51 to 75 of 149 Azure Sentinel Jobs in England

here to architect secure cloud environments, build and enhance detection logic at scale, and drive measurable improvements to our security baseline across AWS, Azure, and GCP. You will partner closely with Engineering, GRC, Technology Risk and Security Operations - defining standards, fine tuning the SIEM, and progressively taking … detection engineering challenges across the organisation. What you’ll be responsible for Cloud Security Secure and continuously improve our multi-cloud estate (AWS, Azure, GCP) using cloud native tooling to keep our cloud infrastructure hardened and compliant Partner with Engineering and Security Operation team to make security ...

writing and presenting solutions for new opportunities; scoping technical effort accurately; and giving prospects the confidence to choose us. Behind that sits genuine Azure depth, enough to design the solution yourself, guide the engineers who build it, and step in as the senior technical authority when a complex … proposals and signed engagements. Own the architecture. Produce high-level and low-level designs for secure, scalable, resilient cloud solutions primarily on Microsoft Azure and hand them into delivery with clarity and confidence. Act as senior technical authority. Be the escalation point our delivery and support teams call ...

breadcrumbs - fully integrated with Microsoft Defender XDR (Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps), Microsoft Sentinel, and Microsoft Security Copilot. The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps … Defender XDR across endpoint, identity, email, and cloud-app workloads. Integrate all deception signals (honeypot, honeytoken, decoy, breadcrumb) into Defender XDR and Microsoft Sentinel as first-class, high-fidelity detections. Define and enforce a unified detection and response strategy across the Microsoft security stack. Data Protection, DLP & Insider ...

Code (IaC), CI/CD, and DevSecOps practices. What you'll do Design, build, and manage complex cloud environments using GCP and Azure, ensuring adherence to architectural guardrails and tagging standards. Develop and maintain secure, multi-region, multi-account cloud landing zones using automation frameworks. Implement advanced networking … using Terraform, CloudFormation, and Ansible for repeatable, auditable deployments. Integrate IaC pipelines with version control (Git), automated testing, and policy-as-code (e.g., Sentinel, OPA) for compliance enforcement. Champion GitOps and immutable infrastructure patterns. CI/CD & DevOps: Build and optimize CI/CD pipelines (Azure ...

Linux environments. Scripting and automation experience using PowerShell and/or Python. Understanding of networking, Firewalls, proxies, VPNs and enterprise infrastructure. Exposure to Azure, AWS or other cloud platforms. Knowledge of security frameworks such as NIST, CIS Controls, ISO27001 and MITRE ATT&CK would be advantageous. Additional Experience … Interest Microsoft Sentinel or other SIEM platforms. Threat Detection Engineering and Threat Hunting. Security Automation and SOAR technologies. Identity Security and Zero Trust initiatives. ) Secrets Management and Certificate Management. EDR, DLP and broader enterprise security tooling. What's on Offer Opportunity to join a highly regarded financial services ...

moves effectively between operational incidents, control reviews, stakeholder requests, and security improvement initiatives. Key Responsibilities Investigate and respond to security alerts from Microsoft Sentinel, Microsoft Defender XDR, endpoint security tools, and other monitoring platforms; gather evidence, review logs, coordinate containment, and document findings through resolution. Manage security incidents … phishing‐submission review, policy tuning, and investigation of SPF, DKIM, and DMARC failures. Administer assigned Microsoft security platforms, including Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra ID, and Microsoft Purview, using least‐privilege and formal change‐management practices. Support the secure adoption and operation of approved artificial intelligence ...

initially lead a major enterprise migration from an incumbent endpoint detection and limited-hours outsourced monitoring model to Microsoft Defender XDR and Microsoft Sentinel, transitioning into a Cyro-managed SOC. The successful candidate will own the engagement from discovery and target-state design through migration, assurance and service … strategies, target operating models, service boundaries, responsibilities, escalation paths, service levels and transition plans for client-operated and managed SOC services. Design Microsoft Sentinel and Defender XDR solutions, including Defender for Endpoint, Defender for Identity, Defender for Office 365 and Defender for Cloud Apps where relevant, making effective ...

