> Markdown version of [/jobs/ext/1260516-soc-analyst](https://www.wearedevelopers.com/jobs/ext/1260516-soc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SOC Analyst

- **Company:** Specialist Ltd
- **Location:** Hemel Hempstead, UK
- **Salary:** £130,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Amazon Web Services, Microsoft Azure, Cyber Security, Intrusion Detection and Prevention, Mitre Att&ck, SC Clearance, Dynatrace, Servicenow
- **Published:** July 14, 2026
- **Apply:** https://www.totaljobs.com/job/soc-analyst/specialist-computer-holdings-plc-job107682375

## About the Role

* Active SC Clearance
 * Proven experience in SOC Analysis, Detection Engineering, or Security Engineering.
 * Strong understanding of MITRE ATT&CK and threat detection methodologies.
 * Hands-on experience with AWS, Azure, Microsoft 365, Defender XDR, Dynatrace, and/or ServiceNow.
 * Experience creating and tuning detection content, alerts, and correlation rules.
 * Strong stakeholder engagement, documentation, and communication skills.

## Description

We're looking for an experienced SOC Analyst / Detection Engineer to support the delivery of a prioritised detection engineering backlog across AWS, Azure, Microsoft 365, Defender XDR, Dynatrace, and ServiceNow environments., * Designing, developing, testing, and deploying detection use cases aligned to MITRE ATT&CK.

 * Creating and optimising detection rules, alerts, and correlation logic across multiple security platforms.
 * Developing detections for credential compromise, privilege escalation, persistence, lateral movement, and data exfiltration.
 * Performing validation, tuning, and optimisation to improve detection fidelity and reduce false positives.
 * Producing technical documentation, operational handover materials, and knowledge transfer sessions.
 * Collaborating with SOC, Security Engineering, and Architecture teams to improve threat visibility and monitoring coverage.


## Related Videos

- [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [The Power of Purpose: Unlocking Potential and Innovation](https://www.wearedevelopers.com/videos/1110-the-power-of-purpose-unlocking-potential-and-innovation)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases)
- [It's Not Vibe Coding If You Know What You're Doing](https://www.wearedevelopers.com/videos/100119-it-s-not-vibe-coding-if-you-know-what-you-re-doing)

## Related Articles

- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)