21 of 21 Azure Sentinel Jobs in the South East

DevSecOps Engineer - Azure/Application Security We're working with an established organisation looking to appoint an experienced DevSecOps Engineer to strengthen its Azure deployment and application security capabilities.This is a hands-on position combining Azure DevOps, cloud infrastructure and application security. … embed secure practices throughout the software delivery lifecycle. The Role You'll be responsible for:Designing and maintaining CI/CD pipelines within Azure DevOpsDeploying Azure applications and infrastructure using TerraformSupporting Azure services including App Services, AKS, Azure SQL, Storage, Key Vault ...

DevSecOps Engineer - Azure/Application Security We're working with an established organisation looking to appoint an experienced DevSecOps Engineer to strengthen its Azure deployment and application security capabilities. This is a hands-on position combining Azure DevOps, cloud infrastructure and application security. … embed secure practices throughout the software delivery lifecycle. The Role You'll be responsible for: Designing and maintaining CI/CD pipelines within Azure DevOps Deploying Azure applications and infrastructure using Terraform Supporting Azure services including App Services, AKS, Azure SQL, Storage ...

genuine ownership of the security function. Key Responsibilities: Lead the design, implementation, and optimisation of security controls across Microsoft Defender, Intune, Entra ID, Azure, and M365. Own and evolve Conditional Access, identity protection, device compliance, and endpoint hardening strategies. Act as the technical lead for cyber incidents, supporting … Support governance activities including risk assessments, audits, and compliance reviews. Technical Experience: Strong hands-on experience with Microsoft Defender XDR, Intune, Entra ID, Azure security controls, and Microsoft Sentinel. Proven ability to design and implement Conditional Access, identity protection, and device compliance policies. Experience developing detection rules, analytics ...

Define cloud architecture patterns and engineering standards to support enterprise cloud adoption. Design and implement container platforms using Google Kubernetes Engine (GKE) and Azure Kubernetes Service (AKS). Define and enforce cloud governance frameworks covering identity, access management, networking, security and compliance. Design reusable and modular Infrastructure … teams. Ability to provide thought leadership around cloud innovation and best practice. If you are an experienced Cloud Platform Architect with strong GCP, Azure, Kubernetes and Terraform expertise and would like to find out more, please apply with your most up to date CV. Senior Cloud Platform Architect ...

across cloud, identity, endpoint and network platforms, and carry out malware analysis and threat validation. Design, implement and optimise detection content across Microsoft Sentinel, Defender XDR, CrowdStrike and associated platforms, developing advanced KQL queries and analytics rules aligned to MITRE ATT&CK. Act as senior technical owner … security platforms including Microsoft Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune, Darktrace and supporting technologies, managing platform health, onboarding and configuration. Design and maintain automation and orchestration workflows using Logic Apps, Sentinel Playbooks, Power Automate, PowerShell, Python and API integrations to reduce manual operational effort. ...

across cloud, identity, endpoint and network platforms, and carry out malware analysis and threat validation. Design, implement and optimise detection content across Microsoft Sentinel, Defender XDR, CrowdStrike and associated platforms, developing advanced KQL queries and analytics rules aligned to MITRE ATT&CK. Act as senior technical owner … security platforms including Microsoft Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune, Darktrace and supporting technologies, managing platform health, onboarding and configuration. Design and maintain automation and orchestration workflows using Logic Apps, Sentinel Playbooks, Power Automate, PowerShell, Python and API integrations to reduce manual operational effort. ...

managing Zscaler policies, authentication, application segmentation, and secure access controlsProven troubleshooting skills across access, identity, networking, and cloud connectivity issuesGood knowledge of Microsoft Azure networking and infrastructure servicesExperience supporting Windows Server, Active Directory, DNS, certificates, and authentication servicesA solid understanding of enterprise networking concepts including routing, firewalls, proxies … both technical and non-technical stakeholdersDesirable ExperienceExperience in any of the following would be advantageous:Microsoft Entra ID, Conditional Access, MFA, and SSOMicrosoft Sentinel, Defender, Splunk, or SIEM platformsZscaler Digital Experience (ZDX)Cloud security and Zero Trust architecturesPowerShell, Python, Terraform, or automation toolingPalo Alto, Cisco, F5, or similar ...