progress. Prioritise and manage the remediation of code defects. Security Monitoring & Incident Response (SecOps) Monitor and triage security alerts generated from Microsoft Sentinel, EDR platforms, cloud security tools, and other security technologies. Investigate suspicious activity and determine the severity, scope, and potential impact of security events. Validate alerts … such as risks like prompt injection Familiarity with SaaS application security concepts, such as tenant isolation and secure API design. Familiarity with Microsoft Azure environments and development platforms such as GitHub and GitHub Actions. Understanding of networking fundamentals and network security concepts. Proficiency in at least one scripting ...

with REST API development and third‐party service integrations Deep technical expertise across security platforms including SIEM technologies (such as Splunk, Elastic, or Sentinel), SOAR platforms (such as Phantom, XSOAR, or Swimlane), and EDR solutions (such as CrowdStrike, SentinelOne, or Microsoft Defender) Hands‐on experience with cloud infrastructure … GitLab, or Bitbucket), containerization technologies (such as Podman, or containerd), and CI/CD platforms (such as Jenkins, GitLab CI, or Azure DevOps) Experience with threat intelligence platforms (such as ThreatConnect, Anomali, or MISP) and integrating threat feeds into automated response workflows Strong presentation and communication skills with ...

Develop and maintain incident response procedures, playbooks and documentation aligned to industry best practice. Detection Engineering & Security AutomationConfigure, optimise and continuously improve Microsoft Sentinel and Microsoft Defender technologies. Develop and tune detection logic using KQL to identify emerging threats and attacker behaviours. Build and maintain automated SOAR workflows … environments. Maintain high-quality technical documentation for detections, automations and operational workflows. Cloud Security & Secure-by-DesignSupport secure configuration and operational security across Azure and associated cloud services. Collaborate with infrastructure and engineering teams to embed secure-by-design principles. Evaluate configuration changes and ensure alignment with security ...

Microsoft Intune, Windows Autopilot, endpoint security, device compliance and configuration management. Manage application deployment, MDM/MAM, device lifecycle, patching and operational compliance. Azure Infrastructure & Cloud Services Design, deploy and support Azure environments, including virtual machines, storage, networking, backup and recovery. Support hybrid cloud, migration, automation … resilient, available and well-optimised. Troubleshoot complex infrastructure, network and virtualisation issues. Cyber Security & Compliance Lead cyber security initiatives and administer Microsoft Defender, Sentinel and Purview services. Monitor alerts, investigate incidents, manage vulnerabilities, conduct risk reviews and maintain security baselines. Support compliance, audits, business continuity and disaster recovery ...

2.0, OpenID Connect, SAML and modern authentication protocols. Experience with scripting and automation and familiarity with source control and deployment pipelines such as Azure DevOps or GitHub. Understanding of Zero Trust, least privilege and identity-centric security controls. Experience troubleshooting authentication and access issues in enterprise environments. Ability … translate architecture and security standards into practical engineering solutions. Strong communication, documentation and stakeholder-engagement skills. Desirable Experience: Microsoft Sentinel, Log Analytics/KQL, Defender for Identity, Defender for Cloud Apps or Copilot for Security. Microsoft Graph, Python, Logic Apps, Azure Functions, policy-as-code, infrastructure ...

Doing You'll take technical ownership across a broad security landscape, including: Designing and implementing security architecture across Microsoft 365, Azure, Entra ID, Defender XDR, Sentinel and Purview Building modern security controls around Zero Trust, secure-by-design and automation Leading architecture reviews and threat modelling … external SOC partners Strengthening vulnerability and exposure management using threat intelligence, exploitability and business risk Automating security processes using Python, PowerShell, Logic Apps, Azure Functions and APIs Supporting technical controls and evidence for ISO 27001 and Cyber Essentials Plus Acting as a senior security SME and helping technology ...

security, CI/CD pipelines,virtualisation, andIaC Software development skills usingLinux or WSL SIEM and log routing experience in tools such as Splunk, Sentinel, Cribl, and ELK Familiarity with AWS, Azure, and GCPservices Proficiency in scripting or programming (Python, Bash, PowerShell) Excellent problem-solving, analytical ...

risk management principles. Excellent stakeholder engagement and communication skills. Desirable Experience AI solutions within cyber security or threat detection environments. Experience with Microsoft Sentinel, Splunk, QRadar or other SIEM platforms. SOAR platforms and security automation tooling. Cloud platforms including Azure, AWS or Google Cloud. Public sector ...

into practical recommendations, and act as a trusted partner throughout onboarding and service lifecycle. You will leverage your experience with Microsoft security tools (Azure, Sentinel, Defender) and communicate effectively with stakeholders at all levels. #J-18808-Ljbffr ...

traditional Active Directory services towards a cloud-first Entra ID architecture Design and manage hybrid identity solutions across Active Directory, Entra ID and Azure Implement and enhance SSO, Conditional Access, MFA and passwordless authentication capabilities Drive identity governance initiatives including RBAC, PIM, access reviews and entitlement management Lead … level presentations Support the retirement of legacy authentication methods and infrastructure services Automate IAM and infrastructure processes using PowerShell, Microsoft Graph API and Azure tooling Provide technical leadership across identity-related projects and mentor colleagues where required Required Experience 5+ years' experience in Identity & Access Management, Infrastructure Engineering ...

Hamilton Barnes Associates Limited is seeking a SOC Engineer to onboard clients to SIEM platforms such as Azure Sentinel and Chronicle, integrating log sources and ensuring reliable security telemetry. You will help shape onboarding standards and troubleshoot system availability while supporting Windows and Unix/Linux ...

customer technical relations across security operations. You will quantify maturity via the TAM Score, shape a defensible 12-month roadmap, and provide Azure Sentinel/Defender XDR expertise to guide prioritised improvements. You’ll translate data into narrative, resolve technical queries, and escalate as needed ...

vulnerability triage workflows that score real risk by exploitability, reachability, and compensating controls rather than raw CVSS. Harden and secure our cloud environment (Azure), partnering with platform engineering on secure configuration, reviewing and remediating vulnerabilities, identity and network controls, posture management, and logging and detection. Strengthen endpoint … control landscape: cloud security, supply‐chain and vulnerability management, endpoint and identity, and detection and response. Are genuinely technical: comfortable in cloud environments (Azure preferred), CI/CD, and at least one scripting language (e.g. Python, Bash, PowerShell), so your controls hold up in engineering reality. Lead with ...

Regulations, GDPR and DB Group security requirements. Manage cyber security operations including threat monitoring, incident response, threat intelligence and vulnerability management. Develop Microsoft Sentinel, Microsoft Defender XDR and associated security monitoring capabilities. Provide governance across Azure, AWS, Microsoft 365, Entra ID and Intune environments. Lead information ...

Regulations, GDPR and DB Group security requirements. Manage cyber security operations including threat monitoring, incident response, threat intelligence and vulnerability management. Develop Microsoft Sentinel, Microsoft Defender XDR and associated security monitoring capabilities. Provide governance across Azure, AWS, Microsoft 365, Entra ID and Intune environments. Lead information ...

control improvements, and reporting outputs against agreed engagement milestones. Contribute to solution architecture and pre-sales deal shaping for cloud security, Microsoft Defender, Sentinel, Entra, Defender for Cloud, and exposure management opportunities while building trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales … engagements. Design, implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies. Understand threat modelling, attack paths, cloud misconfigurations, identity risks, vulnerabilities, and how to prioritise remediation based on exploitability and business ...

security engineers (currently 3) Act as the senior escalation point for security incidents and decision-making Work across a modern Microsoft/Azure environment , driving improvements in M365 security and identity Influence how security is delivered across our sites, combining internal and client-facing services … governance Translate regulatory obligations (FCA, PRA, ISO 27001, Lloyd’s) into practical, measurable controls Hands-On Security Engineering Implement and optimise controls across Azure, M365, and infrastructure environments Lead hardening initiatives across IAM, PAM, AD, and network security Drive security automation and DevSecOps practices Lead real-time response ...

designs and implements automated detection and response capabilities that protect G-Research's diverse and complex estate, spanning high-performance compute (HPC) environments, Azure and Windows corporate infrastructure, and public cloud platforms such as AWS.As part of SAE, you'll play a hands-on role building secure, scalable … environments. Key responsibilities of the role include: Design, build and maintain automated detection and response systems across G-Research's hybrid environments (HPC, Azure, AWS).Develop high-quality, well-tested code primarily in Python, following secure engineering best practices. Implement and maintain infrastructure-as-code and CI/ ...