SOC Engineer III — Threat Detection & Response

Relha LLC; Huntsville (AL); On-site; USD 90,000 - 120,000; Full time

Job summary

Deloitte is seeking a Security Engineer III to support the Client's Operational Technology Monitoring program in Huntsville. You will monitor security events, triage alerts, and analyze potential threats across AMC networks, systems, and mission data, coordinating with stakeholders in a fast-paced DoD environment.

The role emphasizes threat-informed monitoring, detection tuning, and documenting findings; local onsite work 5 days a week; travel up to 25%; Active Secret clearance is required.

Qualifications

• Legally authorized to work in the United States without sponsorship.
• Active Secret security clearance required.
• Travel up to 25% on average.
• Must be local to Huntsville, AL and onsite five days a week.

Responsibilities

• Monitor security events across AMC networks, systems, and mission data using SOC platforms.
• Triaging alerts, validating potential threats, and investigating security events across data sources.
• Analyze telemetry from logs and network traffic to identify suspicious activity and support incident response.
• Execute SOC playbooks and document findings, indicators of compromise, and recommended detection improvements.
• Assist with tuning detection content, improving runbooks and use cases, and tracking adversary tactics, techniques, and procedures.

Skills

Analytics Use Case Development

Enterprise Security Architecture

Network analysis

Education

IAT Level II Certification or higher

Tools

DRAGOS

SQL

Job description

Deloitte is seeking a Security Engineer III to support the Client's Operational Technology Monitoring program in Huntsville. You will monitor security events, triage alerts, and analyze potential threats across AMC networks, systems, and mission data, coordinating with stakeholders in a fast-paced DoD environment.

The role emphasizes threat-informed monitoring, detection tuning, and documenting findings; local onsite work 5 days a week; travel up to 25%; Active Secret clearance is required.