L1 SOC Analyst

Hamilton Barnes ?; Wakefield; On-site; GBP 30,000 - 45,000; Full time

Job summary

Hamilton Barnes is seeking a Level 1 SOC Analyst to monitor real-time threats across client environments using Microsoft Sentinel, Defender XDR, CrowdStrike Falcon, Rapid7 and Microsoft Defender for Endpoint. You will learn from experienced analysts in a growth-focused team and contribute to incident handling and detection tuning.

The role offers hands-on risk detection across SIEM/EDR/XDR, with opportunities to advance into threat hunting, incident response, or engineering within a

Qualifications

• Foundational cybersecurity or IT support experience.
• Willingness to work in a shift-based SOC environment.
• Degree in Cybersecurity/IT or equivalent practical experience.

Responsibilities

• Monitor and triage security alerts across SIEM, EDR, XDR and other detection technologies.
• Investigate potential security incidents and escalate according to processes.
• Collaborate with senior analysts and threat response teams to resolve incidents efficiently.
• Maintain detailed documentation of investigations and actions taken.
• Provide guidance and support to clients on incident handling and mitigation.
• Assist in the creation and tuning of detection rules and queries.
• Stay current on emerging threats and security technologies.
• Experience with SIEM platforms and log analysis; familiarity with KQL is beneficial.

Skills

Attention to detail

Communication

Documentation

Analytical thinking

Team collaboration

Education

Degree in Cybersecurity/IT

Tools

Microsoft Sentinel

Defender XDR

CrowdStrike Falcon

Rapid7

Microsoft Defender for Endpoint

KQL

Job description

Join the front line of cyber defence as a Level 1 SOC Analyst, where you’ll play a vital role in monitoring and responding to real-time security threats across diverse client environments. This is an ideal opportunity for someone with foundational cybersecurity or IT support experience who wants to accelerate their career in threat detection and incident response. You’ll work with cutting-edge tools such as Microsoft Sentinel, Defender XDR, CrowdStrike Falcon, Rapid7 and Microsoft Defender for Endpoint, while learning directly from experienced analysts in a supportive, growth-focused environment.

Why this role stands out:

• Hands-on exposure to live security operations and real-world incidents
• Mentorship from experienced analysts to fast-track your development
• The chance to make a real impact protecting clients from evolving cyber threats

• Monitor and triage security alerts across SIEM, EDR, XDR and other detection technologies
• Investigate potential security incidents and escalated in line with established processes
• Collaborate with senior analysts and threat response teams to resolve incidents efficiently
• Maintain detailed documentation of investigations, incidents and actions taken
• Provide guidance and support to clients on incident handling and mitigation
• Support the creation and tuning of detection rules, threat-hunting queries and analytics
• Stay current on emerging threats, attacker behaviours and new security technologies
• Experience with SIEM platforms (e.g. Microsoft Sentinel, Rapid7) and log analysis
• Ability to query and interpret log data; familiarity with KQL is beneficial
• Exposure to EDR tools such as CrowdStrike, Microsoft Defender for Endpoint or Carbon Black
• Understanding of malware behaviour, IoCs and basic analysis techniques
• Knowledge of networking fundamentals (TCP/IP, DNS, HTTP/S, SMB, RDP) and core security concepts (IDS/IPS, firewalls, VPNs)
• Familiarity with cloud security monitoring, especially in Microsoft Azure
• Degree in Cybersecurity/IT or equivalent practical experience
• Strong attention to detail, process-driven approach, and excellent written and verbal communication
• Willingness to work in a collaborative, shift-based SOC environment
• Security-minded, ethical attitude with a desire to continuously learn

Desirable (not mandatory):

• Security Blue Team BTL1
• Career progression pathways into threat hunting, incident response, engineering or senior SOC roles
• Hands-on experience with industry-leading security tools and real-world incidents
• Mentorship from experienced analysts to accelerate your development
• Support for certifications and ongoing professional training
• A collaborative, high-growth environment with access to diverse client environments

#SOCAnalyst #L1SOC #CyberSecurity #MicrosoftSentinel #CrowdStrike #DefenderXDR #Rapid7 #EntryLevelCyberSecurity #UKJobs #InfoSecJobs