Senior SOC Analyst: Lead Investigations & Response

Hamilton Barnes; United Kingdom; On-site; GBP 60,000 - 90,000; Full time

Benefits offered by this job

25 days annual leave

Monthly home-working allowance

Home-working setup allowance

GP access 24/7

Employee Assistance Programme

Private health insurance (after 1 year

Life assurance (4x salary)

Cycle to Work

EV scheme

Job summary

Hamilton Barnes is seeking a 3rd Line Security Analyst to join its Security Operations Centre in the United Kingdom. You will act as the senior escalation point for complex incidents, lead investigations and threat hunting, and mentor junior analysts while improving SOC capabilities.

We work with Microsoft security tools (Sentinel, Defender, Entra ID, Azure, Intune) and require clear communication to describe risk and remediation to customers; you will strengthen detection analytics and

Qualifications

• Significant experience in Security Operations Centre including complex investigations and high-impact incidents.
• Strong knowledge of Microsoft security ecosystem (Sentinel, Defender, Entra ID, Azure, Intune).
• Experience in threat hunting, detection engineering and advanced investigations using KQL.
• Understanding of security automation and development/optimisation of detection rules and analytics.
• Broad knowledge of modern security architecture across cloud, identity, endpoint, and network security.

Responsibilities

• Lead complex security investigations and incident response activities to minimise customer impact.
• Act as the senior technical escalation point for critical security events and major incidents.
• Conduct proactive threat hunting across customer environments using Microsoft security technologies.
• Improve detection capabilities by refining analytics, automation, and investigation workflows.
• Evaluate customer security environments and recommend improvements across cloud, identity, endpoint and network security.
• Collaborate with security engineering and SOC leadership to enhance tooling, playbooks and processes.
• Mentor junior analysts and share knowledge to raise team capabilities.
• Communicate incident findings and remediation recommendations clearly to customers.

Skills

SOC experience

Microsoft security

KQL

Threat hunting

Incident response

Communication

Tools

Microsoft Sentinel

Microsoft Defender

Entra ID

Azure

Intune

Job description

Hamilton Barnes is seeking a 3rd Line Security Analyst to join its Security Operations Centre in the United Kingdom. You will act as the senior escalation point for complex incidents, lead investigations and threat hunting, and mentor junior analysts while improving SOC capabilities.

We work with Microsoft security tools (Sentinel, Defender, Entra ID, Azure, Intune) and require clear communication to describe risk and remediation to customers; you will strengthen detection analytics and