26 to 50 of 135 Azure Sentinel Jobs in England

custom log parsing. Solid understanding of networking concepts (TCP/IP, firewalls, proxies, VPNs) and security protocols. Familiarity with cloud security principles, Azure, GCP, AWS Working knowledge over a range of operating systems and platforms including: Windows Server, Windows XP, UNIX (Solaris, Linux), Working knowledge of networks … industry certifications (e.g., AZ-500, SC-200, SC-900, CompTIA Security+) or similar Cert with Security Orchestration, Automation, and Response (SOAR) playbooks within Sentinel or other platforms. Scripting skills (PowerShell, Python) for automation and data manipulation. What Mizuho Can Offer You Here at Mizuho, there are fantastic progression ...

Microsoft Platform Engineer (Azure & Microsoft 365) Wembley - Fully On-Site 5 DAYS A WEEK £50,000 per annum + Permanent Benefits We're seeking a Senior Microsoft Platform Engineer to join a growing technology team responsible for maintaining and enhancing a complex hybrid estate spanning on-premises infrastructure … Teams, SharePoint Online, OneDrive and Intune Managing identity and access across Active Directory and Entra ID Designing and supporting hybrid cloud infrastructure across Azure and on-premises environments Implementing and maintaining SSO, MFA and Conditional Access policies Supporting Microsoft 365 security, compliance and governance initiatives Managing hybrid connectivity ...

platform that’s quick, secure and resilient for customers, and easy, modern and sustainable for developers. Our core technology focus is on Microsoft Azure and Google Cloud PlatformWe’re looking for an experienced, motivated and innovative Cloud‐focused DevOps Engineer to join our Google Cloud team. ...

Security Architecture Frameworks Familiarity with: NCSC Cloud Security Principles ISO 27001 NIST Cybersecurity Framework CIS Controls OWASP Technical Experience Cloud Platforms AWS Microsoft Azure Google Cloud Platform (GCP) Security Technologies Microsoft Defender Suite Splunk Microsoft Sentinel CrowdStrike Prisma Cloud Wiz Lacework Tenable Qualys Infrastructure & DevOps Kubernetes … Tooling Scripting & Automation Python PowerShell Bash Preferred Certifications CISSP (Certified Information Systems Security Professional) CCSP (Certified Cloud Security Professional) SABSA TOGAF Microsoft Certified: Azure Security Engineer Associate Google Professional Cloud Security Engineer CRISC CISM Reasonable Adjustments: Respect and equality are core values to us. We are proud ...

support and guidance, helping customers optimize their security defenses and mitigate risks effectively. Microsoft Focus: Utilize your knowledge of Microsoft security products, including Azure, Microsoft Sentinel, KQL, and the Microsoft Defender suite, to offer tailored recommendations and solutions. Relationship Building: Build and nurture strong relationships with … levels of business and providing informal leadership in cyber security matters. Strong understanding of Microsoft security products and technologies, with proficiency in Azure, Microsoft Sentinel, KQL, and the Microsoft Defender suite or related product lines. Deep understanding of attacker tradecraft and security hardening techniques, enabling ...

operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment. While Microsoft technologies (Microsoft 365, Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi layered networking, security, data management … zero‐trust security principles to enhance protection across cloud platforms. Manage identity and access management (IAM) in a cloud‐first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud‐native security solutions such as Microsoft ...

risk assessments, threat modelling, and vulnerability management. Ensure compliance with UK GDPR, data protection regulations, and organisational policies. Cloud & Technology Security Hands-on Azure cloud security experience, including implementation and operation of Microsoft Defender security tools (e.g., Defender for Cloud, Defender for Endpoint, Defender for Identity, Defender … access management (IAM), Privileged Identity Management (PIM) encryption, and network security controls. Design and run SIEM/SOAR use-cases in Microsoft Sentinel (data connectors, analytics rules, workbooks, automation playbooks) to support SOC operations, threat detection, and incident response. Support DevSecOps practices and secure software development. Governance & Awareness ...

