76 to 100 of 151 Azure Sentinel Jobs in the UK

control improvements, and reporting outputs against agreed engagement milestones. Contribute to solution architecture and pre-sales deal shaping for cloud security, Microsoft Defender, Sentinel, Entra, Defender for Cloud, and exposure management opportunities while building trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales … engagements. Design, implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies. Understand threat modelling, attack paths, cloud misconfigurations, identity risks, vulnerabilities, and how to prioritise remediation based on exploitability and business ...

information security, cyber security, security operations or related disciplines. Experience investigating security incidents and managing security alerts. Good understanding of Microsoft 365, Azure/Entra ID and cloud security principles. Experience working with vulnerability management programmes. Knowledge of security frameworks and standards including: ISO/IEC 27001 Cyber … financial services firm or other highly regulated environment. Experience responding to client security questionnaires and audits. Knowledge of Microsoft Security technologies including Defender, Sentinel, Purview and Entra ID. What's In It For You We provide comprehensive support for our colleagues' health and wellbeing, including private medical cover ...

Cyber Security Analyst - Microsoft Security/IAM 3-Month Contract | Inside IR35 Bristol/Hybrid - Ideally 1-2 days per week onsite Microsoft Sentinel | Entra ID | IAM | Conditional Access | MFA | RBAC We're looking for an experienced Cyber Security Analyst to join a highly innovative organisation in Bristol … Identity & Access Management within the Microsoft ecosystem , so we're looking for somebody with strong hands-on knowledge of Entra ID/Azure AD, Conditional Access, MFA and RBAC , alongside experience working with Microsoft Sentinel . What you'll be doing Supporting and improving Identity & Access ...

Cyber Security Analyst – Microsoft Security/IAM 3-Month Contract | Inside IR35 Bristol/Hybrid – Ideally 1-2 days per week onsite Microsoft Sentinel | Entra ID | IAM | Conditional Access | MFA | RBAC We’re looking for an experienced Cyber Security Analyst to join a highly innovative organisation in Bristol … Identity andamp; Access Management within the Microsoft ecosystem , so we’re looking for somebody with strong hands‐on knowledge of Entra ID/Azure AD, Conditional Access, MFA and RBAC , alongside experience working with Microsoft Sentinel . What you’ll be doing Supporting and improving Identity ...

structure detections, gaps analysis, and defensive improvements. Experience with security operations in cloud platforms and common tools (e.g., Microsoft Defender, Sentinel, Splunk, CrowdStrike, Palo Alto, AWS/Azure security services) and integrating telemetry across environments. Calm under pressure, able to lead effectively during incidents and make ...

structure detections, gaps analysis, and defensive improvements. Experience with security operations in cloud platforms and common tools (e.g., Microsoft Defender, Sentinel, Splunk, CrowdStrike, Palo Alto, AWS/Azure security services) and integrating telemetry across environments. Calm under pressure , able to lead effectively during incidents and make ...

endpoint-focused security architecture for user-facing environments Data protection and compliance capabilities through Microsoft Purview Modern SOC enablement leveraging Defender and Sentinel telemetry alongside broader tooling The secure adoption of Microsoft Copilot and AI/LLM-driven capabilities, ensuring appropriate governance, data protection and access controls What … Entra ID (P2), including Conditional Access, MFA and Privileged Identity Management (PIM) Support the modernisation of Colts SOC operating model, leveraging Defender and Sentinel for user and endpoint telemetry, alongside integration of broader infrastructure data sources Conduct security architecture reviews and provide assurance for solutions leveraging Microsoft security ...

implementation and ongoing support. The organisation is investing heavily in its security capabilities and Microsoft technology estate, with several key initiatives planned across Azure and Microsoft 365. The successful candidate will play a pivotal role in helping shape and deliver these programmes while supporting the wider security function. … optimisation, supporting MDM and MAM capabilities. Microsoft Purview and Data Loss Prevention (DLP) implementation and enhancement. Ongoing development of Microsoft 365 and Azure security controls. Improvements to monitoring, detection and response capabilities across the security estate. What We're Looking For We're interested in speaking with candidates ...

implementation and ongoing support. The organisation is investing heavily in its security capabilities and Microsoft technology estate, with several key initiatives planned across Azure and Microsoft 365. The successful candidate will play a pivotal role in helping shape and deliver these programmes while supporting the wider security function. … optimisation, supporting MDM and MAM capabilities. Microsoft Purview and Data Loss Prevention (DLP) implementation and enhancement. Ongoing development of Microsoft 365 and Azure security controls. Improvements to monitoring, detection and response capabilities across the security estate. What We're Looking For We're interested in speaking with candidates ...

against Windows, macOS, and Linux platforms. Awareness of anti-virus, anti-malware, and endpoint protection concepts. Familiarity with SIEM concepts (Cortex XSIAM, Microsoft Sentinel, or equivalent). Familiarity with cloud services (Microsoft Azure, Microsoft 365, AWS). Awareness of incident management processes. Understanding of adversary motivations ...

