Security Operations Center (SOC) Analyst Levels 1, 2, and 3

About Terracotta and the Opportunity

Terracotta Outsourcing specializes in recruitment, outsourcing, and corporate services. We are supporting our client to fill critical positions within their Cybersecurity Operations and Threat Management team. These roles offer a chance to start or advance your cybersecurity career, working in a high-functioning Security Operations Center that supports major enterprise environments.

Positions and Responsibilities

SOC Level 1 Analyst

• Monitor security alerts and prioritize responses accordingly.
• Investigate incidents to determine severity, escalating when necessary.
• Maintain detailed event documentation and assist with phishing case investigations.
• Adhere to established SOC procedures and playbooks.

SOC Level 2 Analyst

• Conduct thorough investigations of security incidents escalated from Level 1.
• Analyze logs and coordinate incident response activities.
• Perform root cause analysis to identify vulnerabilities.
• Design detection rules and provide mentoring support to Level 1 analysts.

SOC Level 3 Analyst

• Lead advanced threat hunting and manage major incident responses.
• Carry out digital forensic investigations and malware analysis.
• Create complex detection logic for enhanced security monitoring.
• Offer technical guidance and leadership to the SOC teams.

Requirements

Level 1 Analysts

• Bachelor’s degree in a related discipline.
• Relevant experience between zero to two years in cybersecurity, IT support, or network administration.
• Certifications such as Security+, CySA+, CCST, or SC-900 are beneficial but not mandatory.

Level 2 Analysts

• Prior experience in SOC roles or incident response functions.
• Robust understanding of SIEM tools, Endpoint Detection and Response (EDR), Windows and Linux operating systems, networking concepts, and security investigations.

Level 3 Analysts

• Bachelor’s degree in a relevant area.
• Minimum of five years’ progressive experience in SOC operations, Digital Forensics and Incident Response (DFIR), threat hunting, or incident response.
• Hands-on expertise with SIEM, EDR, cloud security platforms, and scripting skills.
• Preferred certifications include CISSP, GCFA, GCIH, GREM, GNFA, or OSCP.

Desired Attributes

• Strong analytical abilities and efficient problem-solving skills.
• Effective communication and thorough documentation practices.
• A dedicated passion for cybersecurity and commitment to ongoing professional development.
• Capability to perform well in a dynamic, fast-paced SOC environment.

Additional Information

Please specify in your application whether you wish to apply for SOC Level 1, Level 2, or Level 3 roles. The positions are based onsite in the United Arab Emirates and offer permanent employment.