SC Cleared SOC Analyst: Microsoft Sentinel (Remote UK)

Sanderson Government & Defence; Cheltenham; Remote; GBP 101,000 - 111,000; Part time

Job summary

Sanderson Government & Defence is seeking a SOC Analyst (SC Cleared) for a 3-month contract. This fully remote UK role focuses on developing and tuning Microsoft Sentinel detections, with strong KQL skills to deliver high-fidelity alerts for a live security operations centre.

You will work with security engineers and analysts, map detections to MITRE ATT&CK, manage data connectors, and produce clear technical documentation.

Qualifications

• Active SC Clearance.
• Sole British National.
• Minimum 3 years' experience in a SOC, Detection Engineering, SIEM Engineering or Cyber Security Engineering role.
• Strong hands-on experience with Microsoft Sentinel.
• Advanced knowledge of Kusto Query Language (KQL).
• Experience developing and maintaining Sentinel analytics rules and detection content.
• Understanding of the complete detection lifecycle, including development, testing, tuning and deployment.
• Experience working with Sentinel data connectors, Log Analytics, parsers and security telemetry.

Responsibilities

• Develop, test, deploy and maintain Microsoft Sentinel detection content
• Write, optimise and tune KQL queries for analytics rules, investigations and validation activities
• Convert security monitoring requirements into operationally effective detections
• Validate detections against available telemetry and data sources
• Tune and optimise existing analytics rules to improve alert fidelity and reduce false positives
• Assess data connectors, parsers, normalisation and ingestion requirements
• Investigate and resolve telemetry, parsing and alerting issues
• Support change control, release management and deployment processes
• Map detections to MITRE ATT&CK techniques and identify visibility gaps
• Work closely with SOC teams to ensure alerts are actionable and relevant
• Produce clear technical documentation, testing evidence and handover materials
• Leverage automation and scripting where appropriate to improve efficiency

Skills

SC Clearance

British National

Microsoft Sentinel

KQL

MITRE ATT&CK

PowerShell

Python

Git

Tools

SPL

SPL Query Language

Job description

Sanderson Government & Defence is seeking a SOC Analyst (SC Cleared) for a 3-month contract. This fully remote UK role focuses on developing and tuning Microsoft Sentinel detections, with strong KQL skills to deliver high-fidelity alerts for a live security operations centre.

You will work with security engineers and analysts, map detections to MITRE ATT&CK, manage data connectors, and produce clear technical documentation.