> Markdown version of [/jobs/ext/2959871-soc-analyst](https://www.wearedevelopers.com/jobs/ext/2959871-soc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SOC Analyst

- **Company:** The Head Rest
- **Location:** United States
- **Contract:** Temporary contract
- **Skills:** User Authentication, Cyber Security, Azure Active Directory, Phishing, Kusto Query Language, Security Information and Event Management, Mitre Att&ck, QRadar, Malware, Microsoft Sentinel
- **Published:** September 17, 2026
- **Apply:** https://computerjobs.com/us/en/mob/job/574531F76F9BC8AB5E

## About the Role

* Demonstrable experience as a SOC Analyst
 * Strong hands-on experience with SIEM, including Microsoft Sentinel
 * Experience monitoring, triaging, and investigating security incidents
 * Knowledge of incident response lifecycle and root cause analysis
 * Experience with Microsoft Defender (essential)
 * KQL knowledge desirable
 * Ability to work independently and manage complex cyber investigations

Technical Exposure:

 * IBM QRadar
 * Microsoft Defender/EDR
 * Microsoft Sentinel (essential)
 * Microsoft Entra ID/Azure AD
 * Email threat response

Incident Experience:

 * Phishing & Business Email Compromise
 * Malware & Ransomware
 * Account Compromise
 * Privilege Escalation
 * Insider Threats
 * DLP & Data Exfiltration Alerts
 * Suspicious Authentication Activity

Knowledge of: MITRE ATT&CK, Cyber Kill Chain, NIST CSF, and security event classification.

If you're a skilled SOC Analyst with strong Sentinel experience and available for your next contract opportunity, we'd love to hear from you.



## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes)
- [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [The AI Security Survival Guide: Practical Advice for Stressed-Out Developers](https://www.wearedevelopers.com/videos/1015-the-ai-security-survival-guide-practical-advice-for-stressed-out-developers)
- [Skynet wants your Passwords! The Role of AI in Automating Social Engineering](https://www.wearedevelopers.com/videos/770-skynet-wants-your-passwords-the-role-of-ai-in-automating-social-engineering)

## Related Articles

- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 216: CyberSec + Mythos, Stack Overflow for Agents & DOOM in TTF](https://www.wearedevelopers.com/magazine/728-dev-digest-216-cybersec-mythos-stack-overflow-for-agents-doom-in-ttf)