SOC Analyst

SCC, LLC
United States
12 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours

Tech stack

Microsoft Windows Amazon Web Services Microsoft Azure Cyber Security Intrusion Detection and Prevention Mitre Att&ck SC Clearance Dynatrace Servicenow

Job description

We’re looking for an experienced SC Cleared SOC Analyst/Detection Engineer to support the delivery of a prioritised detection engineering backlog across AWS, Azure, Microsoft 365, Defender XDR, Dynatrace, and ServiceNow environments., * Designing, developing, testing, and deploying detection use cases aligned to MITRE ATT&CK.

  • Creating and optimising detection rules, alerts, and correlation logic across multiple security platforms.
  • Developing detections for credential compromise, privilege escalation, persistence, lateral movement, and data exfiltration.
  • Performing validation, tuning, and optimisation to improve detection fidelity and reduce false positives.
  • Producing technical documentation, operational handover materials, and knowledge transfer sessions.
  • Collaborating with SOC, Security Engineering, and Architecture teams to improve threat visibility and monitoring coverage.

Requirements

  • Active SC Clearance
  • Proven experience in SOC Analysis, Detection Engineering, or Security Engineering.
  • Strong understanding of MITRE ATT&CK and threat detection methodologies.
  • Hands-on experience with AWS, Azure, Microsoft 365, Defender XDR, Dynatrace, and/or ServiceNow.
  • Experience creating and tuning detection content, alerts, and correlation rules.
  • Strong stakeholder engagement, documentation, and communication skills.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on computerjobs.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:38 min

Using language models to self-detect and flag software vulnerabilities

Julian Totzek-Hallhuber Julian Totzek-Hallhuber · WWC Europe 2026

56 sec

Integrating automated approval workflows into the portal

Markus Eisele Markus Eisele · WWC 2025

1:01 min

Connecting frontend application performance to user retention and revenue

Dani Coll Dani Coll · WWC 2025

4:23 min

Boosting security operations center productivity with intelligent data analysis

Chris Wysopal Chris Wysopal +2 · WWC 2024

2:27 min

Establishing a simulated technical environment for the workflow demo

Tobias Dunn-Krahn · LIVE

5:25 min

Shifting left and creating internal security champion programs

Vandana Verma Sehgal · LIVE

Videos

See all

Related articles

See all