1 to 25 of 30 Azure Sentinel Jobs in the South East

HOME WORKING - REMOTE WORKING - HYBRID WORKING - ONE DAY PER WEEK IN THE OFFICE. Microsoft Security Consultant - Microsoft Sentinel, Defender XDR and Entra ID security controls (Conditional Access, Identity Governance, Entra GSA, PIM) - Azure services: Log Analytics, Azure Monitor, Azure Lighthouse, Azure … architects, consultants, SOC analysts, engineers and project managers. Key Responsibilities Deliver customer-facing security, device management and identity projects Implement and support Microsoft Sentinel, Defender XDR and Entra ID security controls (Conditional Access, Identity Governance, Entra GSA, PIM) Configure, tune and troubleshoot Intune, including security baselines and hardening ...

Milton Keynes or London around three days a week. The successful Senior Infrastructure Engineer will support enterprise infrastructure platforms across on-premises and Azure environments. You'll focus on onboarding Windows and Linux servers to Azure Arc, deploying Azure Monitor Agent (AMA), and rolling … secure, patched and reliable while working closely with Cyber Security and Operations teams. You will need proven experience working with the following: Microsoft Azure administration and Azure Arc-enabled servers Azure Monitor Agent (AMA), Azure Monitor and Log Analytics Workspaces XDR/ ...

Military Recruitment are currently seeking a Senior Infrastructure Engineer on behalf of one of our clients. We are seeking an Engineer with strong Azure, Windows Server, Linux, networking and endpoint security experience to support enterprise infrastructure platforms across on-premises and cloud environments. The role will focus … deploying and supporting XDR agents, Azure Arc onboarding, Azure Monitor Agent (AMA) installations, infrastructure monitoring and maintaining secure, reliable platform services across Windows and Linux server estates. Our client encourages applications from ex-military personnel however all candidates will be given due consideration. Duties and Responsibilities ...

Azure Platform Architect Location: UK Working Pattern: Hybrid/Client-facing Security Clearance: UK Government Security Clearance required We’re looking for an experienced Azure Platform Architect to join a growing cloud and infrastructure practice, taking a leading role in the design and delivery of secure … scalable Azure platforms for enterprise and public-sector customers. This is a hands-on architecture position with significant client exposure. You’ll combine deep Azure platform expertise with strong consulting and leadership skills, helping organisations shape their cloud strategy, modernise infrastructure and deliver large-scale transformation ...

Azure Platform Engineer Department: Internal Technology Employment Type: Permanent - Full Time Location: Oxford, UK Reporting To: Head of Architecture and Engineering Description Based in our Oxford office, you will join the Architecture and Engineering function within Internal Technology. The team is responsible for the design, delivery, continual improvement … needed to perform their best work. Reporting into Architecture and Engineering, you will be a hands-on engineer responsible for strengthening Aurora’s Azure platform, including our Enterprise Service Bus integration platform, ALZ with hybrid networking, CI/CD pipelines, and DevOps tooling. You will help mature ...

London Our client is looking to hire a Technical Consultant, expected to be experienced in scoping, designing and delivering a variety of Microsoft Azure technologies to a range of clients across multiple sectors. A regular commitment to attend customer sites (in and around London) and their office location … based in North Greenwich. The ideal candidate will play a key role in developing their future offerings within the Azure space, including both one-off engagements and managed services experience in the pre-sales process would also be desirable. Suitable experience of Microsoft 365, networking and traditional ...

across identity, security, cloud, infrastructure, networking, data protection and operational security domains, with a particular focus on Microsoft technologies including Entra ID, Defender, Sentinel, Purview, Azure and Microsoft 365.Salary & BenefitsThe budgeted salary for this role is up to 90,000 year, depending on experience. Click here … Directory, Identity Governance, PIM, Conditional Access, SSO, Federation, and B2B/B2C identity. Provide architectural ownership across the Microsoft security stack, including Defender, Sentinel, Purview, Intune, Security Copilot, Azure Security, and Microsoft 365 Security & Compliance. Develop reusable security patterns for identity, threat, data protection, monitoring, compliance ...

programming, networking, system administration, or DevOps Experience performing firewall reviews - Palo Alto, Cisco, Checkpoint, pfSense. Experience with SIEM's such as LogRhythm, Splunk, Azure Sentinel, Alien Vault or Rapid 7 Strong experience using Microsoft 365 suite of products such as Endpoint Manager (InTune), Defender, Purview (Compliance … Entra, etc. In depth experience securing a hybrid infrastructure Strong Cloud Experience with either AWS, Azure, or GCP. REQUIRED SKILLS Knowledge MITRE ATT&CK, and Kill Chain Knowledge of IOC extraction, computer forensics, and malware analysis, technologies and methods Expert IPv4 Networking fundamental skills are required. TCP/ ...

willingness to support occasional out-of-hours requirements is also needed. Desirable Experience Experience with any of the following would be useful: Microsoft Azure, Microsoft 365, Entra ID, Defender or Sentinel. SIEM, endpoint detection and response, secure web gateways, email security or privileged access technologies. Security audits ...

