Senior Cyber Engineering Consultant - SIEM & SOC

Deloitte France; Tempe (AZ); On-site; USD 98,000 - 201,000; Full time

Job summary

Deloitte Technology US (DT - US) is seeking a seasoned SOC Engineer to join the Threat Detection and Security Operations team in Tempe, AZ. You will be the escalation point for SIEM engineering concerns and will support patching, content creation, and documentation to strengthen security postures.

You will develop and tune analytics, dashboards, and playbooks within Microsoft Sentinel and Defender, align detections to MITRE ATT&CK, and collaborate with cross-functional teams to ensure timely

Qualifications

• Bachelor's degree or equivalent in a relevant field.
• Minimum 8 years of technology experience.
• Minimum 3 years' cybersecurity experience within SIEM Administration.
• Hands-on experience with Microsoft Sentinel, building and tuning analytics rules, hunting queries, workbooks, automation, and managing the SIEM data model and workspace.
• Strong KQL proficiency for threat hunting, detection logic, investigation, and telemetry analysis.

Responsibilities

• Support the SOC as an escalation point for SIEM engineering security concerns.
• Assist in security application patching and content creation for stakeholders.
• Develop, tune, and support analytics/detection rules and playbooks.
• Create and maintain runbooks, SOPs, and workflows for incident response and detection engineering.
• Collaborate with Incident Response, Threat Intelligence, and Engineering teams to ensure cross-team alignment.

Skills

SIEM Administration

Threat hunting

KQL

Azure Logic Apps

SOAR

Team collaboration

Communication

Education

Bachelor's degree or equivalent in Computer Science/Engineering/Business Administration

Tools

Microsoft Sentinel

Azure Logic Apps

Workbooks

Playbooks

ITSM integrations

Job description

Deloitte Technology US (DT - US) is seeking a seasoned SOC Engineer to join the Threat Detection and Security Operations team in Tempe, AZ. You will be the escalation point for SIEM engineering concerns and will support patching, content creation, and documentation to strengthen security postures.

You will develop and tune analytics, dashboards, and playbooks within Microsoft Sentinel and Defender, align detections to MITRE ATT&CK, and collaborate with cross-functional teams to ensure timely