SOC Analyst – L2 (Security Operations Center)
Role Overview
The organization is augmenting its internal Security Operations Centre with L1, L2, and L3 resources alongside an existing external Managed Security Service.
The requirement is weighted toward L2 capability, with fewer L1 resources and balanced L3 resources.
The focus is hands-on operational SOC analysis across the Microsoft security ecosystem; SIEM administration is not the requirement.
Key Skills for This Role
Full Job Posting
SOC role overview
The organization is augmenting its internal Security Operations Centre with L1, L2, and L3 resources alongside an existing external Managed Security Service.
The requirement is weighted toward L2 capability, with fewer L1 resources and balanced L3 resources.
The focus is hands-on operational SOC analysis across the Microsoft security ecosystem; SIEM administration is not the requirement.
Capability areas
- L1: Monitor alerts, triage, conduct initial investigation, and escalate according to defined SLAs and playbooks.
- L2: Investigate incidents in depth, analyze SIEM data, configure and tune detections and rules, analyze threats, and escalate higher-severity incidents.
- L3: Conduct advanced investigations and detection engineering; develop and optimize log-based use cases; automate and orchestrate SOAR; support complex incidents and technical escalations.
- L2/L3 resources support major incidents, coordinate or act as incident commander on incident bridges, and drive investigations through containment and closure.
Core skills
- Strong hands-on experience with Microsoft Sentinel, Defender XDR, KQL, and Microsoft security technologies.
- Wider SOC exposure such as SOAR, EDR/XDR, NDR, WAF, DLP, PAM, email, cloud, and application security monitoring is desirable.
Requirements
- Strong hands-on experience with Microsoft Sentinel, Defender XDR, KQL, and Microsoft security technologies.
- For L1 capability: alert monitoring, triage, initial investigation, and escalation in line with defined SLAs and playbooks.
- For L2 capability: deeper incident investigation, SIEM analysis, detection and rule configuration and tuning, threat analysis, and escalation of higher-severity incidents.
- For L3 capability: advanced investigation and detection engineering, log-based use-case development and optimization, SOAR automation and orchestration, complex incident support, and technical escalation.
- L2/L3 resources should be able to support major incidents, including coordinating or acting as incident commander on incident bridges and driving investigations through containment and closure.
- Experience across wider SOC capabilities such as SOAR, EDR/XDR, NDR, WAF, DLP, PAM, email, cloud, and application security monitoring is desirable.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Dicetek LLC
Sanctions Advisory Manager
Sharjah, UAE
The role advises business teams and stakeholders on sanctions compliance while supporting commercial activity and risk management. Responsibilities include reviewing high-risk relationships and transactions, conducting r
Business Analyst (Functional UAT Tester)
Abu Dhabi, UAE
The employer seeks a Business Analyst (Functional UAT Tester) with at least four years of hands-on functional and UAT testing experience for consumer-facing mobile apps and websites. The work includes Jira defect managem
Principal Administrative Officer (UAE National)
Dubai, UAE
The employer is seeking a Principal Administrative Officer to coordinate operational readiness, onboarding, and integration for new sites and business units. The role includes tracking performance, reporting progress, an
Recruitment Coordinator (IT & AI)
Abu Dhabi, UAE
The employer is seeking a Recruitment Coordinator with experience supporting IT, AI, and technology hiring. The role coordinates recruitment activities, candidate communications, interview scheduling, ATS records, and hi
Sanctions Technical Specialist
Sharjah, UAE
Dicetek is seeking a Sanctions Technical Specialist to configure, maintain, and improve sanctions screening systems. Candidates need sanctions-platform experience, knowledge of international sanctions regimes and payment
AI Engineer
Dubai, UAE
Dicetek is seeking an AI Engineer to assess, design, develop, and implement AI initiatives across the organization. The role spans the full project lifecycle, from use-case scoping and proof of concept through deployment
Reporting Specialist – Power BI & Databricks
Dubai, UAE
The employer is seeking a reporting specialist to build and support business intelligence reporting using Power BI, Databricks, and SQL. Candidates should have 3–6 years of relevant experience and hands-on skills in dash
Senior Project Manager – Oracle Fusion ERP
Dubai, UAE
Dicetek LLC is seeking a Senior Project Manager to lead critical stages of an Oracle Fusion Cloud ERP implementation. The role focuses on UAT, data migration, cutover, and go-live, requiring at least 15 years of project
Sanctions Advisory Manager
Sharjah, UAE
Business Analyst (Functional UAT Tester)
Abu Dhabi, UAE
Principal Administrative Officer (UAE National)
Dubai, UAE
Recruitment Coordinator (IT & AI)
Abu Dhabi, UAE
Sanctions Technical Specialist
Sharjah, UAE
AI Engineer
Dubai, UAE
Reporting Specialist – Power BI & Databricks
Dubai, UAE
Senior Project Manager – Oracle Fusion ERP
Dubai, UAE