Security Engineering & SOC Lead to build and run the controls our Cyber Security Architect designs, and to lead security operations for our Azure-hosted, multi‐tenant SaaS platform: SOC engineering, detection and monitoring, incident response, and managing a team of three analysts. 60% of the role is engineering … putting Azure guardrails, SOC tooling, pipeline security tooling and platform hardening into production. The rest is running the SOC: keeping security observability controls healthy, improving detections, leading response, and developing the three analysts. You are expected to be a senior hands‐on practitioner in the team ...

across cloud, identity, endpoint and network platforms, and carry out malware analysis and threat validation. Design, implement and optimise detection content across Microsoft Sentinel, Defender XDR, CrowdStrike and associated platforms, developing advanced KQL queries and analytics rules aligned to MITRE ATT&CK. Act as senior technical owner … security platforms including Microsoft Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune, Darktrace and supporting technologies, managing platform health, onboarding and configuration. Design and maintain automation and orchestration workflows using Logic Apps, Sentinel Playbooks, Power Automate, PowerShell, Python and API integrations to reduce manual operational effort. ...

policies, authentication, application segmentation, and secure access controls Proven troubleshooting skills across access, identity, networking, and cloud connectivity issues Good knowledge of Microsoft Azure networking and infrastructure services Experience supporting Windows Server, Active Directory, DNS, certificates, and authentication services A solid understanding of enterprise networking concepts including routing … ability to work effectively with both technical and non‐technical stakeholders Desirable Experience Microsoft Entra ID, Conditional Access, MFA, and SSO Microsoft Sentinel, Defender, Splunk, or SIEM platforms Zscaler Digital Experience (ZDX) Cloud security and Zero Trust architectures PowerShell, Python, Terraform, or automation tooling Palo Alto, Cisco ...

adjustment, please contact Sam.Austin@penningtonslaw.com Essential & Desirable Criteria Essential: Hands-on experience with SIEM platforms - alert triage, rule management, and investigation (Microsoft Sentinel, Splunk, or equivalent) Practical experience with Defender products - Defender for Endpoint, Defender for Cloud Apps, Defender for Identity Vulnerability management experience - scanning, triage, and remediation … tracking Identity & access management knowledge - Entra ID/Azure AD, conditional access, PIM, access reviews Incident response experience - containment, investigation, and remediation in a real-world environment Minimum 2–3 years in a security operations or cyber security role Experience responding to real security incidents Experience with vulnerability ...

offboarding Password vaulting, rotation, reconciliation Session monitoring, recording, and auditing Manage privileged access for: Windows, Linux/Unix, Network devices Databases Cloud platforms (Azure) Service, application, and DevOps accounts Integration & Automation Integrate CyberArk with: Active Directory/LDAP SIEM tools (Sentinel) Ticketing tools (ServiceNow) Identity platforms … Azure AD, SSO solutions) Develop and maintain automation scripts using: REST APIs PowerShell/Python Support PAM integrations for CI/CD and DevOps pipelines (Secrets Management). Security, Risk & Compliance Act as SME for PAM best practices, Zero Trust principles, and least privilege. Support internal and external ...

supporting the wider team. Lead serious incidents, forensic investigations and root cause analysis. Develop detections, automation and orchestration; conduct proactive threat hunting. Engineer Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune and Darktrace. Support Microsoft 365, Azure, AWS, identity and endpoint security. Maintain documentation, support compliance … mentor colleagues. Experience and qualifications Substantial SOC, cyber operations or security engineering experience. Hands-on Sentinel, Defender XDR and CrowdStrike expertise. Incident response, malware analysis, forensics and threat hunting. Advanced KQL; PowerShell and/or Python automation. Entra ID, Conditional Access, Intune and Microsoft 365 security. Cloud ...

provide recommendations to strengthen detection outcomes Job Requirements: Strong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps … attack lifecycle Experience with XDR or EDR platforms such as Microsoft Defender, CrowdStrike or Cortex Understanding of cloud environments, particularly Azure, and associated security telemetry Experience working in customer-facing or consultancy roles Strong communication skills, with the ability to explain technical concepts clearly Technical Competencies: SIEM ...

