, escalated, and reported per established incident management procedures
- Reinforce severity-based response expectations, communications requirements, and required response artifacts across the incident lifecycle
- Ensure investigation timelines, decisions, evidence, and outcomes are documented clearly and defensibly
- Coordinate with leadership and partner teams during higher-severity incidents and retrospectives
- Operationalize audit log review, logging-failure escalation, and incident reporting obligations
- Coordinate with GRC, IAM, Infrastructure, Cloud, AppSec, Vulnerability Management, and other partner teams during investigations, follow-up, and control improvement
- Clarify ownership boundaries and keep handoffs timely and documented
- Translate SOC findings into remediation guidance and actionable follow-up for partner teams
- Support policy, audit, and leadership discussions with accurate operational context
Skills
- 5+ years in SOC operations, detection engineering, threat hunting, incident response, or related operational security work, including 2+ years in a lead, senior, or team-coordination capacity
- Demonstrated ability to balance security principles with business realities in a risk-managed environment
- Hands-on experience across incident response, security operations, and security initiatives
- Strong background in SOC operations, detection engineering, threat hunting, or cyber threat intelligence
- Experience improving operational workflows, guiding analysts, and driving outcomes through process and technical maturity
- Strong written and verbal communication, with an emphasis on repeatable, audit-ready documentation
- Bachelor's degree in computer science, information security, or equivalent experience and certifications
- Must be comfortable supporting 3rd shift and on-call hours
- 3rd shift schedule, Monday - Friday, from 12:00 AM to 9:00 AM CT
- Applicants must be authorized to work in the United States. We are unable to provide sponsorship for this position
- Experience owning or shaping SOPs, SLAs, runbooks, or incident governance processes
- Experience operating in environments with formal audit and compliance requirements
- Experience driving cross-team alignment through RACI models, scope boundaries, or operational ownership frameworks
Benefits
- Health (Medical & Prescription), Dental, and Vision Care for all full-time employees
- Onsite Health Centers (MO & IL) for all full-time employees
- Employee Assistance Program for all full-time employees
- Wellness program for all full-time employees
- Profit Sharing for all full-time employees
- 401k Plan with Company Matching for all full-time employees
- Life and Disability Insurance for all full-time employees
- Flexible Spending Accounts for all full-time employees
- Tuition Reimbursement for all full-time employees
- PTO & Holidays for all full-time employees
- Parental Leave for all full-time employees
- Medical Leave for all full-time employees
- Military Leave for all full-time employees
- Bereavement leave for all full-time employees
- Day of Caring for all full-time employees
- Family Planning Benefits for all full-time employees
- Nursing Mothers Benefits for all full-time employees
- Voluntary Legal coverage for all full-time employees
- Voluntary Supplemental Accident/Illness/Hospital coverage for all full-time employees
- Voluntary ID Theft coverage for all full-time employees
- Pet Insurance for all full-time employees
- Employee Discount Program for all full-time employees
Company Overview