3rd Line Security Analyst

Hamilton Barnes; Newcastle upon Tyne; Hybrid; GBP 65,000 - 95,000; Full time

Benefits offered by this job

25 days annual leave

Monthly home-working allowance

Home-working equipment allowance

GP access 24/7

Employee Assistance Programme

Company sick pay

Life assurance 4x salary

Private health insurance after 1 year

Parental leave enhancements

Perkbox discounts

Cycle to Work

Electric vehicle scheme

Professional development

Job summary

Hamilton Barnes is partnering with a growing technology services business to appoint a 3rd Line Security Analyst focusing on Threat Detection & Response. You will own complex incidents, lead investigations and shape a modern security operations capability across Microsoft security tools.

You will act as the senior escalation point for 1st and 2nd line analysts, mentor staff, interact with customers and drive proactive threat hunting and detection engineering initiatives.

Qualifications

• Significant SOC experience with complex investigations.
• Experience developing or optimising detection rules and analytics.
• Broad understanding of cloud, identity, endpoints and network security.
• Ability to translate technical findings into actionable recommendations.
• Strong communication with technical teams and customers.

Responsibilities

• Lead complex security investigations and manage high-severity incidents.
• Senior technical escalation point for critical events.
• Proactive threat hunting across customer environments.
• Develop detection capabilities via analytics, automation and threat intel.
• Mentor junior analysts and communicate findings to customers.

Skills

SOC experience

Incident response

Threat hunting

Detection engineering

Mentoring

Education

Relevant cybersecurity certifications

Job description

3rd Line Security Analyst, Threat Detection & Response

The Opportunity

Hamilton Barnes is working in partnership with a growing technology services business specialising in Microsoft Cloud solutions and managed cybersecurity services. They are looking to appoint an experienced 3rd Line Security Analyst to join their expanding Threat Detection & Response function.

This is an excellent opportunity for an established SOC professional to step into a senior technical position, taking ownership of complex security incidents, leading advanced investigations and helping shape the ongoing development of a modern security operations capability.

Reporting directly to the Threat Detection & Response Lead, you will act as the primary technical escalation point for 1st and 2nd Line analysts, dealing with high-severity incidents, sophisticated threats and complex customer environments.

Beyond incident response, the position offers considerable scope to get involved in proactive threat hunting, detection engineering and continuous service improvement. You'll have the opportunity to influence technical standards, improve detection capabilities and mentor less experienced analysts, all while working extensively across the Microsoft security ecosystem.

For someone looking to combine hands-on technical security work with greater ownership, customer interaction and technical leadership, this is a particularly strong opportunity.

Key Responsibilities

• Lead complex security investigations and manage high-severity incidents, overseeing containment, remediation and recovery activities.
• Act as the senior technical escalation point for critical security events, major incidents and emerging threats.
• Conduct proactive threat hunting across customer environments, leveraging Microsoft security technologies to uncover suspicious activity and previously unidentified threats.
• Develop and enhance detection capabilities through improved analytics, automation, threat intelligence and investigation workflows.
• Assess customer security environments, identifying vulnerabilities and recommending improvements across cloud, identity, endpoint and network security.
• Work alongside SOC leadership and security engineering teams to improve tooling, playbooks, processes and operational standards.
• Provide technical mentorship and guidance to junior analysts, helping develop the wider team's capabilities.
• Engage directly with customers, clearly communicating incident findings, security risks and practical remediation recommendations.
• Collaborate with wider cybersecurity and customer success teams to continually improve service delivery and customer security outcomes.

Technical Experience & Requirements

The successful candidate will ideally bring:

• Significant experience within a Security Operations Centre, particularly across complex investigations, escalations and incident response.
• Experience developing or optimising detection rules, analytics, automation and incident investigation processes.
• A broad understanding of modern security architecture, spanning cloud platforms, identity, endpoint protection and network security.
• The ability to assess security risks, identify weaknesses and translate technical findings into actionable recommendations.
• Confident communication skills, with experience engaging technical teams and customer stakeholders.
• Previous experience mentoring analysts or providing technical guidance within a SOC environment.
• Relevant cybersecurity certifications would be advantageous.

What's on Offer?

The business places significant emphasis on employee development, collaboration and creating an environment where technical professionals can progress and develop their expertise.

Alongside a competitive salary, the benefits package includes:

• Opportunity to work for a recognised World Class Best Company.
• 25 days annual leave.
• Monthly home-working allowance.
• Additional allowance towards home-working equipment and setup.
• 24/7 access to a GP service.
• Round-the-clock Employee Assistance Programme.
• Company sick pay.
• Life assurance worth four times your base salary.
• Private health insurance after one year of service.
• Enhanced parental leave and pay.
• Perkbox discounts and employee rewards.
• Cycle to Work scheme.
• Electric vehicle scheme.
• Further professional development opportunities and additional employee benefits.

Why Consider This Opportunity?

This isn't simply another SOC analyst position. It's an opportunity to operate at the senior end of security operations, take ownership of the incidents that matter most and have a genuine influence on how a growing security function operates.

You'll be working with a strong Microsoft security stack, tackling technically challenging investigations and helping develop the capabilities of the wider team, with direct exposure to both technical leadership and customers.