processes - enrichment, ticketing, containment - using Python, Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius of an incident Run hypothesis-led threat hunts, not just reactive … equivalent) Practical scripting/automation experience (Python, Logic Apps, REST APIs) or hands‐on SOAR platform configuration Working knowledge of several of: Microsoft Sentinel, Defender XDR, CrowdStrike, Microsoft Entra ID/Azure AD, Microsoft 365, AWS security tooling Experience investigating identity and cloud-based compromise, including ...

last 12 Months 6 Months Seim Engineer to come on board to be Responsible for onboarding and integrating security log sources into Microsoft Sentinel, ensuring reliable and comprehensive security telemetry. Develop custom parsers and data transformations to normalise and enrich ingested data, and design and optimise KQL queries … support effective threat detection, monitoring and security investigations. Key skills and responsibilities, Integrate and onboard log sources into Microsoft Sentinel, ensuring reliable security telemetry. Develop custom parsers, data transformations and KQL queries for threat detection and investigation. Create and maintain analytic rules and detection logic aligned to emerging ...

diligence Produce clear security reporting for IT and business leadership The technology You’ll work across a modern security environment including: Microsoft Azure, Intune, Okta, Zscaler, SentinelOne, Mimecast, Tenable, KnowBe4, SD-WAN, SIEM About you We’re looking for an experienced IT/cyber security professional with … risk and compliance, ideally within a multi-site or international environment. You’ll bring: Experience developing IT security policies and governance frameworks Strong Azure security and cloud governance knowledge Experience with Cyber Essentials, Cyber Essentials Plus, ISO 27001 or similar Practical knowledge of security technologies and SIEM platforms ...

what's there, set secure baselines and connect the pieces end to end. What you'll do: Onboard platforms and tools into Microsoft Sentinel, building custom connectors where native ones don't exist Work with SecOps so the right events are captured and detections work Implement Microsoft Purview … sensitivity labels and information protection Define and apply secure baselines across AWS and Azure and onboard workloads into Defender and posture management Secure new SaaS and data platforms as they arrive, including SSO and SCIM provisioning through Entra ID Create reusable patterns, document designs, test controls and escalate ...

Nash in the United Kingdom seeks an experienced SEIM Engineer with Active SC clearance to onboard and integrate security log sources into Microsoft Sentinel, delivering reliable telemetry and comprehensive threat visibility. You will develop custom parsers, transformations and KQL queries, and design SIEM detections aligned to evolving threats. …/CD pipelines with Azure DevOps/Git enable controlled deployments. #J-18808-Ljbffr ...

Security incident and investigations including APT threat actors Some knowledge of specialized security tools would be highly desirable (e.g. Palo Alto, Tenable, Defender, Sentinel tools). would be very beneficial Cloud Computing experience from multiple vendors (O365, Azure, AWS, Google, etc.) What ...

with an opportunity for an experienced Infrastructure Architect to shape the future of its infrastructure estate. Working across on-premise infrastructure, AWS and Azure, you'll assess a complex environment, identify architectural gaps and define a clear roadmap for improvement. You'll work closely with engineering teams … Assess and document the existing infrastructure estate, identifying gaps in configuration, ownership and capability. Define target-state architecture and improvement roadmaps across AWS, Azure and on-premise environments. Provide architectural direction for backup, disaster recovery and cyber recovery initiatives. Review cloud networking, hybrid connectivity, segmentation and security controls. ...

supported customer environments, ensuring progress, actions and updates are clearly tracked through to resolution. Act as a technical escalation point across Microsoft 365, Azure, Intune, Power Platform, Dynamics 365, cybersecurity tooling and custom applications. Support customer relationships through service reporting, reviews, governance and escalation activity, helping to track … technical support, service desk or managed services delivery Possess a strong working knowledge of Microsoft cloud and workplace technologies such as: Microsoft 365, Azure, Entra ID, Intune, Defender, Sentinel, Power Platform or Dynamics 365. Experience in managing complex incidents, service requests and customer escalations. A clear ...

Education is seeking a hands-on Security Engineering & SOC Lead to build and run Azure guardrails, SOC tooling, and platform hardening for a multi-tenant SaaS platform. You will lead security operations, detections, and the three-analyst team, troubleshooting issues and guiding engineering teams. Essential experience includes security … engineering/operations, Microsoft Sentinel, KQL, incident response on cloud platforms, and IaC with Terraform/Bicep. #J-18808-Ljbffr ...