26 to 50 of 121 Azure Sentinel Jobs in the UK

Managers while acting as the lead security voice with customers. Technical credibility across the Microsoft security ecosystem, including Defender, Entra ID, Microsoft 365, Azure, Sentinel, and Purview, alongside broader cyber security domains. Excellent communication and presentation skills, with the ability to engage senior stakeholders, deliver compelling ...

Analysts to identify and respond to threats effectively. This is not a generalist cyber security role. Key Responsibilities Administer and optimise Microsoft Sentinel (or equivalent SIEM), including log ingestion, parsing, normalisation, and retention. Develop and maintain SOAR workflows and automation using Azure Logic Apps, Python, PowerShell …/7 operational environment. Familiarity with MITRE ATT&CK, CVEs, and vulnerability management. Exposure to cloud security monitoring across Azure, AWS, or Microsoft 365. Desirable Certifications Microsoft SC-200 CompTIA Security+/CySA+ ISC2 CC or CISSP GIAC GCIA CEH Cisco CyberOps or Fortinet certifications What ...

threat detection and security operations. Hands-on knowledge of enterprise security technologies including SIEM, EDR/XDR and SOAR platforms. Experience with Microsoft Sentinel, Microsoft Defender XDR, Splunk or similar enterprise security tooling. Strong understanding of security frameworks including ISO 27001, NIST CSF, Cyber Essentials Plus and NIS2. … Clearance. Recently lapsed SC Clearance. CISSP, CISM, GIAC, GCIH, GCIA or equivalent security certifications. Experience managing outsourced SOC or MSSP providers. Exposure to Azure security technologies and cloud security operations. Whats on Offer - You'll be joining an organisation where cyber security is a strategic priority, giving ...

operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment. While Microsoft technologies (Microsoft 365, Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi layered networking, security, data management … zero-trust security principles to enhance protection across cloud platforms. Manage identity and access management (IAM) in a cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft ...

Azure Principal Platform Engineer - Appvia - UK Government Security Clearance eligibility required. Location: London, UK (Hybrid - typically ~1-2 days per month in office) Contract: Permanent Package: £90,000 – 120,000 + 10% Bonus + 10% Shares + Benefits (see more below) About Us At Appvia, we are committed … edge technologies and services to support cloud adoption, enabling companies to deliver applications in the cloud with ease. About the role As an Azure Principal Platform Engineer, you will guide customers toward Cloud and DevOps excellence, designing and implementing scalable, resilient, and secure platforms while leading a team ...

here to architect secure cloud environments, build and enhance detection logic at scale, and drive measurable improvements to our security baseline across AWS, Azure, and GCP. You will partner closely with Engineering, GRC, Technology Risk and Security Operations - defining standards, fine tuning the SIEM, and progressively taking … detection engineering challenges across the organisation. What you’ll be responsible for Cloud Security Secure and continuously improve our multi-cloud estate (AWS, Azure, GCP) using cloud native tooling to keep our cloud infrastructure hardened and compliant Partner with Engineering and Security Operation team to make security ...

/NIST CSF/CIS CSC v8.1) - design, maturity tracking and assurance across full programme lifecycles Enterprise & Cloud Security Architecture - AWS, Azure, GCP, Oracle Cloud (multi-cloud landing zones, hybrid identity, secure migration patterns) Classified Platform Design - OFFICIAL, OFFICIAL-SENSITIVE, SECRET and ABOVE SECRET environments, ROSA, Garrison, Citadel … Cisco, Juniper, F5, Zscaler, NSX-T, SD-WAN, encrypted WAN, DMZ, NAC ServiceNow & M365 Architecture - ITSM, ITOM, CSM, EAM, SharePoint Online, Purview, Entra, Sentinel, Defender, Power Platform, CoPilot Container & DevSecOps - Kubernetes (EKS, Tanzu), Terraform, Ansible, CI/CD security, image scanning, container hardening Architecture Frameworks - TOGAF, ArchiMate, SABSA ...

groups, prevention policies and detection management Incident response and threat hunting using CrowdStrike Falcon Complete, Falcon Insight or Falcon Prevent Integration with Microsoft Sentinel, Splunk, QRadar or similar SIEM platforms Active Directory integration Enterprise-scale security engineering Desirable Experience Microsoft Defender for Endpoint (MDE) SentinelOne Rapid7 Carbon Black … Microsoft Sentinel XSOAR or other SOAR platforms Azure, AWS or GCP security PowerShell or Python automation Zero Trust or enterprise security architecture ...

operational or analyst position. Key Responsibilities Design, implement, and optimise security controls across the Microsoft security stack. Engineer solutions leveraging Microsoft Defender, Microsoft Sentinel, Entra ID, and Azure security services. Lead the deployment and integration of security technologies across cloud and hybrid environments. Configure and enhance … Defender for Office 365 Defender for Cloud Apps Defender for Cloud Experience implementing and managing Microsoft Sentinel. Strong understanding of Microsoft Entra ID (Azure AD), Conditional Access, Identity Protection, and Privileged Identity Management. Experience securing Azure environments and implementing cloud security controls. Strong troubleshooting and integration ...

