12 of 12 Azure Sentinel Jobs in the South East

Azure Cloud Engineer Hybrid (Hertfordshire-based office) Up to £60,000 + benefits We're working with a organisation investing in its cloud and data capabilities, and they're looking for an Azure Cloud Engineer to play a key role in shaping and securing their Azure … across cloud infrastructure, security, and data platforms. The Role You'll be responsible for designing, building, and maintaining a secure and scalable Microsoft Azure environment, while supporting the organisation's ongoing cloud transformation. This role combines hands-on engineering with strategic input, giving you the opportunity to recommend ...

design" solutions are woven into the fabric of the entire ecosystem. Key Responsibilities Hybrid Architecture & Governance: Design and implement security controls across Azure, on-prem servers, and SaaS applications while maintaining hardening standards based on CIS and NIST benchmarks. Identity & Access Security: Define standards for Entra … overseeing requirements for Conditional Access, MFA, SSO, and PIM. Threat Detection & Incident Response: Own and operate the SIEM/SOAR stack, including Microsoft Sentinel and Defender XDR, to develop detection rules and support forensic investigations. Infrastructure Hardening: Enforce secure baselines across virtualized environments (VMware/Hyper-V), Windows ...

seeking an experienced Azure Cloud Security Architect to lead the design, implementation, and governance of security controls across our Azure cloud platform. This role requires a hands-on technical expert with deep experience in Microsoft Defender for Cloud, Azure-native security services, and enterprise … platform security architecture. What you'll bring: Design and implement secure Azure cloud architectures aligned with security best practices and compliance requirements Lead implementation, configuration and optimisation of Microsoft Defender for Cloud Develop and enforce Azure security policies, standards, and guardrails Implement Zero Trust principles across ...

SIEM and XDR tooling Developing parsers, rules and detection logic Running vulnerability and exposure assessments using leading platforms Supporting cloud environment reviews across Azure, AWS or GCP Delivering clear technical documentation to customers Collaborating with internal SOC Engineers on innovation and roadmap work What we're looking … Experience across SOAR platforms (XSOAR, Logic Apps, Siemplify) Strong scripting ability (Python, PowerShell) Hands‐on SIEM engineering (Sentinel, Chronicle or similar) Knowledge of XDR/EDR tooling (Defender, CrowdStrike, SentinelOne) Experience with Tenable, Qualys or Rapid7 Understanding of exposure management or CTEM tooling Strong communication skills and customer ...

Previously worked as a Threat Detection Engineer or in a similar role. Must have strong expertise in KQL. Hands-on experience with Microsoft Sentinel and Defender (Endpoint, Office 365). Familiarity with Microsoft Entra ID, including Identity Governance. Experience with Microsoft Purview, particularly DLP and data protection tools. … Exposure to cloud-native logging in Azure and Kubernetes environments. Understanding of “detection as code” or “everything as code” approaches, including CI/CD pipelines. Experience working with or alongside MSP SOC teams. Awareness of Agile methodologies and ways of working. Knowledge of attacker TTPs, threat modelling ...

Previously worked as a Threat Detection Engineer or in a similar role. Must have strong expertise in KQL. Hands-on experience with Microsoft Sentinel and Defender (Endpoint, Office 365). Familiarity with Microsoft Entra ID, including Identity Governance. Experience with Microsoft Purview, particularly DLP and data protection tools. … Exposure to cloud-native logging in Azure and Kubernetes environments. Understanding of “detection as code” or “everything as code” approaches, including CI/CD pipelines. Experience working with or alongside MSP SOC teams. Awareness of Agile methodologies and ways of working. Knowledge of attacker TTPs, threat modelling ...

prem LDAP applications, and outdated protocols like Kerberos and NTLM. Automation: Streamline operations by automating identity tasks using PowerShell, Microsoft Graph API, and Azure CLI. Governance & Compliance: Ensure all platforms meet hardening standards and assist with audit readiness for frameworks such as ISO 27001, GDPR, or PCI DSS. … What We’re Looking For Essential Experience: Expertise in Microsoft Identity: Proven track record with Azure Entra ID, Active Directory, and managing hybrid-to-cloud transitions. Device Management: Strong proficiency in Microsoft Intune/Endpoint Manager and modern Windows device transformation. Security Tooling: Hands-on experience deploying ...

follow agreed processes. Keep up to date with threats and recommend improvements. What you will bring: Clear understanding of Information Security fundamentals Sentinel OR Splunk experience. Familiarity with security monitoring/protective technologies. Good project-management skills; able to juggle multiple priorities. Analytical and systematic problem-solving approach … deadlines and collaborate in a busy environment. ompTIA Network+ (or similar) or equivalent knowledge. It would be great if you had: Experience with Azure or AWS security features. SIEM experienceespecially Sentinel or Splunk. If you are interested in this role but not sure if your skills ...

endpoint management. This includes Windows Active Directory and integration with Microsoft Entra ID, unified security operations with Microsoft Defender XDR and Microsoft Sentinel, and modern endpoint and device management with Microsoft Intune and Microsoft Configuration Manager (SCCM/ConfigMgr), providing practical guidance, design assurance and implementation support where … Travel: Ability to travel to different sites and locations on a weekly basis Critical Competencies – Technical Competencies (Essential) Strong architectural capability across Microsoft Azure and core Microsoft cloud services Proficiency in security technologies, frameworks, and secure architecture patterns (including Microsoft Defender XDR and Microsoft Sentinel) Strong ...

will be at the front line of defense for a diverse client base. Detection & Analysis: Monitor and investigate sophisticated threats within a Microsoft Sentinel SIEM environment. Proactive Triage: Go beyond the alert—analyze logs, identify patterns, and determine the "root cause" of security incidents. Continuous Improvement: Assist … years of experience in a SOC or security monitoring role. SIEM Exposure: Experience navigating SIEM platforms (if you’ve used Microsoft Sentinel , that’s a major win). Threat Knowledge: A solid grasp of common attacker techniques (MITRE ATT&CK framework knowledge is highly regarded). Microsoft Ecosystem ...

endpoint management. This includes Windows Active Directory and integration with Microsoft Entra ID, unified security operations with Microsoft Defender XDR and Microsoft Sentinel, and modern endpoint and device management with Microsoft Intune and Microsoft Configuration Manager (SCCM/ConfigMgr), providing practical guidance, design assurance and implementation support where … Travel: Ability to travel to different sites and locations on a weekly basis Critical Competencies – Technical Competencies (Essential) Strong architectural capability across Microsoft Azure and core Microsoft cloud services Proficiency in security technologies, frameworks, and secure architecture patterns (including Microsoft Defender XDR and Microsoft Sentinel) Strong ...

current with emerging threats and recommend improvements SOC ENGINEER ESSENTIAL SKILLS Strong understanding of information security fundamentals Experience with SIEM tools such as Sentinel or Splunk Familiarity with security monitoring technologies Analytical mindset with strong problem solving skills Ability to manage multiple priorities and meet deadlines Strong communication … role, you give consent for your application to be submitted to our client in connection with this vacancy. KEY SKILLS SOC Engineer, SIEM, Sentinel, Splunk, Cyber Security, Security Monitoring, Threat Detection, Azure, AWS, Network Security ...