/ML concepts and their application to identity and security data. Familiarity with Microsoft security and analytics tools such as Entra ID logs, Azure Monitor, Log Analytics and Sentinel. Exposure to Privileged Access Management (PAM) and role‐based privileged access. Understanding of data governance, responsible AI and information ...

knowledge of Windows and Linux operating environments, including standard commands, file systems, and user authentication mechanisms. Competence in using SIEM solutions (e.g., ArcSight, Azure Sentinel) for monitoring and log analysis; some exposure to additional analysis tools such as basic XDR platforms. Able to demonstrate proficient knowledge ...

operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment. While Microsoft technologies (Microsoft 365, Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi layered networking, security, data management … zero‐trust security principles to enhance protection across cloud platforms. Manage identity and access management (IAM) in a cloud‐first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud‐native security solutions such as Microsoft ...

SIEM Engineer (SC Cleared) for a Reading/Havant based 6-month contract. The role focuses on onboarding log sources into Microsoft Sentinel, developing parsers, and creating automated detection and response workflows. Responsibilities include tuning KQL queries, building analytic rules, and deploying SIEM content via CI/ ...

SIEM Engineer (SC Cleared) for a Reading/Havant based 6-month contract. The role focuses on onboarding log sources into Microsoft Sentinel, developing parsers, and creating automated detection and response workflows. Responsibilities include tuning KQL queries, building analytic rules, and deploying SIEM content via CI/ ...

Managers while acting as the lead security voice with customers. Technical credibility across the Microsoft security ecosystem, including Defender, Entra ID, Microsoft 365, Azure, Sentinel, and Purview, alongside broader cyber security domains. Excellent communication and presentation skills, with the ability to engage senior stakeholders, deliver compelling ...

across cloud, identity, endpoint and network platforms, and carry out malware analysis and threat validation. Design, implement and optimise detection content across Microsoft Sentinel, Defender XDR, CrowdStrike and associated platforms, developing advanced KQL queries and analytics rules aligned to MITRE ATT&CK. Act as senior technical owner … security platforms including Microsoft Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune, Darktrace and supporting technologies, managing platform health, onboarding and configuration. Design and maintain automation and orchestration workflows using Logic Apps, Sentinel Playbooks, Power Automate, PowerShell, Python and API integrations to reduce manual operational effort. ...

across the Club, promoting practical security behaviours and helping teams understand and manage information security risks. Work with Microsoft security technologies, including Defender, Sentinel, Entra ID, Intune and Purview, supporting monitoring, investigation, configuration review and control improvement activity. Support supplier and third‐party security assurance activities, including security … Experience of investigating security alerts, vulnerabilities, incidents or control weaknesses in a business environment. Knowledge of Microsoft 365 security technologies, ideally including Defender, Sentinel, Entra ID, Intune and Purview. Understanding of cyber security frameworks and standards such as ISO 27001, Cyber Essentials, PCI DSS and NIST. Experience working ...

here to architect secure cloud environments, build and enhance detection logic at scale, and drive measurable improvements to our security baseline across AWS, Azure, and GCP. You will partner closely with Engineering, GRC, Technology Risk and Security Operations - defining standards, fine tuning the SIEM, and progressively taking … detection engineering challenges across the organisation. What you’ll be responsible for Cloud Security Secure and continuously improve our multi-cloud estate (AWS, Azure, GCP) using cloud native tooling to keep our cloud infrastructure hardened and compliant Partner with Engineering and Security Operation team to make security ...

Microsoft Intune, Windows Autopilot, endpoint security, device compliance and configuration management. Manage application deployment, MDM/MAM, device lifecycle, patching and operational compliance. Azure Infrastructure & Cloud Services Design, deploy and support Azure environments, including virtual machines, storage, networking, backup and recovery. Support hybrid cloud, migration, automation … resilient, available and well-optimised. Troubleshoot complex infrastructure, network and virtualisation issues. Cyber Security & Compliance Lead cyber security initiatives and administer Microsoft Defender, Sentinel and Purview services. Monitor alerts, investigate incidents, manage vulnerabilities, conduct risk reviews and maintain security baselines. Support compliance, audits, business continuity and disaster recovery ...

Doing You'll take technical ownership across a broad security landscape, including: Designing and implementing security architecture across Microsoft 365, Azure, Entra ID, Defender XDR, Sentinel and Purview Building modern security controls around Zero Trust, secure-by-design and automation Leading architecture reviews and threat modelling … external SOC partners Strengthening vulnerability and exposure management using threat intelligence, exploitability and business risk Automating security processes using Python, PowerShell, Logic Apps, Azure Functions and APIs Supporting technical controls and evidence for ISO 27001 and Cyber Essentials Plus Acting as a senior security SME and helping technology ...

