26 to 44 of 44 Azure Sentinel Jobs in London

Previously worked as a Threat Detection Engineer or in a similar role. Must have strong expertise in KQL.Hands-on experience with Microsoft Sentinel and Defender (Endpoint, Office 365).Familiarity with Microsoft Entra ID, including Identity Governance. Experience with Microsoft Purview, particularly DLP and data protection tools. Exposure … cloud-native logging in Azure and Kubernetes environments. Understanding of "detection as code" or "everything as code" approaches, including CI/CD pipelines. Experience working with or alongside MSP SOC teams. Awareness of Agile methodologies and ways of working. Knowledge of attacker TTPs, threat modelling, and cyber security ...

environments. This is a hands-on engineering role focused on implementing security controls, resolving vulnerabilities and strengthening cyber resilience across Microsoft 365 and Azure environments. Key Responsibilities Implement and configure security solutions using Microsoft Sentinel, Defender, Purview, Entra ID and Intune . Deliver hands-on technical … security remediation across Microsoft 365 and Azure environments. Configure and improve Identity and Access Management (IAM), Privileged Access Management (PAM), MFA and Conditional Access controls. Implement Zero Trust security measures, Data Loss Prevention (DLP), endpoint protection and threat detection capabilities. Develop and optimise security monitoring, alerting and automated ...

environments. This is a hands-on engineering role focused on implementing security controls, resolving vulnerabilities and strengthening cyber resilience across Microsoft 365 and Azure environments. Key Responsibilities Implement and configure security solutions using Microsoft Sentinel, Defender, Purview, Entra ID and Intune . Deliver hands-on technical … security remediation across Microsoft 365 and Azure environments. Configure and improve Identity and Access Management (IAM), Privileged Access Management (PAM), MFA and Conditional Access controls. Implement Zero Trust security measures, Data Loss Prevention (DLP), endpoint protection and threat detection capabilities. Develop and optimise security monitoring, alerting and automated ...

Cyber Security Specialist/Cyber Security Engineer - CISSP, CEH, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bons +Benefits Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team … cybersecurity posture from an infrastructure perspective and external security rating. Identify, assess and remediate vulnerabilities across hardware, software and infrastructure (Windows Server and Azure Cloud). Monitor emerging threats and lead or support Incident Response investigations and mitigation. Evaluate, test and recommend security enhancements, controls and threat prevention ...

findings clearly to different audiences. A proactive approach to learning and working collaboratively. Desirable: CompTIA Security+, CySA+ or equivalent knowledge; familiarity with Microsoft Sentinel, Splunk or Microsoft Defender; and exposure to Azure, AWS, PowerShell or Python. Why apply? This role offers the chance to build hands ...

findings clearly to different audiences. A proactive approach to learning and working collaboratively. Desirable: CompTIA Security+, CySA+ or equivalent knowledge; familiarity with Microsoft Sentinel, Splunk or Microsoft Defender; and exposure to Azure, AWS, PowerShell or Python. Why apply? This role offers the chance to build hands ...

findings clearly to different audiences. A proactive approach to learning and working collaboratively. Desirable: CompTIA Security+, CySA+ or equivalent knowledge; familiarity with Microsoft Sentinel, Splunk or Microsoft Defender; and exposure to Azure, AWS, PowerShell or Python. Why apply? This role offers the chance to build hands ...

findings clearly to different audiences. A proactive approach to learning and working collaboratively. Desirable: CompTIA Security+, CySA+ or equivalent knowledge; familiarity with Microsoft Sentinel, Splunk or Microsoft Defender; and exposure to Azure, AWS, PowerShell or Python. Why apply? This role offers the chance to build hands ...

endpoint-focused security architecture for user-facing environments Data protection and compliance capabilities through Microsoft Purview Modern SOC enablement leveraging Defender and Sentinel telemetry alongside broader tooling The secure adoption of Microsoft Copilot and AI/LLM-driven capabilities, ensuring appropriate governance, data protection and access controls What … including Conditional Access, MFA and Privileged Identity Management (PIM) Support the modernisation of Colt’s SOC operating model, leveraging Defender and Sentinel for user and endpoint telemetry, alongside integration of broader infrastructure data sources Conduct security architecture reviews and provide assurance for solutions leveraging Microsoft security technologies, including ...

