L3 SOC Analyst (Threat Detection and Response) - Systems Integrator

Hamilton Barnes; United Kingdom; On-site; GBP 60,000 - 90,000; Full time

Benefits offered by this job

25 days annual leave

Monthly home-working allowance

Home-working setup allowance

GP access 24/7

Employee Assistance Programme

Private health insurance (after 1 year

Life assurance (4x salary)

Cycle to Work

EV scheme

Job summary

Hamilton Barnes is seeking a 3rd Line Security Analyst to join its Security Operations Centre in the United Kingdom. You will act as the senior escalation point for complex incidents, lead investigations and threat hunting, and mentor junior analysts while improving SOC capabilities.

We work with Microsoft security tools (Sentinel, Defender, Entra ID, Azure, Intune) and require clear communication to describe risk and remediation to customers; you will strengthen detection analytics and

Qualifications

• Significant experience in Security Operations Centre including complex investigations and high-impact incidents.
• Strong knowledge of Microsoft security ecosystem (Sentinel, Defender, Entra ID, Azure, Intune).
• Experience in threat hunting, detection engineering and advanced investigations using KQL.
• Understanding of security automation and development/optimisation of detection rules and analytics.
• Broad knowledge of modern security architecture across cloud, identity, endpoint, and network security.

Responsibilities

• Lead complex security investigations and incident response activities to minimise customer impact.
• Act as the senior technical escalation point for critical security events and major incidents.
• Conduct proactive threat hunting across customer environments using Microsoft security technologies.
• Improve detection capabilities by refining analytics, automation, and investigation workflows.
• Evaluate customer security environments and recommend improvements across cloud, identity, endpoint and network security.
• Collaborate with security engineering and SOC leadership to enhance tooling, playbooks and processes.
• Mentor junior analysts and share knowledge to raise team capabilities.
• Communicate incident findings and remediation recommendations clearly to customers.

Skills

SOC experience

Microsoft security

KQL

Threat hunting

Incident response

Communication

Tools

Microsoft Sentinel

Microsoft Defender

Entra ID

Azure

Intune

Job description

Looking for a role with plenty of growth opportunities?

Join a growing technology services business and managed cybersecurity provider dedicated to delivering Microsoft Cloud and enterprise security solutions. Built on a culture of collaboration,continuous learning,and operational excellence,the organization empowers clients to protect critical environments,strengthen security postures,and achieve digital transformation through expert technical support.

The organization is expanding its team and is looking to appoint a 3rd Line Security Analyst.Operating within the Security Operations Centre (SOC),the successful candidate will serve as the senior technical escalation point for complex incidents and security breaches.Core responsibilities include leading advanced security investigations,coordinating incident containment and remediation,conducting proactive threat hunting,and enhancing SOC operational capabilities while working alongside threat detection leadership and mentoring junior analysts.

Responsibilities:

• Lead complex security investigations and incident response activities, coordinating containment, remediation and recovery to minimise customer impact.
• Act as the senior technical escalation point for critical security events, major incidents and emerging threats.
• Conduct proactive threat hunting across customer environments using Microsoft security technologies to identify suspicious activity and potential threats.
• Improve detection capabilities by refining analytics, automation, threat intelligence and investigation workflows.
• Evaluate customer security environments, identify weaknesses and recommend practical improvements across cloud, identity, endpoint and network security.
• Work with security engineering and SOC leadership to enhance tooling, playbooks, processes and operational standards.
• Provide technical guidance and mentorship to junior analysts, sharing knowledge and helping develop the wider team's capabilities.
• Build strong customer relationships, communicating incident findings, security risks and remediation recommendations clearly and effectively.
• Collaborate with wider cybersecurity and customer success teams to continually improve service delivery and customer security outcomes.

Skills/Must Have:

• Significant experience working within a Security Operations Centre, with a background in complex investigations, escalations and high-impact incident response.
• Strong technical knowledge of the Microsoft security ecosystem, including Microsoft Sentinel, Defender, Entra ID, Azure and Intune.
• Experience in threat hunting, detection engineering and advanced security investigations, including the use of Kusto Query Language (KQL).
• Understanding of security automation and the development or optimisation of detection rules, analytics and investigation processes.
• Broad knowledge of modern security architecture, including cloud platforms, identity, endpoint protection and network security.
• Ability to assess security risks, identify weaknesses and translate technical findings into actionable recommendations.
• Strong communication skills, with the confidence to explain complex security issues to both technical teams and customer stakeholders.
• Experience mentoring analysts, sharing technical knowledge and promoting consistent best practice within security operations.
• A proactive, organised and customer-focused approach, with the ability to prioritise competing demands and perform effectively under pressure.
• Relevant cybersecurity certifications would be advantageous.

Benefits:

• The opportunity to work for a recognised World Class Best Company.
• 25 days of annual leave.
• Monthly home-working allowance.
• Additional allowance to support your home-working setup.
• 24/7 access to a GP service.
• Immediate access to a round-the-clock Employee Assistance Programme.
• Company sick pay.
• Life assurance worth four times your base salary.
• Private health insurance following one year of service.
• Enhanced parental leave and pay.
• Access to Perkbox discounts and employee rewards.
• Cycle to Work scheme.
• Electric vehicle scheme.

Equality, Diversity and Inclusion:

• Committed to creating an inclusive workplace where everyone has the opportunity to succeed
• A recruitment approach that recognises talent comes from a wide range of backgrounds and experiences, with all candidates treated fairly throughout the hiring process
• Active support for employee wellbeing, equal opportunities and a working environment where individual differences are valued
• Candidates who would like further information about disability inclusion commitments can request this during the recruitment process

Salary:

• Competitive salary based on experience and qualifications