L3 SOC Analyst in Newcastle upon Tyne

3rd Line Security Analyst, Threat Detection & Response

The Opportunity

Hamilton Barnes is working in partnership with a growing technology services business specialising in Microsoft Cloud solutions and managed cybersecurity services.

They are looking to appoint an experienced

3rd Line Security Analyst to join their expanding Threat Detection & Response function.

This is an excellent opportunity for an established SOC professional to step into a senior technical position, taking ownership of complex security incidents, leading advanced investigations and helping shape the ongoing development of a modern security operations capability.

Reporting directly to the Threat Detection & Response Lead, you will act as the primary technical escalation point for 1st and 2nd Line analysts, dealing with high-severity incidents, sophisticated threats and complex customer environments.

Beyond incident response, the position offers considerable scope to get involved in proactive threat hunting, detection engineering and continuous service improvement.

You'll have the opportunity to influence technical standards, improve detection capabilities and mentor less experienced analysts, all while working extensively across the Microsoft security ecosystem.

For someone looking to combine hands-on technical security work with greater ownership, customer interaction and technical leadership, this is a particularly strong opportunity.

Key Responsibilities

• Lead complex security investigations and manage high-severity incidents, overseeing containment, remediation and recovery activities.
• Act as the senior technical escalation point for critical security events, major incidents and emerging threats.
• Conduct proactive threat hunting across customer environments, leveraging Microsoft security technologies to uncover suspicious activity and previously unidentified threats.
• Develop and enhance detection capabilities through improved analytics, automation, threat intelligence and investigation workflows.
• Assess customer security environments, identifying vulnerabilities and recommending improvements across cloud, identity, endpoint and network security.
• Work alongside SOC leadership and security engineering teams to improve tooling, playbooks, processes and operational standards.
• Provide technical mentorship and guidance to junior analysts, helping develop the wider team's capabilities.
• Engage directly with customers, clearly communicating incident findings, security risks and practical remediation recommendations.
• Collaborate with wider cybersecurity and customer success teams to continually improve service delivery and customer security outcomes.
• Technical Experience & Requirements

The successful candidate will ideally bring

• Significant experience within a Security Operations Centre, particularly across complex investigations, escalations and incident response.
• Experience developing or optimising detection rules, analytics, automation and incident investigation processes.
• A broad understanding of modern security architecture, spanning cloud platforms, identity, endpoint protection and network security.
• The ability to assess security risks, identify weaknesses and translate technical findings into actionable recommendations.
• Confident communication skills, with experience engaging technical teams and customer stakeholders.
• Previous experience mentoring analysts or providing technical guidance within a SOC environment.
• Relevant cybersecurity certifications would be advantageous.

What's on Offer?

The business places significant emphasis on employee development, collaboration and creating an environment where technical professionals can progress and develop their expertise.

Alongside a competitive salary, the benefits package includes

• Opportunity to work for a recognised
• World Class Best Company
• 25 days annual leave.
• Monthly home-working allowance.
• Additional allowance towards home-working equipment and setup.
• 24/7 access to a GP service.
• Round-the-clock Employee Assistance Programme.
• Company sick pay.
• Life assurance worth four times your base salary.
• Private health insurance after one year of service.
• Enhanced parental leave and pay.
• Perkbox discounts and employee rewards.
• Cycle to Work scheme.
• Electric vehicle scheme.
• Further professional development opportunities and additional employee benefits.

Why Consider This Opportunity?

This isn't simply another SOC analyst position.

It's an opportunity to operate at the senior end of security operations, take ownership of the incidents that matter most and have a genuine influence on how a growing security function operates.

You'll be working with a strong Microsoft security stack, tackling technically challenging investigations and helping develop the capabilities of the wider team, with direct exposure to both technical leadership and customers.