SOC Analyst
Free to start · No card · 5 credits the moment you sign up
Job description
This is a remote position.
Our client is looking for a SOC Analyst to join their IT department and oversee security operations across their endpoints, cloud systems, and identity infrastructure. They are a prominent full-service legal practice that has recently been recognized among the top employers in their region for workplace excellence and continued organizational growth. Reporting to the IT Director, this hands-on operator will serve as the central point of contact for cybersecurity, collaborating closely with a Managed Security Service Provider (MSSP) and internal IT personnel to validate alerts, contain threats, drive tickets to closure, and strengthen security policies and controls.
Responsibilities
- Monitor, triage, and respond to security alerts generated by the MSSP, XDR platforms (including SentinelOne and Windows Defender), and additional security tools across endpoints, identity, and cloud systems.
- Quickly validate security detections by distinguishing between false positives and true positives, assessing the scope of impact, and thoroughly documenting all supporting evidence.
- Take full end-to-end ownership of security tickets by categorizing, prioritizing, escalating as needed, and driving issues to complete closure with clear timelines and detailed notes.
- Coordinate threat containment measures with the internal IT team—such as isolating endpoints, executing account actions, and blocking malicious indicators—in alignment with established incident response procedures and severity guidelines.
- Strengthen security configurations within Microsoft 365 and endpoint detection and response (EDR) environments.
- Analyze trends across alerts and security incidents to recommend and implement approved policy and control adjustments that mitigate risk and reduce recurring alert noise, including tuning detection logic, tightening access controls, and updating security standards.
- Maintain, refine, and update SOC playbooks and incident response documentation as new threat patterns emerge.
- Prepare concise, decision-ready weekly and monthly security reports for the IT Director covering incident summaries (events, impact, and remediation), alert volumes and categories, response times, closure quality, control gaps, and recommended fixes.
- Support ongoing continuous improvement initiatives focused on endpoint telemetry, security monitoring, and incident response workflows.
Requirements
Requirements
- 2+ years of hands-on professional experience in a SOC analyst, security monitoring, or incident response role.
- Demonstrated experience triaging security alerts and managing tickets from initial detection through final resolution rather than solely monitoring dashboards.
- Hands-on experience with Microsoft Defender, Microsoft Sentinel, and/or SentinelOne, alongside Microsoft 365 security administration.
- Solid knowledge of SIEM, EDR, firewall, and network security technologies.
- Practical understanding of endpoint detection and response (EDR) concepts and common cyberattack patterns.
- Exceptional written documentation habits with the proven ability to construct clear, defensible incident timelines and comprehensive remediation notes.
- Strong verbal and written English proficiency to communicate security risks in plain language to IT leadership and non-technical stakeholders.
- Active cybersecurity certification (or earned within the last 3 years) from at least one of the following: CompTIA Security+, CompTIA CySA+, Microsoft SC-200 (Security Operations Analyst), GIAC (entry to mid-level options), or an equivalent recognized security credential.
Qualifications
- Direct hands-on experience with SentinelOne alert triage and incident response workflows.
- Prior experience collaborating alongside an MSSP, managing alert escalations, and fulfilling evidence requests.
- Background working within a law firm, financial institution, or professional services environment where strict confidentiality and chain-of-custody discipline are critical.
- Experience drafting, reviewing, or updating cybersecurity policies and standards based on lessons learned from security incidents.
- Familiarity with scripting or automation tools, such as PowerShell or Python, to accelerate alert triage and evidence collection.
Benefits
Benefits
- Full-time, 100% remote position.
- Consistent working schedule from 9:00 AM to 6:00 PM Eastern Time, with approximately one hour of flexibility in either direction.
- Opportunity for long-term stability with potential to transition to a direct hire role in the future.
Originally posted on Himalayas
Prepare your application
Use the description above to assess your fit for WOW Remote Teams. This checklist is guidance from Resumize, rather than additional requirements from the employer. Imported listings can be shortened or change after collection, so confirm the complete description and current availability before sending an application.
Match requirements to evidence
Identify the responsibilities and skills the employer explicitly names. For each important requirement, choose one example from your work, education, training, or projects. Explain what you did, how you did it, and what changed as a result. Include a measurable outcome when you can support it. If you lack a requirement, describe related experience accurately instead of adding an unfamiliar skill to your resume.
Put the most relevant examples near the top of your resume. Keep job titles, dates, qualifications, and contact details consistent across your application materials. Use the employer’s terminology when it describes your experience accurately; a copied list of keywords does not explain your contribution. A short, specific bullet is easier to review than a paragraph that mixes several unrelated duties.
Check the working arrangement
Confirm the location, schedule, employment type, and any eligibility requirements on the employer’s site. A remote label does not establish worldwide eligibility or flexible hours. If compensation, benefits, equipment, travel, or contract duration are missing from this listing, write down your questions for the recruiter. Do not assume details from another opening at the same company apply to this role.
Review before submitting
Follow the employer’s requested file format and application instructions. Open your exported resume and check that its text is selectable, its sections read in order, and its links work. Proofread names, dates, and contact information. Share confidential work samples only when you have permission, and use an anonymized example when necessary.
Submit through a trusted employer or recruiting destination. If the original listing has disappeared, search the employer’s careers page for the title rather than assuming the vacancy remains open. Save the application date, job reference, and the version of your resume you sent. Those details help you prepare for a later conversation and avoid submitting conflicting information through several job boards.
Review your resume for writing and readability feedback, or browse other openings if this opportunity is unavailable.