1

Security Operations Center Operator Jobs in Michigan

In this client-facing role, you will work with security engineers, security operations center teams ... The team works across security platforms, cloud environments, and operating models to help ...

In this client-facing role, you will work with security engineers, security operations center teams ... The team works across security platforms, cloud environments, and operating models to help ...

Collaborating with security operations center analysts, threat hunters, and client stakeholders to prioritize, test, and tune detection content and operational processes * Translating security ...

Security Officer

Troy, MI · On-site

$15.25 - $18/hr

  • Medical

  • Vision

  • Retirement

Works by assisting in the Security Operations Center monitoring phones, alarms, cameras, and radio traffic * Provides statistical safety and security reporting to internal customers and senior ...

Security Officer

Canton, MI · On-site

$14.75 - $17.50/hr

  • Medical

  • Vision

  • Retirement

Works by assisting in the Security Operations Center monitoring phones, alarms, cameras, and radio traffic * Provides statistical safety and security reporting to internal customers and senior ...

Security Officer

Troy, MI · On-site

$15.25 - $18/hr

  • Medical

  • Vision

  • Retirement

Works by assisting in the Security Operations Center monitoring phones, alarms, cameras, and radio traffic * Provides statistical safety and security reporting to internal customers and senior ...

Security Officer

Wayne, MI · On-site

$14.50 - $17.25/hr

  • Medical

  • Vision

  • Retirement

Works by assisting in the Security Operations Center monitoring phones, alarms, cameras, and radio traffic * Provides statistical safety and security reporting to internal customers and senior ...

Security Officer

Grosse Pointe, MI

$15 - $18/hr

  • Medical

  • Vision

  • Retirement

Works by assisting in the Security Operations Center monitoring phones, alarms, cameras, and radio traffic * Provides statistical safety and security reporting to internal customers and senior ...

Security Officer

Dearborn, MI

$14.75 - $17.50/hr

  • Medical

  • Vision

  • Retirement

Works by assisting in the Security Operations Center monitoring phones, alarms, cameras, and radio traffic * Provides statistical safety and security reporting to internal customers and senior ...

Security Officer

Wayne, MI · On-site

$14.50 - $17.25/hr

  • Medical

  • Vision

  • Retirement

Works by assisting in the Security Operations Center monitoring phones, alarms, cameras, and radio traffic * Provides statistical safety and security reporting to internal customers and senior ...

Security Officer

Grosse Pointe, MI

$15 - $18/hr

  • Medical

  • Vision

  • Retirement

Works by assisting in the Security Operations Center monitoring phones, alarms, cameras, and radio traffic * Provides statistical safety and security reporting to internal customers and senior ...

Security Officer

Dearborn, MI

$14.75 - $17.50/hr

  • Medical

  • Vision

  • Retirement

Works by assisting in the Security Operations Center monitoring phones, alarms, cameras, and radio traffic * Provides statistical safety and security reporting to internal customers and senior ...

Showing results 41-60

Security Operations Center Operator information

See Michigan salary details

$6

$17

$24

How much do security operations center operator jobs pay per hour?

As of Aug 15, 2026, the average hourly pay for security operations center operator in Michigan is $17.28, according to ZipRecruiter salary data. Most workers in this role earn between $15.10 and $18.65 per hour, depending on experience, location, and employer.

What is the difference between Security Operations Center Operator vs Security Analyst?

AspectSecurity Operations Center OperatorSecurity Analyst
CertificationsCompTIA Security+, CEH, CISSP (preferred)CompTIA Security+, CISSP, GIAC certifications
Work EnvironmentMonitoring security systems in a SOC, responding to alertsAnalyzing security data, investigating incidents, reporting
Employer & Industry UsageCommon in cybersecurity firms, large enterprises, government agenciesUsed across industries for threat detection and risk assessment

Security Operations Center (SOC) Operators focus on real-time monitoring and initial response to security alerts, while Security Analysts perform in-depth analysis, investigation, and reporting. Both roles require similar certifications and often work within the same environment, but their responsibilities differ in scope and depth of analysis.

What are some common challenges faced by Security Operations Center Operators, and how can they be managed?