Cortex XDR. Data Protection & Compliance Support and monitor the company's Data Loss Prevention controls within Microsoft Purview, and data classification through Azure Information Protection labelling. Help maintain the evidence and controls that support the company's accreditations, including ISO/IEC 27001, 27017, and 27018, Cyber Essentials … Request, Change, and Problem management. Understanding of GDPR, data protection, and information governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience with Endpoint Detection ...

moves effectively between operational incidents, control reviews, stakeholder requests, and security improvement initiatives. Key Responsibilities Investigate and respond to security alerts from Microsoft Sentinel, Microsoft Defender XDR, endpoint security tools, and other monitoring platforms; gather evidence, review logs, coordinate containment, and document findings through resolution. Manage security incidents … phishing‐submission review, policy tuning, and investigation of SPF, DKIM, and DMARC failures. Administer assigned Microsoft security platforms, including Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra ID, and Microsoft Purview, using least‐privilege and formal change‐management practices. Support the secure adoption and operation of approved artificial intelligence ...

initially lead a major enterprise migration from an incumbent endpoint detection and limited-hours outsourced monitoring model to Microsoft Defender XDR and Microsoft Sentinel, transitioning into a Cyro-managed SOC. The successful candidate will own the engagement from discovery and target-state design through migration, assurance and service … strategies, target operating models, service boundaries, responsibilities, escalation paths, service levels and transition plans for client-operated and managed SOC services. Design Microsoft Sentinel and Defender XDR solutions, including Defender for Endpoint, Defender for Identity, Defender for Office 365 and Defender for Cloud Apps where relevant, making effective ...

exception and risk acceptance process: assess compensating controls, document residual risk, and obtain formal sign-off. Integrate VM tooling with SIEM (Splunk, Microsoft Sentinel), ITSM (ServiceNow VR module), and CMDB for automated ticket creation and asset correlation. Automate vulnerability reporting and remediation tracking using Python, REST APIs (Qualys … Automation and API integration: Python scripting, REST API calls to Qualys/Tenable/Rapid7; ServiceNow VR module configuration. SIEM integration: Splunk, Microsoft Sentinel – correlating vulnerability data with threat events. CMDB-driven asset correlation: ServiceNow CMDB, ensuring VM data reflects accurate asset inventory. Network and infrastructure knowledge sufficient ...

writing and presenting solutions for new opportunities; scoping technical effort accurately; and giving prospects the confidence to choose us. Behind that sits genuine Azure depth, enough to design the solution yourself, guide the engineers who build it, and step in as the senior technical authority when a complex … proposals and signed engagements. Own the architecture. Produce high-level and low-level designs for secure, scalable, resilient cloud solutions primarily on Microsoft Azure and hand them into delivery with clarity and confidence. Act as senior technical authority. Be the escalation point our delivery and support teams call ...

writing and presenting solutions for new opportunities; scoping technical effort accurately; and giving prospects the confidence to choose us. Behind that sits genuine Azure depth, enough to design the solution yourself, guide the engineers who build it, and step in as the senior technical authority when a complex … proposals and signed engagements. • Own the architecture. Produce high-level and low-level designs for secure, scalable, resilient cloud solutions — primarily on Microsoft Azure — and hand them into delivery with clarity and confidence. • Act as senior technical authority. Be the escalation point our delivery and support teams call ...

traditional Active Directory services towards a cloud-first Entra ID architecture Design and manage hybrid identity solutions across Active Directory, Entra ID and Azure Implement and enhance SSO, Conditional Access, MFA and passwordless authentication capabilities Drive identity governance initiatives including RBAC, PIM, access reviews and entitlement management Lead … level presentations Support the retirement of legacy authentication methods and infrastructure services Automate IAM and infrastructure processes using PowerShell, Microsoft Graph API and Azure tooling Provide technical leadership across identity-related projects and mentor colleagues where required Required Experience 5+ years' experience in Identity & Access Management, Infrastructure Engineering ...