101 to 125 of 151 Azure Sentinel Jobs in the UK

dedicated Security Operations Centre (SOC) to support the defence of a major UK CNI organisation. The networks protected are predominantly hosted in Azure and AWS cloud platforms, with many hundred systems within these environments that must be protected. The customer is committed to development of this improved … groups or targeted ransomware attacks). Understand TCP/IP component layers to identify normal and abnormal traffic Understanding of AWS &/or Azure cloud services Experience of Splunk (with ES) &/or Sentinel, content development experience desirable Non-technical Client side consulting, including stakeholder engagement ...

dedicated Security Operations Centre (SOC) to support the defence of a major UK CNI organisation. The networks protected are predominantly hosted in Azure and AWS cloud platforms, with many hundred systems within these environments that must be protected. The customer is committed to development of this improved … groups or targeted ransomware attacks). Understand TCP/IP component layers to identify normal and abnormal traffic Understanding of AWS &/or Azure cloud services Experience of Splunk (with ES) &/or Sentinel, content development experience desirable Non-technical Client side consulting, including stakeholder engagement ...

Cyber Security Specialist/Cyber Security Engineer - CISSP, CEH, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bons +Benefits Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team … cybersecurity posture from an infrastructure perspective and external security rating. Identify, assess and remediate vulnerabilities across hardware, software and infrastructure (Windows Server and Azure Cloud). Monitor emerging threats and lead or support Incident Response investigations and mitigation. Evaluate, test and recommend security enhancements, controls and threat prevention ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, London (Hybrid) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity to join … SIEM/XDR) Strong Security Engineer (SIEM/XDR), security engineering or detection engineering experience Hands-on SIEM and XDR tooling, ideally Microsoft Sentinel and Microsoft Defender for Endpoint Detection engineering, detection-as-code, KQL, security content and alert logic Security telemetry, logging pipelines, data quality and telemetry ...

within a SOC environment with experience mentoring more junior staff. You will have the following experience: Industry standard Security qualifications (SANS GCIH, CISSP, Azure, Splunk, etc) or equivalent. Strong experience with SIEM technologies within a SOC (Splunk and MS Sentinel experience is highly desirable) Hands ...

client environment In-depth knowledge of Windows Server and Active Directory Strong Microsoft 365 administration and troubleshooting experience Experience with Microsoft Intune and Azure cloud infrastructure Strong networking knowledge including DNS, DHCP, VPNs and firewalls Excellent troubleshooting and problem-solving skills A structured approach to technical documentation Excellent … Scoping, planning and delivering infrastructure projects Managing on-premise to cloud migrations and hardware refreshes Standardising and securing client environments using Microsoft Intune, Azure/Entra ID and Microsoft 365 Supporting and maintaining physical servers, Hyper-V/VMware environments and network infrastructure Delivering advanced troubleshooting and resolving ...

Exchange Messaging SME – Exchange, Active Directory & Microsoft Sentinel Job Summary We are looking for an experienced Exchange/Messaging/SME with strong expertise in Microsoft Exchange, Active Directory (AD), and Microsoft Sentinel. The successful candidate will be responsible for supporting, maintaining, troubleshooting, securing, and improving enterprise Microsoft … domain controller issues. Support Active Directory migrations, upgrades, and domain consolidations. Implement security best practices, including privileged access management and least privilege. Microsoft Sentinel Deploy, configure, and manage Microsoft Sentinel. Develop and maintain analytics rules, KQL queries, workbooks, and automation. Investigate security incidents and suspicious activity. Integrate Microsoft ...

team in achieving objectives Strong eagerness to learn new technologies and develop cyber security skills, including Microsoft Security tools (e.g. Defender, Entra, Sentinel), cloud platforms (AWS/Azure), and scripting/coding (e.g. Terraform, Python, KQL) — product‐specific training provided Awareness of other security tools ...

