SOC Providers.com Security Operations Center providers
Find providers

By what they do

  • Monitor and notify
  • Investigate and advise
  • Contain threats
  • Co-manage the SOC
  • Run the SOC
  • All providers

By your situation

  • Endpoint security
  • Cloud workloads
  • Identity and access
  • Works with your tools
  • Small-business fit
  • Editor’s picks

By service label

  • MDR
  • MSSP
  • SOCaaS
  • Managed SIEM
  • Co-managed SOC
  • All categories
Pricing
Compare
  • All comparisons
  • MSSP vs MDR vs SOCaaS
  • Managed SOC vs MDR
  • MSSP vs managed SOC
  • SIEM vs managed SIEM vs MDR
Guides
  • What is a SOC provider?
  • MSSP vs MDR vs SOCaaS
  • Glossary
  • All guides
Last reviewed: 1 Jun 2026
  1. Home
  2. /Glossary
  3. /Detection Engineering

Detection Engineering

Definition

Detection engineering is the practice of designing, building, testing, and maintaining threat detection rules and logic within security platforms. Detection engineers create and tune the alerts that SOC analysts investigate.

Related terms

SIEM Security Information and Event Management MDR Managed Detection and Response ATT&CK MITRE ATT&CK
SOC Providers.com

An independent, buyer-side directory of 24/7 SOC providers, MDR, MSSP and SOCaaS. Built and maintained editorially. Profiles, rankings and inclusion are never for sale.

Last reviewed: 1 Jun 2026

Browse

  • All providers
  • By category
  • Editor’s picks
  • Pricing

Tools

  • Comparison
  • Decision guides
  • Glossary

About

  • How we verify
  • Editorial rules
  • Corrections
  • Terms and disclaimers