annum Role Overview The Cyber Security Engineer will help protect and improve security across a hybrid IT environment, spanning Microsoft Azure cloud services, on-prem VMware infrastructure, and the network estate (including Cisco Meraki). The role is hands-on and operational, partnering with IT teams to implement … response through Sophos MDR, and improve cyber resilience by supporting Disaster Recovery (DR) testing and Business Continuity (BC) readiness. Key Responsibilities Cloud Security (Azure) Implement andmaintainAzure security controls across identity, networking,computeand storage. Support governance guardrails (Azure Policy), securebaselinesand logging/monitoring for cloud workloads. Contribute ...

Analysts to identify and respond to threats effectively. This is not a generalist cyber security role. Key Responsibilities Administer and optimise Microsoft Sentinel (or equivalent SIEM), including log ingestion, parsing, normalisation, and retention. Develop and maintain SOAR workflows and automation using Azure Logic Apps, Python, PowerShell …/7 operational environment. Familiarity with MITRE ATT&CK, CVEs, and vulnerability management. Exposure to cloud security monitoring across Azure, AWS, or Microsoft 365. Desirable Certifications Microsoft SC-200 CompTIA Security+/CySA+ ISC2 CC or CISSP GIAC GCIA CEH Cisco CyberOps or Fortinet certifications What ...

background, looking to develop further within security operations. Key Responsibilities Monitor, triage, and respond to security incidents using SIEM tools such as Microsoft Sentinel Investigate and resolve alerts, escalating where necessary Manage and maintain SOC tools, configurations, and updates Follow ITIL-based processes for incident, problem, and service … Looking For Experience in a SOC Analyst role or strong systems administration experience with security exposure Hands-on experience with Microsoft Sentinel and Microsoft Defender technologies Good understanding of networking concepts (DNS, IP, routing, SSL, etc.) Familiarity with cloud environments, ideally Azure Experience with Windows ...

Respond/Recover), NIST SP 800-61r3, MITRE ATT&CK, and D3FEND.• Set roadmap and strategy for SOAR platforms (Splunk SOAR, Microsoft Sentinel SOAR/Logic Apps), case management, evidence collection, and response orchestration.• Define and oversee SOAR playbook automation builds, documentation, and execution• Define … across the full IR lifecycle: triage, scoping, containment, eradication, recovery, evidence handling, post-incident review.• Strong DFIR background covering endpoint, network, cloud (AWS, Azure, GCP), identity, and SaaS forensics.• Working proficiency in Python and PowerShell. Comfort reviewing and directing code without being the primary developer.• Experience with ...

Shape the Future of Microsoft Sentinel Detection Engineering. Are you passionate about Microsoft Sentinel, KQL and building high-quality detections that help a SOC identify threats effectively? We're looking for a Senior Detection Engineer to join our growing Aerospace, Defence & Security business. You'll play … role in designing, developing, testing and improving detection content in Microsoft Sentinel, translating threat behaviours and security requirements into reliable analytics. This is an opportunity to join the Detection Engineering team and help strengthen detection coverage, reduce false positives and ensure detection content remains accurate, performant and operationally ...

including developing custom automation and integrations via API with proficiency in at least one scripting language (preferably Python or GO). Preferred vendors: Azure, AWS, GCPExpert Knowledge of SIEM Architecture and Design – Including familiarity in SIEM deployment and architecture of at least one cloud environment (GCP, AWS, Azure, IBM). Preferred vendors: Microsoft Sentinel, Google SecOps, XSIAMExpert Knowledge of EDR/XDR – including configuration and deployment/maintenance. Preferred vendors: CrowdStrike, Microsoft Defender, Palo Alto XDR, SentinelOneIntermediate Knowledge of VM – including deployment, automation of reporting. Preferred vendors: Rapid 7, TennableIntermediate Knowledge of CTI – including ...

