8 of 8 Azure Sentinel Jobs in Reading

across cloud, identity, endpoint and network platforms, and carry out malware analysis and threat validation. Design, implement and optimise detection content across Microsoft Sentinel, Defender XDR, CrowdStrike and associated platforms, developing advanced KQL queries and analytics rules aligned to MITRE ATT&CK. Act as senior technical owner … security platforms including Microsoft Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune, Darktrace and supporting technologies, managing platform health, onboarding and configuration. Design and maintain automation and orchestration workflows using Logic Apps, Sentinel Playbooks, Power Automate, PowerShell, Python and API integrations to reduce manual operational effort. ...

SIEM Engineer (SC Cleared) for a Reading/Havant based 6-month contract. The role focuses on onboarding log sources into Microsoft Sentinel, developing parsers, and creating automated detection and response workflows. Responsibilities include tuning KQL queries, building analytic rules, and deploying SIEM content via CI/ ...

processes - enrichment, ticketing, containment - using Python, Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius of an incident Run hypothesis-led threat hunts, not just reactive … equivalent) Practical scripting/automation experience (Python, Logic Apps, REST APIs) or hands-on SOAR platform configuration Working knowledge of several of: Microsoft Sentinel, Defender XDR, CrowdStrike, Microsoft Entra ID/Azure AD, Microsoft 365, AWS security tooling Experience investigating identity and cloud-based compromise, including ...

Essential) Location: Hybrid, Hampshire Contract: Initial 6 Months with potential extension Specialist SIEM Engineer needed to develop, optimise and automate SSE's Microsoft Sentinel platform, supporting security monitoring, detection engineering and Project Amur/ECAF compliance. Scope Onboard and integrate log sources into Sentinel; build custom … queries; build and tune analytic rules and detection logic Develop Logic Apps/SOAR workflows to automate response Implement CI/CD pipelines (Azure DevOps/Git) for SIEM content deployment Automate deployment/config across environments; tune detections to reduce false positives Key Skills Active SC Clearance ...

last 12 Months 6 Months Seim Engineer to come on board to be Responsible for onboarding and integrating security log sources into Microsoft Sentinel, ensuring reliable and comprehensive security telemetry. Develop custom parsers and data transformations to normalise and enrich ingested data, and design and optimise KQL queries … support effective threat detection, monitoring and security investigations. Key skills and responsibilities, Integrate and onboard log sources into Microsoft Sentinel, ensuring reliable security telemetry. Develop custom parsers, data transformations and KQL queries for threat detection and investigation. Create and maintain analytic rules and detection logic aligned to emerging ...

Title: SIEM Engineer (SC Cleared) Location: Reading/Havant Duration:6 months Description: Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries … threats and business use cases Develop Logic Apps and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed ...

Title: SIEM Engineer (SC Cleared) Location: Reading/Havant Duration:6 months Description: Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries … threats and business use cases Develop Logic Apps and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed ...

Nash in the United Kingdom seeks an experienced SEIM Engineer with Active SC clearance to onboard and integrate security log sources into Microsoft Sentinel, delivering reliable telemetry and comprehensive threat visibility. You will develop custom parsers, transformations and KQL queries, and design SIEM detections aligned to evolving threats. …/CD pipelines with Azure DevOps/Git enable controlled deployments. #J-18808-Ljbffr ...