Defender (essential) KQL knowledge desirable Ability to work independently and manage complex cyber investigations Technical Exposure: IBM QRadar Microsoft Defender/EDR Microsoft Sentinel (desirable) Microsoft Entra ID/Azure AD Email threat response Incident Experience: Phishing & Business Email Compromise Malware & Ransomware Account Compromise Privilege Escalation ...

automation across client environments. Responsibilities: Design, implement and optimise security controls. Develop detection capabilities using KQL and Advanced Hunting. Build and maintain Microsoft Sentinel analytical rules. Deploy and manage Content Hub solutions. Tune Microsoft Defender and wider threat policies. Manage phishing simulation campaigns. Lead vulnerability scanning activities. Analyse … activities. Handle escalated Incident Response investigations. Support advanced security investigations from the triage team. Develop and improve Incident Response playbooks. Automate processes using Azure Logic Apps. Audit and uplift Microsoft 365 security environments. Improve Microsoft Secure Score and security controls. Manage Defender policies and device tagging. Support Exchange ...

automation across client environments. Responsibilities: Design, implement and optimise security controls. Develop detection capabilities using KQL and Advanced Hunting. Build and maintain Microsoft Sentinel analytical rules. Deploy and manage Content Hub solutions. Tune Microsoft Defender and wider threat policies. Manage phishing simulation campaigns. Lead vulnerability scanning activities. Analyse … activities. Handle escalated Incident Response investigations. Support advanced security investigations from the triage team. Develop and improve Incident Response playbooks. Automate processes using Azure Logic Apps. Audit and uplift Microsoft 365 security environments. Improve Microsoft Secure Score and security controls. Manage Defender policies and device tagging. Support Exchange ...

cyber security posture . Monitor, investigate, and respond to security threats and vulnerabilities . Administer Identity and Access Management (IAM) across Microsoft , Microsoft Azure , Amazon Web Services (AWS) , and Software as a Service (SaaS) platforms. Implement and maintain Microsoft Defender , Microsoft Sentinel , Microsoft Purview , and other … Requirements 4+ years' experience in a cyber security or information security role. Strong technical expertise in Microsoft Entra ID , Microsoft Defender Suite , Microsoft Sentinel , and Microsoft Purview . Proven experience managing vulnerability scanning and penetration testing programmes. Experience supporting ISO 27001 compliance and coordinating Cyber Essentials and Cyber ...

CISSP, CCSP, CISM, SANS. Microsoft Security and Exposure Management: Build strong knowledge of Microsoft Security tools such as Defender for Cloud, Microsoft Sentinel, Defender XDR, Security Copilot, Entra ID, and Exposure Management capabilities to help clients identify, prioritise, and reduce security risks across cloud and hybrid environments. Cloud … engaged technology professionals to join our Managed Services team delivering continuous value to our client’s businesses. We are seeking a n Azure Cloud Architect with experience in Cloud Resiliency Architect ure who is passionate about improving reliability, continuity, and disaster recovery capabilities of enterprise cloud environments. ...

Cyber Security, a leading UK professional services firm, seeks a Cyber Security Architect & Engineering Lead to own security across Microsoft 365, Azure, Entra ID, Defender XDR, Sentinel, and Purview. This senior, hands-on role blends architecture and engineering to secure cloud, data, endpoints, apps and networks … while enabling AI adoption. You will lead security reviews, threat modelling and automation using Python, PowerShell, and Azure Functions; drive ISO 27001 and Cyber Essentials #J-18808-Ljbffr ...

projects, change initiatives and operations, with a focus on Microsoft cloud security. Responsibilities include secure design and configuration of Microsoft cloud services (Azure, Microsoft 365), configuring MS Sentinel and Defender, Azure firewalls, and providing risk assessments and security consultancy #J-18808-Ljbffr ...

modernisation, and AI adoption programmes. Support pre‐sales activities, workshops, proof of concepts, and executive presentations. Technology & Innovation Drive capability development across Microsoft Azure, Microsoft 365 Security, Microsoft Defender Suite, Microsoft Sentinel, Microsoft Entra, Microsoft Copilot for Security, Microsoft Purview, AWS Security, Google Cloud Security … Access), Microsoft 365 Defender (Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps), Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Copilot for Security, Microsoft Intune, AWS Security Services, Google Cloud. Technical Expertise Microsoft Entra (Identity, Identity Protection, Identity Governance, Internet Access, Private Access ...

Essential) Location: Hybrid, Hampshire Contract: Initial 6 Months with potential extension Specialist SIEM Engineer needed to develop, optimise and automate SSE's Microsoft Sentinel platform, supporting security monitoring, detection engineering and Project Amur/ECAF compliance. Scope Onboard and integrate log sources into Sentinel; build custom … queries; build and tune analytic rules and detection logic Develop Logic Apps/SOAR workflows to automate response Implement CI/CD pipelines (Azure DevOps/Git) for SIEM content deployment Automate deployment/config across environments; tune detections to reduce false positives Key Skills Active SC Clearance ...