/CD pipelines, virtualisation, and IaC Software development skills using Linux or WSL SIEM and log routing experience in tools such as Splunk, Sentinel, Cribl, and ELK Familiarity with AWS, Azure, and GCP services Proficiency in scripting or programming (Python, Bash, PowerShell) Excellent problem-solving, analytical ...

alignment with internal policies, compliance requirements, and industry standards Skills & Experience Technical Expertise Strong hands-on experience with SIEM platforms (e.g. Splunk, Microsoft Sentinel, QRadar, Elastic, LogRhythm, ArcSight, Exabeam) Knowledge of log formats (JSON, syslog, XML, CEF) and ingestion methods (APIs, agents, Kafka, Event Hubs) Experience in detection … modelling, and attacker behaviour analysis Familiarity with SOAR tools and automation workflows Security Knowledge Understanding of networks, Windows/Linux systems, cloud platforms (Azure, AWS, GCP), identity systems, and endpoint security tools Knowledge of frameworks such as MITRE ATT&CK and threat hunting methodologies Essential Requirements Degree ...

application teams to improve security controls, enhance detection capabilities and support secure cloud operations. Key Responsibilities Monitor and investigate security events across Azure, AWS and hybrid cloud environments using SIEM, CSPM and native cloud security services. Perform detailed triage of alerts to identify genuine threats, eliminate false positives … attacker methodologies and industry best practices to strengthen organisational security. Technical Skills Experience in several of the following areas would be advantageous: Microsoft Azure Security AWS Security Services Google Cloud Platform (desirable) Microsoft Sentinel Kusto Query Language (KQL) CloudTrail, Azure Activity Logs and cloud ...

Role – Senior Azure Cybersecurity Content Engineer We’re looking for a Senior Azure Cybersecurity Content Engineer to help us lead , research, plan, and create advanced content and virtual labs for our online courses. The ideal candidate has deep Azure cloud security expertise , hands … high-quality training content for technical audiences. This is a senior individual contributor role with technical ownership, mentorship responsibilities, and influence over our Azure and cloud security content roadmap . Technical Skills & Experience To be considered for this opportunity, you must have 5+ years of relevant cyber security ...

Cyber Security Engineer - Microsoft 365 & Azure 6-Month Contract | Outside IR35 | £(Apply online only) per day | Remote (UK) | 1-2 Days per Month On-Site (South West London) A leading public sector organisation is looking for a Cyber Security Engineer to support a major cyber security improvement programme. … Working alongside the Cyber Security, Infrastructure and Platform teams, you'll help deliver a range of security enhancements across Microsoft 365, Azure and AWS, strengthening the organisation's overall security posture while improving identity, endpoint, cloud and data protection capabilities. This is a fantastic opportunity for someone ...

Cyber Security Engineer - Microsoft 365 & Azure 6-Month Contract Outside IR35 (Apply online only) per day Remote (UK) 1-2 Days per Month On-Site (South West London) A leading public sector organisation is looking for a Cyber Security Engineer to support a major cyber security improvement programme. … Working alongside the Cyber Security, Infrastructure and Platform teams, you'll help deliver a range of security enhancements across Microsoft 365, Azure and AWS, strengthening the organisation's overall security posture while improving identity, endpoint, cloud and data protection capabilities. This is a fantastic opportunity for someone ...

similar role within enterprise software environments Strong technical expertise and hands-on experience across Microsoft Entra and Identity, the Microsoft Defender suite, Microsoft Sentinel, and Microsoft Purview. Proven ability to manage compliance with ISO 27001 controls and to coordinate the Cyber Essentials recertification process. Strong reporting skills with … overall security posture, monitor alerts, assess risks, and coordinate remediation activities while implementing key security technologies Oversee identity and access management across Entra, Azure, Intune, Jira, AWS and SaaS platforms, maintaining Conditional Access, MFA, PIM and Identity Protection Implement and maintain Microsoft Sentinel, Purview ...

office locations globally and stay away from home on occasion. Knowledge and experience of these technologies is a key requirement: Microsoft EntraID/Azure Microsoft Defender 365 (including Microsoft Defender XDR) Microsoft Sentinel Microsoft Active Directory Microsoft Intune VMWare Experience in as many of these technologies ...

