L3 SOC Analyst - Systems Integrator

Hamilton Barnes; North East; On-site; GBP 45,000 - 70,000; Full time

Benefits offered by this job

Travel benefits

Health Cash Plan

Cycle to Work Scheme

Network Benefits

Employee Assistance Programme

Enhanced annual leave

Enhanced pension scheme

Technology purchase scheme

Electric vehicle salary sacrifice

Employee referral scheme

New business referral scheme

Discounted gym membership

Life assurance and critical illness

Job summary

Hamilton Barnes is recruiting a Cyber Security Analyst L3 to lead senior technical work in our Security Operations Centre at Gateshead. You will investigate incidents, tune threat detection, and mentor other SOC analysts.

You will use CrowdStrike, Microsoft Sentinel and XDR to triage alerts, coordinate containment, and communicate findings clearly to clients. The role is full-time, 37.5 hours per week, with some shift coverage.

Qualifications

• Experience conducting security investigations and triaging complex alerts.
• Ability to investigate, contain and remediate sophisticated security incidents.
• Strong understanding of incident response processes and post-incident reviews.
• Knowledge of threat intelligence and its application within security operations.

Responsibilities

• Conduct in-depth investigations into malicious incidents and complex security alerts escalated by other analysts.
• Act as the primary escalation point for L2 Analysts, providing technical guidance on complex investigations.
• Investigate, contain and remediate security incidents, ensuring threats are addressed effectively.
• Mentor, coach and support the development of other SOC analysts.
• Assist with incident response activities and post-incident reviews.
• Manage multiple concurrent incidents and requests, prioritising workloads in line with established procedures and best practices.
• Identify opportunities to improve SOC processes, operational efficiency and incident response capabilities.
• Support the automation of manual processes to improve productivity and consistency.
• Contribute to the continuous improvement of security monitoring, detection and investigation processes.
• Communicate security incidents, findings and recommendations clearly to customers and stakeholders.

Skills

Security investigations

Incident escalation

Analytical skills

Communication skills

Mentoring

Customer service

Workload management

Tools

CrowdStrike

Microsoft Sentinel

Microsoft XDR

Job description

Join a leading UK provider of managed IT, cyber security, and modern workplace solutions, supporting over 2,000 customers with a team of more than 300 experts across cloud, connectivity, managed services, and unified communications. Driven by innovation, technical excellence, and exceptional customer service, the organization values people who are passionate about technology, think creatively, and are committed to continuous improvement.

The company is looking to appoint a Cyber Security Analyst L3 to take a senior technical role within its growing Security Operations Centre. The ideal candidate will conduct in-depth investigations, respond to complex security incidents, and improve threat detection through ongoing tuning, acting as the primary escalation point for L2 Analysts and overseeing containment and remediation. Strong communication skills are essential, along with the ability to support the development of less experienced analysts.

Responsibilities:

• Conduct in-depth investigations into malicious incidents and complex security alerts escalated by other analysts.
• Act as the primary escalation point for L2 Analysts, providing technical guidance on complex investigations.
• Investigate, contain and remediate security incidents, ensuring threats are addressed effectively.
• Mentor, coach and support the development of other SOC analysts.
• Assist with incident response activities and post-incident reviews.
• Manage multiple concurrent incidents and requests, prioritising workloads in line with established procedures and best practices.
• Identify opportunities to improve SOC processes, operational efficiency and incident response capabilities.
• Support the automation of manual processes to improve productivity and consistency.
• Contribute to the continuous improvement of security monitoring, detection and investigation processes.
• Communicate security incidents, findings and recommendations clearly to customers and stakeholders.

Skill/Must Have:

• Experience using security monitoring tools such as CrowdStrike, Microsoft Sentinel and Microsoft XDR.
• Strong experience conducting security investigations and triaging complex alerts.
• The ability to investigate, contain and remediate sophisticated security incidents.
• A solid understanding of incident response processes and post-incident reviews.
• Knowledge of threat intelligence and its application within security operations.
• Experience acting as an escalation point for other analysts or providing technical guidance within a SOC environment.
• Strong analytical and problem-solving skills, with the ability to manage complex investigations independently.
• Excellent communication skills, including the ability to explain technical security issues to non-technical audiences.
• Strong customer service skills and the ability to manage customer calls and correspondence professionally.
• The ability to prioritise workloads effectively while managing multiple incidents and requests.
• A collaborative approach, with an interest in mentoring colleagues and sharing technical knowledge.
• A proactive mindset, with a focus on continuous improvement and operational efficiency.

Desirable Skills:

• Blue Team Level 1 (BTL1).
• TryHackMe Level 1.
• SANS / GIAC certifications.
• Microsoft SC-200.
• CrowdStrike Certified Falcon Responder (CCFR).
• A strong understanding of incident response operations, alongside relevant qualifications or specialist training in incident response, would also be beneficial.
• The business recognises that candidates may not possess every qualification or experience listed above. Continuous learning and professional development remain key priorities, with opportunities to further develop technical expertise and progress within the organisation.
• Candidates who are passionate about cyber security, committed to maintaining high standards and motivated to continually improve their capabilities are encouraged to apply.

Location & Working Pattern:

• The role is based at the company's head office on Gateshead Quayside, with travel required as necessary.
• The position is full-time, working 37.5 hours per week, Monday to Friday. Some flexibility may occasionally be required to provide shift cover.

Benefits:

• Travel benefits, including free parking and subsidised travel passes.
• Health Cash Plan.
• Cycle to Work Scheme.
• Network Benefits.
• Employee Assistance Programme.
• Enhanced annual leave, increasing with length of service.
• Enhanced maternity, paternity and parental leave schemes.
• Enhanced pension scheme.
• Technology purchase scheme.
• Electric vehicle salary sacrifice scheme.
• Employee referral scheme.
• New business referral scheme.
• Discounted gym membership.
• Life assurance and critical illness cover.

Salary:

• £45,000 to £70,000 per annum (depending on experience)