SOC Operations Analyst II — Threat Detection & Response

Deloitte France; Richmond (VA); On-site; USD 105,000 - 208,000; Full time

Job summary

Deloitte's Cyber Operate team in the United States is seeking a Managed Services Engineer III to join our Cyber Operate Offering. You will oversee advanced monitoring, incident detection, and threat response for client environments.

The role requires collaboration, strong written and verbal communication, and the ability to travel 10% with 24/7 coverage, working on-site at Deloitte offices.

Qualifications

• Bachelor's degree in CS/IT or related discipline; or equivalent experience.
• 2+ years of experience in cybersecurity or security operations.
• Experience with security technologies such as SIEM, IDS/IPS, DLP, Proxy, WAF, EDR, Anti-Virus, Sandboxing.
• Knowledge of APT tactics, techniques, and procedures; attack activities.
• Understanding of networking protocols (TCP/IP, DNS, HTTP).
• Willingness to travel ~10% and work 24/7 shifts with 50% on-site at a Deloitte office.

Responsibilities

• Conduct advanced analysis of monitoring results; validate and investigate escalated alerts.
• Perform root cause analysis; assist Threat Hunting with investigations; monitor new threat sources.
• Analyze network and endpoint data using SIEM and tools; create IOC signatures.
• Advise on detection content; guide response plans based on incident type and severity.
• Document new procedures/runbooks; track SOC SLAs; maintain certifications; support Shift Lead.
• Fulfill Shift Lead responsibilities in their absence.

Skills

Cybersecurity

Threat hunting

Detection engineering

Programming experience

Communication

Teamwork

Project leadership

Time management

Attention to detail

Networking knowledge

Education

Bachelor's degree in CS/IT or related

Equivalent experience

Tools

SIEM

IDS/IPS

DLP

Proxy

WAF

EDR

Anti-Virus

Sandboxing

Threat Intelligence

Penetration Testing

Job description

Deloitte's Cyber Operate team in the United States is seeking a Managed Services Engineer III to join our Cyber Operate Offering. You will oversee advanced monitoring, incident detection, and threat response for client environments.

The role requires collaboration, strong written and verbal communication, and the ability to travel 10% with 24/7 coverage, working on-site at Deloitte offices.