Remote Security Operations Center Jobs in Missouri

#LI-MP1

This position supports a 3rd shift schedule, Monday - Friday, from 12:00 AM to 9:00 AM CT.

World Wide Technology (WWT) strives to make a new world happen. WWT's work benefits clients and partners as much as it does its people and community across the globe.

Founded in 1990, WWT brings together strategy, deep technical expertise and world-class partnerships to help public and private sector organizations design, build and scale intelligent AI, digital, cybersecurity, cloud and infrastructure solutions. Through its Advanced Technology Center (ATC)-a collaborative ecosystem featuring state-of-the-art hardware and software-WWT enables clients and partners to conceptualize, test and validate innovative technology and then deploy solutions at scale using its global integration and distribution capabilities.

With more than 14,000 team members and over 60 locations globally, WWT's culture-grounded in core values and leadership philosophies-has been recognized by Fortune and Great Place to Work for its commitment to innovation, trust and creating a great place to work for all. WWT provides products and services to large enterprise, global service provider and public sector clients in up to 130 countries across six continents. Softchoice, a World Wide Technology company, supports commercial and SMB markets in the U.S. and Canada.

Want to work with highly motivated individuals on high-performance teams? Join WWT today!

What is the Internal WWT IT Team, and why join?

The Internal WWT IT team is the backbone of our company's technological infrastructure, ensuring seamless operations and continuous innovation. Our team is dedicated to managing and supporting the company's technology infrastructure, ensuring the smooth operation of hardware, software, networks, and data systems, while providing top-notch technical support to employees.

By joining the Internal WWT IT team, you will play a crucial role inmaintainingthe efficiency and security of our IT environment, enabling the company to achieve its strategic goals. The Internal IT team offers the opportunity to work in a dynamic and collaborative environment, where your contributions will have a direct impact on the company's success. If you are passionate about technology and eager to take on new challenges, we encourage you to apply and join our team.About the Role

Our Security Operations Center (SOC) is seeking a SOC Team Lead to own day-to-day SOC execution, strengthen how the team operates, and advance the maturity of our detection and response capabilities. This role manages a team of analysts directly and is responsible for ensuring the SOC runs with clarity, consistency, and measurable results across security monitoring, detection engineering, threat hunting, incident response governance, and cross-functional coordination.

This role is available on 3rd shift (Monday - Friday, 12:00 AM-9:00 AM CST) and owns coverage, escalation readiness, and investigation quality for its shift. It's ideal for a leader who can balance hands-on security operations with people management, process ownership, and analyst development; improving how the SOC runs day-to-day while keeping incidents handled, documented, and escalated in line with established procedures.

Key Responsibilities

Team Leadership & People Management

• Lead a team of SOC analysts as their direct manager, including coaching, performance management, and career development.
• Own shift coverage, scheduling, and escalation readiness so the SOC maintains consistent quality across the shift's hours.
• Develop analysts through mentorship and reinforcement of structured, evidence-based investigation practices.

SOC Operations Leadership (Execution, Quality & Continuous Improvement)

• Own day-to-day SOC execution: queue health, triage consistency, escalation discipline, and documentation quality.
• Set and reinforce expectations for how alerts, investigations, and incidents are handled across the team.
• Identify and resolve workflow inefficiencies that slow response or create friction for analysts.
• Turn recurring pain points into measurable process, automation, or documentation improvements.

Detection Engineering Direction & Threat-Informed Defense

• Set detection engineering priorities based on threat intelligence, control gaps, incident learnings, and monitoring weaknesses.
• Oversee tuning across SIEM, SOAR, EDR, NDR, and log analytics platforms to improve fidelity and reduce noise.
• Ensure new detections, use cases, behavioral analytics, and ATT&CK-aligned content are actionable and fit SOC workflows.
• Partner with platform owners and engineering teams to improve telemetry quality and close detection gaps.
• Feed hunt findings, incident patterns, and control observations back into the detection pipeline.

Incident Response Governance

• Ensure incidents are identified, tracked, escalated, and reported per established incident management procedures.
• Reinforce severity-based response expectations, communications requirements, and required response artifacts across the incident lifecycle.
• Ensure investigation timelines, decisions, evidence, and outcomes are documented clearly and defensibly.
• Coordinate with leadership and partner teams during higher-severity incidents and retrospectives.
• Operationalize audit log review, logging-failure escalation, and incident reporting obligations.

Cross-Functional Coordination

• Coordinate with GRC, IAM, Infrastructure, Cloud, AppSec, Vulnerability Management, and other partner teams during investigations, follow-up, and control improvement.
• Clarify ownership boundaries and keep handoffs timely and documented.
• Translate SOC findings into remediation guidance and actionable follow-up for partner teams.
• Support policy, audit, and leadership discussions with accurate operational context.