SOC Operators often encounter challenges such as managing high volumes of alerts, distinguishing false positives from genuine threats, and maintaining situational awareness during fast-paced incidents. Effective time management, continuous training on new threat vectors, and leveraging automation tools can help address these challenges. Collaborating closely with incident response teams and participating in regular drills also ensures readiness and improves overall team effectiveness.

What does a Security Operations Center Operator do?

As a security operations center operator, or SOC operator, you monitor a variety of technologies including access control, video surveillance, and alarm systems to provide security service and threat elimination for industrial, business, or residential customers. You respond to medical crises, safety incidents, natural disasters and other emergencies, and dispatch security officers, police, fire, EMS personnel, and other services as required. Your duties and responsibilities also include investigating incidents, escalating situations to appropriate parties in the SOC, and filing incident reports. In some roles, you are responsible for monitoring social media and other news and information channels to support threat identification.

What are the key skills and qualifications needed to thrive as a Security Operations Center Operator?

To thrive as a Security Operations Center (SOC) Operator, you need a solid understanding of cybersecurity principles, incident response, and network monitoring, often supported by a relevant degree or certifications like CompTIA Security+ or CEH. Familiarity with security information and event management (SIEM) tools, intrusion detection systems, and ticketing platforms is typically required. Strong analytical thinking, attention to detail, and effective communication are crucial soft skills for identifying threats and collaborating with teams. These skills are essential to quickly detect, assess, and respond to security incidents, ensuring the organization's information assets remain protected.

What job categories do people searching Security Operations Center Operator jobs in Michigan look for?

The top searched job categories for Security Operations Center Operator jobs in Michigan are:

What are popular job titles related to Security Operations Center Operator jobs in MI?

For Security Operations Center Operator jobs in MI, the most frequently searched job titles are:

Infographic showing various Security Operations Center Operator job openings in Michigan as of August 2026, with employment types broken down into 100% Full Time. Highlights an 100% In-person job distribution, with an average salary of $35,948 per year, or $17.3 per hour.

Cyber - Palo Alto SecOps - Senior Consultant

Deloitte

Grand Rapids, MI

Full-time

Posted 15 days ago


Deloitte rating

8.2

Company rating: 8.2 out of 10

Based on 92 frontline employees who took The Breakroom Quiz

44th of 150 rated financial services


Job description

Our Deloitte Cyber team understands the evolving challenges and opportunities organizations face in cybersecurity. Join our Cyber practice to help clients navigate a dynamic threat landscape through solutions and managed services that simplify complexity and strengthen resilience. In this role, you will support Next-Generation Security Operations Center (SOC) capabilities, including platforms such as Cortex XSIAM, to help clients operate with confidence and proactively manage cyber risk.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As a Palo Alto SecOps, Senior Consultant on the Cyber Defense & Resilience team, you will be responsible for:

  • Leading the design and deployment of Next-Generation SOC platforms, including Cortex XSIAM, advanced detection rules, security information and event management (SIEM) ingestion, and security orchestration, automation, and response (SOAR) playbooks
  • Integrating log and telemetry sources to support data quality, normalization, and operational visibility
  • Developing and optimizing automated response workflows for incident containment and remediation
  • Advising clients on threat detection use cases, automation strategies, and SOC platform capabilities
  • Collaborating with cross-functional teams to enhance solutions, incorporate threat intelligence, and present findings and recommendations to client stakeholders

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to provide clear guidance to others

The team

Our Cyber Defense & Resilience offering helps clients defend against advanced threats by transforming security operations through monitoring technologies, data analytics, and threat intelligence. The team helps organizations manage dynamic attack surfaces and respond to cyber incidents and business disruptions with greater speed and consistency. Through this work, we help clients prepare for, respond to, and recover from cyber events.

Qualifications

Required:

  • Bachelor's degree in Computer Science, Cybersecurity, or another technical field
  • 4+ years of experience in cloud, network, or identity security, including 3+ years working with Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure, and native security tools
  • 3+ years of experience with Security Operations tools and platforms, including Cortex XSIAM, Cortex XDR, Splunk, or similar security information and event management (SIEM) technologies
  • 3+ years of Security Operations Center experience in detection engineering, automation and playbook development, SOC maturity, log source management, data normalization, data ingestion, and data manipulation
  • 3+ years of experience with endpoint detection and response (EDR) platforms such as Microsoft Defender, Cortex XDR, or CrowdStrike, and governance, risk, or compliance work using established frameworks; Palo Alto Networks PCNSE, Certified Cybersecurity Associate, or equivalent cybersecurity certification
  • Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
  • Limited immigration sponsorship may be available.