Code (IaC), CI/CD, and DevSecOps practices. What you'll be doing Design, build, and manage complex cloud environments using GCP and Azure, ensuring adherence to architectural guardrails and tagging standards. Develop and maintain secure, multi-region, multi-account cloud landing zones using automation frameworks. Implement advanced … using Terraform, CloudFormation, and Ansible for repeatable, auditable deployments. Integrate IaC pipelines with version control (Git), automated testing, and policy-as-code (e.g., Sentinel, OPA) for compliance enforcement. Champion GitOps and immutable infrastructure patterns. CI/CD & DevOps: Build and optimize CI/CD pipelines (Azure ...

PowerShell and APIs. Manage and optimise security tooling including SIEM, EDR/XDR and monitoring platforms. Support the secure configuration and governance of Azure, AWS and Microsoft 365 environments. Collaborate with IT, Development and Security teams to deliver secure-by-design solutions. Enhance detection, threat monitoring and incident … safeguards. Skills & Experience Essential Good level of experience within Cyber Security, Security Engineering, Cloud Security or Security Operations. Strong cloud security knowledge across Azure, AWS and/or Microsoft 365. Experience with scripting and automation using Python, PowerShell or similar technologies. Hands-on experience managing and configuring security ...

accountabilities Security Platform Operationalisation: Operationalise and tune the deployed security tooling estate, including CrowdStrike Falcon (EDR and Next-Gen SIEM), Wiz CSPM (Azure and AWS), Mimecast and the Microsoft security stack, moving platforms from deployed to fully managed through detection rule tuning, alert configuration, log source onboarding … tuning, host investigation and response actions. Experience operationalising SIEM, EDR/XDR and vulnerability management platforms (for example CrowdStrike Next-Gen SIEM, Microsoft Sentinel or Microsoft Defender), including detection tuning, alert management and vulnerability scanning and reporting. Microsoft security stack experience across Entra ID, Active Directory and Group ...

frameworks and standards such as: NIST ISO 27001 CIS Controls Cyber Essentials Regulatory requirements within Financial Services Technical Knowledge Good understanding of: Microsoft Azure AWS Active Directory/Entra ID Security Monitoring Platforms Identity Management Solutions Network and Infrastructure Security Ability to engage effectively with technical architects, engineers … management skills with the ability to engage at Executive and C‐Level. Experience managing third‐party suppliers and system integrators. Experience with: Microsoft Sentinel Splunk SailPoint CyberArk Okta CrowdStrike Microsoft Defender Suite Knowledge of DevSecOps practices. Exposure to cloud migration and security transformation programmes. Experience supporting regulatory remediation ...

frameworks and standards such as: NIST ISO 27001 CIS Controls Cyber Essentials Regulatory requirements within Financial Services Technical Knowledge Good understanding of: Microsoft Azure AWS Active Directory/Entra ID Security Monitoring Platforms Identity Management Solutions Network and Infrastructure Security Ability to engage effectively with technical architects, engineers … with the ability to engage at Executive and C-Level. Experience managing third-party suppliers and system integrators. Desirable Skills Experience with: Microsoft Sentinel Splunk SailPoint CyberArk Okta CrowdStrike Microsoft Defender Suite Knowledge of DevSecOps practices. Exposure to cloud migration and security transformation programmes. Experience supporting regulatory remediation ...

Microsoft Security Architect Department: Azure Employment Type: Full Time Location: Belfast Description We are seeking a highly skilled and experienced Microsoft Security Architect to join our dynamic team! The ideal candidate will be a subject matter expert in Microsoft's security ecosystem, with a strong focus on Azure … customers to understand their business needs, security challenges, and technical requirements. Solution Design & Architecture: Design comprehensive security solutions utilizing Microsoft technologies such as Azure, Entra ID, Entra Private Access, and the Defender suite (Defender for Endpoint, Defender for Cloud). Proposal Development: Create detailed solution proposals, including technical ...

experience across: • Experience working with SIEM or security monitoring platforms (not necessarily as a primary role), such as: o Google SecOps/Chronicle, Sentinel, QRadar, Splunk, Elastic or similar o Experience supporting or building log ingestion pipelines or data integrations • Exposure to integrating systems across: o Security tooling … code (e.g. Terraform) • Experience working with security tooling integrations (EDR, SOAR, threat intelligence platforms) • Understanding of cloud-native security services across AWS, Azure, or GCP • Relevant certifications such as: o SC-200, AZ-500, or cloud certifications • Experience working in regulated or public sector environments • Awareness of secure ...

experienced Microsoft Sentinel SME is required to support a major security transformation programme within a large enterprise environment. The successful consultant will take ownership of the Microsoft Sentinel platform, helping to improve detection capabilities, optimise existing configurations, develop new use cases, and enhance the organisation … hands‐on Security Engineer, Detection Engineer, SIEM Engineer, or Security Operations specialist with deep Microsoft security expertise and extensive experience working with Sentinel in complex enterprise environments. Key Responsibilities Act as the technical lead and subject matter expert for Microsoft Sentinel Review and optimise existing Sentinel ...