including developing custom automation and integrations via API with proficiency in at least one scripting language (preferably Python or GO). Preferred vendors: Azure, AWS, GCP Expert Knowledge of SIEM Architecture and Design – Including familiarity in SIEM deployment and architecture of at least one cloud environment … Azure, IBM). Preferred vendors: Microsoft Sentinel, Google SecOps, XSIAM Expert Knowledge of EDR/XDR – including configuration and deployment/maintenance. Preferred vendors: CrowdStrike, Microsoft Defender, Palo Alto XDR, SentinelOne Intermediate Knowledge of VM – including deployment, automation of reporting. Preferred vendors: Rapid 7, Tennable Intermediate ...

Cyber Security Specialist/Cyber Security Engineer - CISSP, CEH, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bons +Benefits Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team … cybersecurity posture from an infrastructure perspective and external security rating. Identify, assess and remediate vulnerabilities across hardware, software and infrastructure (Windows Server and Azure Cloud). Monitor emerging threats and lead or support Incident Response investigations and mitigation. Evaluate, test and recommend security enhancements, controls and threat prevention ...

processes - enrichment, ticketing, containment - using Python, Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius of an incident Run hypothesis-led threat hunts, not just reactive … equivalent) Practical scripting/automation experience (Python, Logic Apps, REST APIs) or hands-on SOAR platform configuration Working knowledge of several of: Microsoft Sentinel, Defender XDR, CrowdStrike, Microsoft Entra ID/Azure AD, Microsoft 365, AWS security tooling Experience investigating identity and cloud-based compromise, including ...

perfect opportunity for you.Required Skills and ExperienceStrong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR … sources map to the attack lifecycleExperience with XDR or EDR platforms such as Microsoft Defender, CrowdStrike or Cortex Understanding of cloud environments, particularly Azure, and associated security telemetry Experience working in customer-facing or consultancy roles Strong communication skills, with the ability to explain technical concepts clearlyTechnical CompetenciesSIEM ...

background in Cyber Security, Identity & Access Management (IAM), an MSP, MSSP or security consultancy. Desirable Experience Microsoft Defender for Identity. Microsoft Graph API. Azure Automation. Identity Governance. Microsoft Sentinel or Purview. BloodHound, PingCastle or similar identity assessment tools. Microsoft certifications such ...

client stakeholders (engineering, security, operations) to validate requirements, manage technical risks, and coordinate delivery plans and change windows. QualificationsRequiredStrong track record delivering production Azure environments, including hands-on experience ofnetworking, IAM, governance, and security controls, ideally through working with external clients Significant hands-on experience implementing and operating … restore, performance, and HA/DR. Strong experience with Infrastructure as Code (Terraform and/or Bicep/ARM) and CI/CD (Azure DevOps, GitHub Actions, GitLab CI or similar). Solid cloud security engineering knowledge: RBAC/IAM, private networking, key/secrets management, encryption, secure ...

protocols including OAuth 2.0, OpenID Connect, SAML and Kerberos. Experience designing passwordless and phishing-resistant authentication solutions. Strong understanding of Microsoft 365 and Azure security architecture. Experience designing identity controls as part of a Zero Trust security architecture . Ability to assess identity security posture and translate findings … certificates and workload credentials, reducing reliance on long-lived credentials. Ensure identity services integrate effectively with the wider Microsoft security ecosystem, including Defender, Sentinel, Intune, Purview and Azure security services. Conduct identity assessments, identify security and operational improvements, and mitigate risks related to privileged access, credential ...

Running workshops, coverage assessments and use case catalogues as customer deliverables What we're looking for Hands-on SIEM engineering experience, ideally Microsoft Sentinel Confident KQL — this is the core of the role SOAR playbook design in Azure Logic Apps, Cortex XSOAR or similar Scripting … Python or PowerShell, and comfort working with APIs Use case design against MITRE ATT&CK Working knowledge of XDR/EDR platforms and Azure telemetry sources Some exposure to NDR tooling such as Vectra AI or Corelight is a bonus Consultancy or customer-facing experience is valuable ...