Preferred:

  • Experience with Palo Alto Networks solutions, including next-generation firewalls, Cortex, Prisma Cloud, Prisma Access, and XDR
  • Experience evaluating differences among Security Operations vendor platforms and SIEM technologies
  • Experience with scripting and playbook development in a SIEM, SOAR, or security platform
  • Experience with Border Gateway Protocol (BGP), equal-cost multi-path routing (ECMP), and network segmentation in on-premise and cloud environments
  • Experience advising on solution design based on client use cases, requirements, and success criteria
  • Previous consulting experience and/or advanced cybersecurity or network engineering certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Certified Cloud Security Professional (CCSP)

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $105,400 to $207,800.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.


Qualifications:

Our Deloitte Cyber team understands the evolving challenges and opportunities organizations face in cybersecurity. Join our Cyber practice to help clients navigate a dynamic threat landscape through solutions and managed services that simplify complexity and strengthen resilience. In this role, you will support Next-Generation Security Operations Center (SOC) capabilities, including platforms such as Cortex XSIAM, to help clients operate with confidence and proactively manage cyber risk.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As a Palo Alto SecOps, Senior Consultant on the Cyber Defense & Resilience team, you will be responsible for:

  • Leading the design and deployment of Next-Generation SOC platforms, including Cortex XSIAM, advanced detection rules, security information and event management (SIEM) ingestion, and security orchestration, automation, and response (SOAR) playbooks
  • Integrating log and telemetry sources to support data quality, normalization, and operational visibility
  • Developing and optimizing automated response workflows for incident containment and remediation
  • Advising clients on threat detection use cases, automation strategies, and SOC platform capabilities
  • Collaborating with cross-functional teams to enhance solutions, incorporate threat intelligence, and present findings and recommendations to client stakeholders

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to provide clear guidance to others

The team

Our Cyber Defense & Resilience offering helps clients defend against advanced threats by transforming security operations through monitoring technologies, data analytics, and threat intelligence. The team helps organizations manage dynamic attack surfaces and respond to cyber incidents and business disruptions with greater speed and consistency. Through this work, we help clients prepare for, respond to, and recover from cyber events.

Qualifications

Required:

  • Bachelor's degree in Computer Science, Cybersecurity, or another technical field
  • 4+ years of experience in cloud, network, or identity security, including 3+ years working with Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure, and native security tools
  • 3+ years of experience with Security Operations tools and platforms, including Cortex XSIAM, Cortex XDR, Splunk, or similar security information and event management (SIEM) technologies
  • 3+ years of Security Operations Center experience in detection engineering, automation and playbook development, SOC maturity, log source management, data normalization, data ingestion, and data manipulation
  • 3+ years of experience with endpoint detection and response (EDR) platforms such as Microsoft Defender, Cortex XDR, or CrowdStrike, and governance, risk, or compliance work using established frameworks; Palo Alto Networks PCNSE, Certified Cybersecurity Associate, or equivalent cybersecurity certification
  • Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
  • Limited immigration sponsorship may be available.

Preferred:

  • Experience with Palo Alto Networks solutions, including next-generation firewalls, Cortex, Prisma Cloud, Prisma Access, and XDR
  • Experience evaluating differences among Security Operations vendor platforms and SIEM technologies
  • Experience with scripting and playbook development in a SIEM, SOAR, or security platform
  • Experience with Border Gateway Protocol (BGP), equal-cost multi-path routing (ECMP), and network segmentation in on-premise and cloud environments
  • Experience advising on solution design based on client use cases, requirements, and success criteria
  • Previous consulting experience and/or advanced cybersecurity or network engineering certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Certified Cloud Security Professional (CCSP)

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $105,400 to $207,800.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.


Education:Bachelor's DegreeEmployment Type:

What Deloitte employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom