76 to 100 of 154 Azure Sentinel Jobs in England

Develop and maintain incident response procedures, playbooks and documentation aligned to industry best practice. Detection Engineering & Security AutomationConfigure, optimise and continuously improve Microsoft Sentinel and Microsoft Defender technologies. Develop and tune detection logic using KQL to identify emerging threats and attacker behaviours. Build and maintain automated SOAR workflows … environments. Maintain high-quality technical documentation for detections, automations and operational workflows. Cloud Security & Secure-by-DesignSupport secure configuration and operational security across Azure and associated cloud services. Collaborate with infrastructure and engineering teams to embed secure-by-design principles. Evaluate configuration changes and ensure alignment with security ...

traditional Active Directory services towards a cloud-first Entra ID architecture Design and manage hybrid identity solutions across Active Directory, Entra ID and Azure Implement and enhance SSO, Conditional Access, MFA and passwordless authentication capabilities Drive identity governance initiatives including RBAC, PIM, access reviews and entitlement management Lead … level presentations Support the retirement of legacy authentication methods and infrastructure services Automate IAM and infrastructure processes using PowerShell, Microsoft Graph API and Azure tooling Provide technical leadership across identity-related projects and mentor colleagues where required Required Experience 5+ years' experience in Identity & Access Management, Infrastructure Engineering ...

methodology, and help shape the quality bar for how we deliver. It suits someone with the technical credibility and experience to lead a Sentinel or Security Platform architecture and delivery discussion, and the executive presence to stand in front of client management. Responsibilities Engagement Delivery Lead … design and delivery of AIR engagements - including greenfield SOC builds, SIEM platform implementations (Microsoft Sentinel, Splunk), EDR deployments, and managed security service transitions. Produce high-quality, client-ready deliverables: High Level Designs, Low Level Designs, Statements of Work, implementation guides, operational runbooks, and use-case documentation. Plan, facilitate ...

production operations, SRE, or DevOps roles, with at least 3+ years in a people management capacity. Proven experience managing cloud‐native services on Azure and AWS, including: Azure SQL, Cosmos DB, Application Gateway, Key Vault, Storage, DNS, Load Balancer, Virtual Machines, Azure Machine Learning … Sentinel; AWS Lambda, ECS, RDS, CloudWatch. Strong understanding of SRE principles (SLOs, SLIs, error budgets, incident response). Hands‐on experience with container orchestration (Kubernetes, Docker). Proficiency in CI/CD pipelines and infrastructure‐as‐code tools (Terraform, GitHub Actions, Jenkins). Familiarity with observability platforms (Datadog ...

area to lead a small team while staying hands-on. The role focuses on enterprise security engineering with a strong Microsoft security stack (Azure, Sentinel, Defender) and delivering security solutions across environments. Initial engagement is 6 months, with immediate start and a 3-day-per-week ...

Hamilton Barnes Associates Limited is seeking a SOC Engineer to onboard clients to SIEM platforms such as Azure Sentinel and Chronicle, integrating log sources and ensuring reliable security telemetry. You will help shape onboarding standards and troubleshoot system availability while supporting Windows and Unix/Linux ...

customer technical relations across security operations. You will quantify maturity via the TAM Score, shape a defensible 12-month roadmap, and provide Azure Sentinel/Defender XDR expertise to guide prioritised improvements. You’ll translate data into narrative, resolve technical queries, and escalate as needed ...

changes (Exchange Online) to support their migration. Cloud based Identity Management with Entra ID. Supporting the development of managed services, familiar with Azure DevOps and CI/CD pipelines, PowerShell, Terraform, Logic Apps, and Microsoft business apps. You will be intrinsic to customer engagements throughout the project lifecycle … Microsoft Identity Management/IAM You also have a strong foundation across the Microsoft Security solution stack, including on-premise, endpoint and Azure based solutions. Experience and subject matter expertise in Microsoft Azure scoping and specification Can demonstrate relevant knowledge and experience or hold some ...

Doing You'll take technical ownership across a broad security landscape, including: Designing and implementing security architecture across Microsoft 365, Azure, Entra ID, Defender XDR, Sentinel and Purview Building modern security controls around Zero Trust, secure-by-design and automation Leading architecture reviews and threat modelling … external SOC partners Strengthening vulnerability and exposure management using threat intelligence, exploitability and business risk Automating security processes using Python, PowerShell, Logic Apps, Azure Functions and APIs Supporting technical controls and evidence for ISO 27001 and Cyber Essentials Plus Acting as a senior security SME and helping technology ...

vulnerability triage workflows that score real risk by exploitability, reachability, and compensating controls rather than raw CVSS. Harden and secure our cloud environment (Azure), partnering with platform engineering on secure configuration, reviewing and remediating vulnerabilities, identity and network controls, posture management, and logging and detection. Strengthen endpoint … control landscape: cloud security, supply‐chain and vulnerability management, endpoint and identity, and detection and response. Are genuinely technical: comfortable in cloud environments (Azure preferred), CI/CD, and at least one scripting language (e.g. Python, Bash, PowerShell), so your controls hold up in engineering reality. Lead with ...

Experience with digital forensics and evidence handling. Strong communication, investigation and analytical skills. Desirable Banking, financial services or other regulated-sector experience. Microsoft Sentinel, Defender XDR, Defender for Identity or Defender for Cloud. KQL, PowerShell, Python or similar scripting/automation. Threat hunting, malware analysis and detection engineering. … Azure and Microsoft 365 investigation experience. EnCase, FTK, Velociraptor, Volatility or Wireshark. Certifications such as GCIH, GCIA, GCFA, GNFA, SC-200, CySA+ or CISSP. Qualifications Relevant cyber security experience, degree or equivalent practical experience. Knowledge of NIST, CIS Controls and recognised information security standards. ...

outputsCreate novel analytic techniques for incident detectionCollaborate with an MSP SOC to maintain and tune the detection catalogueBuild automated reporting dashboards using Microsoft Sentinel workbooksSupport security initiatives including ISO 27001 activities and KQL-based tasksEnsure monitoring coverage across cloud platforms, SaaS apps, and internal systemsContribute to documentation … similar role. Strong proficiency in KQL and hands-on experience with Microsoft SentinelFamiliarity with Microsoft Defender tools (Endpoint & O365)Exposure to Azure cloud logging and Kubernetes environmentsKnowledge of attacker TTPs and MITRE ATT&CK frameworksProactive, collaborative, and innovative mindsetDesirable/Nice-to-Have: Experience with Python, Terraform ...

operating cybersecurity controls within cloud-based environments.* Strong understanding of Microsoft security technologies, including some combination of: + Microsoft Defender Suite + Microsoft Sentinel + Microsoft Entra ID + Microsoft Purview* Experience with vulnerability management processes and tooling such as Qualys, Tenable, Rapid7, or equivalent platforms.* Knowledge … continuous improvement. **Additional Qualifications for a Competitive Advantage*** Experience within FMCG, manufacturing, supply chain, or consumer goods environments.* Hands-on experience with Microsoft Azure security technologies.* Experience with SIEM, SOAR, threat intelligence, and security monitoring platforms.* Professional certifications such as CISSP, CISM ...

supporting the wider team. Lead serious incidents, forensic investigations and root cause analysis. Develop detections, automation and orchestration; conduct proactive threat hunting. Engineer Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune and Darktrace. Support Microsoft 365, Azure, AWS, identity and endpoint security. Maintain documentation, support compliance … mentor colleagues. Experience and qualifications Substantial SOC, cyber operations or security engineering experience. Hands-on Sentinel, Defender XDR and CrowdStrike expertise. Incident response, malware analysis, forensics and threat hunting. Advanced KQL; PowerShell and/or Python automation. Entra ID, Conditional Access, Intune and Microsoft 365 security. Cloud ...

problem-solving skills. Excellent communication and stakeholder engagement abilities. Technical Experience Experience with some of the following technologies is highly desirable: Microsoft Sentinel Microsoft Defender XDR CrowdStrike SentinelOne Splunk IBM QRadar Azure Security Services Security Automation & SOAR platforms Endpoint Detection & Response (EDR) Desirable Qualifications CISSP SSCP … CompTIA Security+ SC-200 SC-300 Azure Security certifications GIAC certifications Equivalent experience will also be considered. Why Join? This is more than a security operations role. It's an opportunity to help shape the future of cyber security within a business that values innovation, continuous improvement ...

problem-solving skills. Excellent communication and stakeholder engagement abilities. Technical Experience Experience with some of the following technologies is highly desirable: Microsoft Sentinel Microsoft Defender XDR CrowdStrike SentinelOne Splunk IBM QRadar Azure Security Services Security Automation & SOAR platforms Endpoint Detection & Response (EDR) Desirable Qualifications CISSP SSCP … CompTIA Security+ SC-200 SC-300 Azure Security certifications GIAC certifications Equivalent experience will also be considered. Why Join? This is more than a security operations role. It's an opportunity to help shape the future of cyber security within a business that values innovation, continuous improvement ...

environments. Specifically, we’re interested in speaking with candidates who have: Experience leading and mentoring security engineering teams Strong Microsoft security stack expertise (azure, sentinel and defender) Delivered security projects across a range of security environments (cloud, endpoint, identity etc) Managed multiple engineering initiatives alongside ...

cases and monitoring Automate manual detection and remediation processes Develop threat intelligence and threat-hunting capabilities Improve security monitoring across AWS, GCP and Azure Work closely with engineering teams to turn security findings into scalable technical improvements Review existing tooling and influence future technology decisions Provide technical leadership … across the security function What we’re looking for: Experience building detections rather than purely responding to SOC alerts Strong SIEM experience – Microsoft Sentinel, Splunk or similar Cloud security experience across AWS, GCP and/or Azure KQL, SPL or similar querying experience Python scripting/ ...

skills. Desirable Experience * Experience designing an AI adoption strategy for a SOC. * Experience with agentic AI or autonomous security workflows. * Experience with Microsoft Sentinel, Splunk or equivalent SIEM platforms. * Experience with cloud security technologies (Azure, GCP or AWS). * Experience with detection engineering and security ...

skills. Desirable Experience Experience designing an AI adoption strategy for a SOC. Experience with agentic AI or autonomous security workflows. Experience with Microsoft Sentinel, Splunk or equivalent SIEM platforms. Experience with cloud security technologies (Azure, GCP or AWS). Experience with detection engineering and security ...

Regulations, GDPR and DB Group security requirements. Manage cyber security operations including threat monitoring, incident response, threat intelligence and vulnerability management. Develop Microsoft Sentinel, Microsoft Defender XDR and associated security monitoring capabilities. Provide governance across Azure, AWS, Microsoft 365, Entra ID and Intune environments. Lead information ...

control improvements, and reporting outputs against agreed engagement milestones. Contribute to solution architecture and pre-sales deal shaping for cloud security, Microsoft Defender, Sentinel, Entra, Defender for Cloud, and exposure management opportunities while building trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales … engagements. Design, implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies. Understand threat modelling, attack paths, cloud misconfigurations, identity risks, vulnerabilities, and how to prioritise remediation based on exploitability and business ...

Previously worked as a Threat Detection Engineer or in a similar role. Must have strong expertise in KQL.Hands-on experience with Microsoft Sentinel and Defender (Endpoint, Office 365).Familiarity with Microsoft Entra ID, including Identity Governance. Experience with Microsoft Purview, particularly DLP and data protection tools. Exposure … cloud-native logging in Azure and Kubernetes environments. Understanding of "detection as code" or "everything as code" approaches, including CI/CD pipelines. Experience working with or alongside MSP SOC teams. Awareness of Agile methodologies and ways of working. Knowledge of attacker TTPs, threat modelling, and cyber security ...

adjustment, please contact Sam.Austin@penningtonslaw.com Essential & Desirable Criteria Essential: Hands-on experience with SIEM platforms - alert triage, rule management, and investigation (Microsoft Sentinel, Splunk, or equivalent) Practical experience with Defender products - Defender for Endpoint, Defender for Cloud Apps, Defender for Identity Vulnerability management experience - scanning, triage, and remediation … tracking Identity & access management knowledge - Entra ID/Azure AD, conditional access, PIM, access reviews Incident response experience - containment, investigation, and remediation in a real-world environment Minimum 2–3 years in a security operations or cyber security role Experience responding to real security incidents Experience with vulnerability ...

mixed-vendor environments, including SaaS platforms and hybrid cloud estates. Deep hands-on expertise across the Microsoft security and compliance ecosystem, including Microsoft Sentinel, Defender XDR, Purview, Entra ID and Defender for Cloud, from solution design through to implementation and optimisation. Experience designing, onboarding and maturing SOC capabilities … CISSP, CISM, CISA or CySA+, alongside relevant Microsoft security certifications including SC-100 (Microsoft Cybersecurity Architect), SC-200 (Security Operations Analyst), AZ-500 (Azure Security Engineer) or alternates aligned the CrowdStrike ecosystem, such as, CrowdStrike Certified Falcon Administrator (CCFA), CrowdStrike Certified SIEM Engineer (CCSE), CrowdStrike Certified Identity Specialist ...