Security Operations Center Analyst

SCC; United Kingdom; On-site; GBP 60,000 - 90,000; Full time

Job summary

SCC is seeking an experienced SOC Analyst (SC Cleared) with strong Microsoft Sentinel expertise to support advanced threat detection within a complex enterprise security environment. You will design, build, and optimise Sentinel detections and analytics rules across cloud and on-prem environments, while reducing false positives and improving detection fidelity.

Key duties include developing KQL queries, automation playbooks, and collaborating with SOC and Incident Response teams to enhance

Qualifications

• Active SC Clearance required.
• Advanced KQL development skills required.
• Deep understanding of MITRE ATT&CK and detection engineering.
• Experience with cloud, endpoint, identity and network integrations.
• Knowledge of Sentinel Automation Rules, Playbooks and Logic Apps.
• Excellent stakeholder engagement and documentation skills.

Responsibilities

• Design, develop and optimise Microsoft Sentinel detections and Analytics Rules.
• Create advanced KQL queries aligned to MITRE ATT&CK techniques.
• Build detections across cloud, endpoint, identity and network environments.
• Tune alerts, reduce false positives and improve detection fidelity.
• Develop Sentinel automation, Playbooks and Logic Apps.
• Produce technical documentation and operational handover materials.
• Collaborate with SOC, Incident Response and Security teams to improve threat visibility.

Skills

KQL development

MITRE ATT&CK

Azure/Microsoft 365/AWS

Dynatrace & ServiceNow

Sentinel automation

Playbooks & Logic Apps

Stakeholder engagement

Documentation

Tools

Azure

Microsoft 365

AWS

Dynatrace

ServiceNow

Job description

We are seeking an experienced SOC Analyst (SC Cleared) with strong Microsoft Sentinel expertise to support the delivery of advanced threat detection capabilities within a complex enterprise security environment. This is an excellent opportunity for a SOC Analyst (SC Cleared) to enhance SOC effectiveness, improve detection maturity, and deliver high-quality Sentinel use cases.

Your responsibilities as the SOC Analyst (SC Cleared):

• Design, develop and optimise Microsoft Sentinel detections and Analytics Rules.
• Create advanced KQL queries aligned to MITRE ATT&CK techniques.
• Build detections across cloud, endpoint, identity and network environments.
• Tune alerts, reduce false positives and improve detection fidelity.
• Develop Sentinel automation, Playbooks and Logic Apps.
• Produce technical documentation and operational handover materials.
• Collaborate with SOC, Incident Response and Security teams to improve threat visibility.

As a successful SOC Analyst (SC Cleared), you will have:

• Active SC Clearance.
• Advanced KQL development skills.
• Deep understanding of MITRE ATT&CK and detection engineering.
• Experience with Azure, Microsoft 365, AWS, Dynatrace and ServiceNow integrations.
• Knowledge of Sentinel Automation Rules, Playbooks and Logic Apps.
• Excellent stakeholder engagement and documentation skills.

NOTE: At SCC, we take the privacy and security of your information very seriously. Any information we hold will be handled in accordance with current data protection legislation. Upon submitting your application, SCC will process your information in line with our privacy policy, which can be found on our website under Legal Privacy Notice Flexible Resourcing.