Remote SOC Analyst: Incident Response & Microsoft 365

Wow Remote Teams; United States; Remote; USD 70,000 - 95,000; Full time

Job summary

Wow Remote Teams is seeking a SOC Analyst to strengthen cybersecurity operations for a U.S. law firm client. You will investigate threats, manage incidents from detection through resolution, and own tickets end-to-end.

The ideal candidate has 2–4 years in security operations, MSSP coordination, and experience with Defender/SentinelOne. You will improve security controls across Microsoft 365 and endpoints and collaborate with internal and external teams.

Qualifications

• 2–4 years of professional cybersecurity experience in security operations or incident response.
• Hands-on with Defender, SentinelOne, or Sentinel safety tools.
• Knowledge of EDR technologies and SIEM platforms.
• Experience handling security alerts and incident lifecycle.

Responsibilities

• Review and investigate alerts escalated by MSSP.
• Serve as primary internal contact for security incidents.
• Own security tickets from detection to resolution.
• Investigate activities, assess threats, remediate as needed.
• Monitor and strengthen Microsoft 365 security controls.
• Use EDR tools to identify and contain threats.
• Support monitoring with Defender, Sentinel, or similar tools.
• Collaborate with external providers and internal stakeholders.
• Identify gaps and recommend improvements to configurations.
• Assist with cybersecurity policy development and implementation.
• Validate controls against evolving threats.
• Present security recommendations to stakeholders.
• Maintain documentation of investigations and actions.
• Identify opportunities to enhance incident response.

Skills

Analytical thinking

Advanced English

Communication

Independent work

Problem-solving

Education

Cybersecurity/IT related degree or equivalent

Tools

Microsoft Defender

Microsoft Sentinel

SentinelOne

SIEM platforms

Job description

Wow Remote Teams is seeking a SOC Analyst to strengthen cybersecurity operations for a U.S. law firm client. You will investigate threats, manage incidents from detection through resolution, and own tickets end-to-end.

The ideal candidate has 2–4 years in security operations, MSSP coordination, and experience with Defender/SentinelOne. You will improve security controls across Microsoft 365 and endpoints and collaborate with internal and external teams.