L3 SOC Analyst (Threat Detection and Response) - Systems Integrator
- Competitive salary based on experience and qualifications
- United Kingdom
- Permanent
- Enterprise Security
- Cyber Analysts
Looking for a role with plenty of growth opportunities?
Join a growing technology services business and managed cybersecurity provider dedicated to delivering Microsoft Cloud and enterprise security solutions. Built on a culture of collaboration, continuous learning, and operational excellence, the organization empowers clients to protect critical environments, strengthen security postures, and achieve digital transformation through expert technical support.
The organization is expanding its team and is looking to appoint a 3rd Line Security Analyst. Operating within the Security Operations Centre (SOC), the successful candidate will serve as the senior technical escalation point for complex incidents and security breaches. Core responsibilities include leading advanced security investigations, coordinating incident containment and remediation, conducting proactive threat hunting, and enhancing SOC operational capabilities while working alongside threat detection leadership and mentoring junior analysts.
Ready to make a move? Get in touch and apply today!
Responsibilities:
- Lead complex security investigations and incident response activities, coordinating containment, remediation and recovery to minimise customer impact.
- Act as the senior technical escalation point for critical security events, major incidents and emerging threats.
- Conduct proactive threat hunting across customer environments using Microsoft security technologies to identify suspicious activity and potential threats.
- Improve detection capabilities by refining analytics, automation, threat intelligence and investigation workflows.
- Evaluate customer security environments, identify weaknesses and recommend practical improvements across cloud, identity, endpoint and network security.
- Work with security engineering and SOC leadership to enhance tooling, playbooks, processes and operational standards.
- Provide technical guidance and mentorship to junior analysts, sharing knowledge and helping develop the wider team's capabilities.
- Build strong customer relationships, communicating incident findings, security risks and remediation recommendations clearly and effectively.
- Collaborate with wider cybersecurity and customer success teams to continually improve service delivery and customer security outcomes.
Skills/Must Have:
- Significant experience working within a Security Operations Centre, with a background in complex investigations, escalations and high-impact incident response.
- Strong technical knowledge of the Microsoft security ecosystem, including Microsoft Sentinel, Defender, Entra ID, Azure and Intune.
- Experience in threat hunting, detection engineering and advanced security investigations, including the use of Kusto Query Language (KQL).
- Understanding of security automation and the development or optimisation of detection rules, analytics and investigation processes.
- Broad knowledge of modern security architecture, including cloud platforms, identity, endpoint protection and network security.
- Ability to assess security risks, identify weaknesses and translate technical findings into actionable recommendations.
- Strong communication skills, with the confidence to explain complex security issues to both technical teams and customer stakeholders.
- Experience mentoring analysts, sharing technical knowledge and promoting consistent best practice within security operations.
- A proactive, organised and customer-focused approach, with the ability to prioritise competing demands and perform effectively under pressure.
- Relevant cybersecurity certifications would be advantageous.
Benefits:
- The opportunity to work for a recognised World Class Best Company.
- 25 days of annual leave.
- Monthly home-working allowance.
- Additional allowance to support your home-working setup.
- 24/7 access to a GP service.
- Immediate access to a round-the-clock Employee Assistance Programme.
- Company sick pay.
- Life assurance worth four times your base salary.
- Private health insurance following one year of service.
- Enhanced parental leave and pay.
- Access to Perkbox discounts and employee rewards.
- Cycle to Work scheme.
- Electric vehicle scheme.
Equality, Diversity and Inclusion:
- Committed to creating an inclusive workplace where everyone has the opportunity to succeed
- A recruitment approach that recognises talent comes from a wide range of backgrounds and experiences, with all candidates treated fairly throughout the hiring process
- Active support for employee wellbeing, equal opportunities and a working environment where individual differences are valued
- Candidates who would like further information about disability inclusion commitments can request this during the recruitment process
Salary:
- Competitive salary based on experience and qualifications