CK. Experience designing remote and local access models including PAM and ZTNA with identity integration. Familiarity with Microsoft cloud security stack including Microsoft Sentinel, Microsoft Entra ID, Microsoft Defender for Cloud and secure connectivity on Azure Advanced certifications such as CISSP, TOGAF or SABSA, Cloud Security ...

logs, access data) to support investigations, identify trends, and contribute to operational and security improvements.· Hands-on experience with Microsoft Entra ID (Azure AD), including:o User and group management (static and dynamic groups)o Role assignments, service principals, and application registrationso Familiarity with tenants, directories, objects … Active Directory:o User and group management, OU structures, Group Policy Objects (GPOs)o Basic LDAP knowledgeo Understanding of Hybrid identity integration (Azure AD Connect/Cloud Sync)o Awareness of AD tiering concepts and disaster recovery principles· Experience working with Identity Governance tooling such as Saviynt/ ...

Security Solutions Architect - Microsoft Sentinel & Purview DLP We are working with a leading organisation operating within a highly regulated industry, looking for an experienced Security Solutions Architect to support two key security initiatives. This is a hands-on design and delivery role, requiring someone who can bridge … pattern to extract security logs from complex third-party applications into Microsoft Sentinel. - Define approaches for log collection, data ingestion and integration, leveraging Azure Data Factory where appropriate. - Design and support the initial implementation of a Data Loss Prevention (DLP) capability using Microsoft Purview. - Work closely with security ...

zero-trust security principles to enhance protection across cloud platforms. Manage identity and access management (IAM) in a cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft … Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Technology: Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge, Microsoft AD (Entra), Server and SQL experience, O365 ...

facts when evidence is incomplete, coordinate technical teams during live incidents and apply sound incident response methodology even when tooling is degraded. Microsoft Sentinel and Defender XDR will be central to your work, but calm judgement, investigative discipline and clear communication will matter just as much. What … complex security incident investigations from initial assessment through containment, recovery and review. Establish incident scope, business impact and likely root cause using Microsoft Sentinel, Defender XDR and evidence from across the enterprise environment. Direct response actions in partnership with infrastructure, identity, cloud, application and wider IT teams. Maintain ...

Strong understanding of: Identity and Access Management Zero Trust Architecture Data Protection Security Operations Threat Detection and Response Cloud Security Experience implementing Microsoft Sentinel and Defender technologies at enterprise scale. Experience implementing Data Loss Prevention and Information Protection capabilities. Strong understanding of Azure and Microsoft ...

across Power Platform solution deliveryEnsure alignment with Microsoft best practices for Power Platform CoE, ALM, security, and governanceOversee integration design across D365, M365, Azure, and third-party systems via Power Automate and custom connectorsChampion AI Copilot and Copilot Studio adoption within client engagements, aligned … scaleHands-on experience with Power Platform Centre of Excellence (CoE) Toolkit, ALM strategies, environment management, and governance frameworksUnderstanding of Power Platform security model: Azure AD, row-level security, and Dataverse role-based access controlFamiliarity with integration patterns: REST/OData APIs, Azure Service Bus, Logic Apps ...

running security platforms, and working in Agile, product-led teamsClear communication with both technical and non-technical stakeholdersHelpful extrasMicrosoft security stack experience (Defender, Sentinel, Entra)Secure-by-design and security architecture knowledgeRegulated-sector experienceCertifications such as CISSP, CCSP, GIAC or an Azure security qualificationPackageSalary ...

specific team and business reasons will be expected. Key Skills Hands-on SIEM detection engineering and KQL or similar query languages; Microsoft Sentinel preferred. SOAR automation and playbook delivery using Logic Apps, Cortex XSOAR, or similar. Python, PowerShell, or similar scripting, plus API-driven automation and integration. MITRE …/EDR experience: Microsoft Defender, CrowdStrike, Cortex, or SentinelOne; hands-on NDR knowledge, such as Vectra AI or Corelight. Cloud security telemetry, particularly Azure; threat intelligence integration and awareness of AI-driven SOC tools. Customer-facing consultancy skills and clear technical communication. Duties & Responsibilities Build and tune SIEM ...

development, looking to strengthen its Cyber Security team with an experienced Microsoft Security Engineer. Engineering, configuring and maintaining security controls across Microsoft Defender, Sentinel, Entra, Purview and Azure. Developing and improving security monitoring, telemetry, detection rules and alerting capabilities. Building security automation, integrations and response workflows. Reviewing existing … workflows. Strong hands-on experience in a Cyber Security Engineering or Microsoft Security Engineering role. Practical experience across Microsoft security technologies, particularly Defender, Sentinel, Entra and Azure. Experience engineering security controls, developing detection capabilities and improving security tooling. Knowledge of security automation, integrations, scripting and response workflows. Understanding ...