This role can offer 3 days remote working. Essential Experience: Strong technical expertise in security, network, and infrastructure technologies, including experience with secure Azure/AWS cloud environments, Microsoft Defender for Endpoint, Microsoft Sentinel, and security tooling development. Proven ability to drive security automation and operational ...

last 12 Months 6 Months Seim Engineer to come on board to be Responsible for onboarding and integrating security log sources into Microsoft Sentinel, ensuring reliable and comprehensive security telemetry. Develop custom parsers and data transformations to normalise and enrich ingested data, and design and optimise KQL queries … support effective threat detection, monitoring and security investigations. Key skills and responsibilities, Integrate and onboard log sources into Microsoft Sentinel, ensuring reliable security telemetry. Develop custom parsers, data transformations and KQL queries for threat detection and investigation. Create and maintain analytic rules and detection logic aligned to emerging ...

customer and client security-assurance questionnaires on the business's behalf. Responsibilities Monitor, correlate and triage security alerts and activity across Microsoft 365, Azure, Entra ID, AWS, Databricks, endpoints and network services, using native tools and the central SIEM. Act as the primary internal contact for the managed … Hands-on SecOps experience using SIEM, EDR/XDR and cloud/identity telemetry, ideally with a managed SOC. Practical Microsoft security experience (Sentinel, Defender, Entra ID, Purview) and exposure to AWS; Databricks familiarity a plus. Demonstrable ISO/IEC 27001:2022 experience - collecting and presenting control evidence ...

organisation. Manage relationships with external security providers, partners, and auditors. Technology Environment You will work across a modern technology estate including: Microsoft Azure Microsoft Intune Okta Identity & Access Management Zscaler SentinelOne Mimecast Abnormal AI Tenable KnowBe4 SD-WAN Technologies SIEM and Security Monitoring Platforms About … compliance. Experience implementing and supporting security frameworks such as Cyber Essentials, Cyber Essentials Plus, ISO 27001, or similar. Strong knowledge of Microsoft Azure security and cloud governance. Experience working with modern identity, endpoint protection, email security, and security monitoring platforms. Experience managing cyber security incidents and supporting recovery ...

organisation. Manage relationships with external security providers, partners, and auditors. Technology Environment You will work across a modern technology estate including: Microsoft Azure Microsoft Intune Okta Identity & Access Management Zscaler SentinelOne Mimecast Abnormal AI Tenable KnowBe4 SD-WAN Technologies SIEM and Security Monitoring Platforms About … compliance. Experience implementing and supporting security frameworks such as Cyber Essentials, Cyber Essentials Plus, ISO 27001, or similar. Strong knowledge of Microsoft Azure security and cloud governance. Experience working with modern identity, endpoint protection, email security, and security monitoring platforms. Experience managing cyber security incidents and supporting recovery ...

regulatory engagements, including FCA supervisory requests and third-party due diligence. Technical security & architecture: Define and enforce the security architecture across our Azure-native, Kubernetes-based platform. Govern security controls across the full stack: Kafka, .NET/C#, Vue.js, Kong API Gateway, Auth0, and Salesforce. Lead threat modelling … security incident response plan; lead major incident management for cyber events. Operate and improve security monitoring, SIEM, and alerting across the Azure estate. Run the security awareness and training programme for all ~180 staff. Manage relationships with external SOC, MSSP, and specialist security partners. Requirements Demonstrable experience leading ...

protecting critical systems and data, while driving improvements across security operations, threat detection and incident response. You’ll work with technologies including Microsoft Sentinel, Security Copilot and Azure, collaborating with internal IT teams and an outsourced SOC to strengthen security capabilities. You’ll also have ...

operational processes. Key Responsibilities for the Senior Information Security Analyst: Provide secure design, configuration and assurance of Microsoft cloud services, including Microsoft Azure, Microsoft 365 and associated security, identity, compliance and monitoring tooling Use hands-on Microsoft cloud security expertise to assess project designs, define security requirements, validate … delivered solutions Configure MS Sentinel and MS Defender as well as Azure firewalls Provide security and risk assessment consultancy on projects, change initiatives, and other formal workgroups and committees. Assessing security risk and directing the design and implementation of appropriate security controls to effectively manage ...