CK. Experience designing remote and local access models including PAM and ZTNA with identity integration. Familiarity with Microsoft cloud security stack including Microsoft Sentinel, Microsoft Entra ID, Microsoft Defender for Cloud and secure connectivity on Azure Advanced certifications such as CISSP, TOGAF or SABSA, Cloud Security ...

provide recommendations to strengthen detection outcomes Job Requirements: Strong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps … attack lifecycle Experience with XDR or EDR platforms such as Microsoft Defender, CrowdStrike or Cortex Understanding of cloud environments, particularly Azure, and associated security telemetry Experience working in customer-facing or consultancy roles Strong communication skills, with the ability to explain technical concepts clearly Technical Competencies: SIEM ...

into the Global Security Operations Centre. Review and validate detection logic, thresholds, alert conditions and expected behaviours across SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight, Exabeam, and LogRhythm . Ensure accurate mapping of detection content to recognised threat frameworks, including MITRE ATT&CK . Identify detection … teams. Create investigation workflows, triage processes and escalation procedures for security incidents across Microsoft Defender, CrowdStrike, Cortex XDR, SentinelOne, Carbon Black, Azure, AWS, and GCP environments . Define required enrichment data, threat intelligence inputs and decision‐making criteria. Ensure procedures are practical, repeatable and aligned with global security ...

guidance and technical authority across security operations and incident response activities. Have proven experience working with SIEM and EDR technologies such as Microsoft Sentinel, Splunk, Microsoft Defender and Trend Micro. Demonstrate strong cyber investigation skills, applying evidence-led analysis, Digital Forensics and Incident Response methodologies to identify, contain … Have experience managing cyber incidents through detection, investigation, containment, remediation and post-incident review activities. Demonstrate knowledge of cloud and hybrid environments, including Azure, AWS, networking, identity management and enterprise security controls. Have experience developing and improving incident response playbooks, detection use cases and cyber security operational procedures. ...

intelligence assessments, and comfort peer‐reviewing others’ analytic tradecraft. Working knowledge of cloud security event investigation and cloud detection tuning, particularly across AWS, Azure or GCP environments, including understanding of infrastructure‐level telemetry. Experience framing security findings in risk terms for non‐technical stakeholders—communicating likelihood, impact … expertise to proposals or bids. Tools and practice familiarity Hands‐on experience with at least one major SIEM platform (for example, Splunk, Microsoft Sentinel or Elastic Security) including writing and tuning detection rules. Familiarity with threat intelligence platforms, OSINT tooling or indicator lifecycle management in an operational context. ...

clean handover once migration is complete. What We're Looking For Essential: Proven experience delivering a migration onto Microsoft Entra ID (formerly Azure AD) — from on-prem AD DS or from a third-party IdP (Okta, Ping, ForgeRock, etc.). Strong working knowledge of Conditional Access, Zero Trust … Graph PowerShell SDK. Comfortable working independently and communicating migration risk/status to non-technical stakeholders. Desirable: KQL for log analysis in Microsoft Sentinel or Azure Monitor. Experience with Entra ID B2B/B2C. Background with an alternative IAM platform (ForgeRock, Ping, Okta) — genuinely useful ...

skills. * Ability to gather and translate business requirements into technical solutions. * Willingness to travel to client sites as required. * Microsoft Security, Compliance or Azure certifications. * Experience with Microsoft Defender technologies. * Understanding of GDPR, ISO 27001 and other compliance frameworks. * Knowledge of Zero Trust security principles. * Experience delivering Microsoft … Retention Policies, eDiscovery, eDiscovery Premium, Insider Risk Management, Communication Compliance, Microsoft Defender, Defender XDR, Defender for Office 365, Defender for Cloud Apps, Microsoft Sentinel, Microsoft Entra ID, Azure Active Directory, Conditional Access, Identity and Access Management (IAM), Zero Trust, GDPR, ISO 27001, Cyber Essentials, Risk Management ...

POINTS * £50,000 - £55,000 salary * 9-month fixed-term contract * Hybrid working with UK and occasional EU site travel * Microsoft 365, Azure, Entra ID, Intune, Autopilot, Sentinel & Defender * Lead technical integrations following business acquisitions ABOUT THE CLIENT We're working with a growing technology … networks, identity and security environments before designing practical integration plans. A major part of the role will involve Microsoft technologies including Microsoft 365, Azure, Entra ID, Intune, Autopilot, Sentinel and Defender for Endpoint. You'll also lead system rationalisation, identify duplication and technical gaps, and work ...

Analyst (MS Sentinel & Defender, SC Cleared) | Contract Length: 3 month initial contract Location: Harlow Hybrid initially (1 day per week onsite), potential for remote after first week Inside IR35 Clearance Required: SC clearance - candidates must have valid clearance We're looking for an experienced SOC Analyst Consultant … security team within a large enterprise environment. Key Requirements: Demonstrable experience as a SOC Analyst Strong hands-on experience with SIEM, including Microsoft Sentinel Experience monitoring, triaging, and investigating security incidents Knowledge of incident response lifecycle and root cause analysis Experience with Microsoft Defender (essential) KQL knowledge desirable ...

senior security engineer to bridge cloud security, detection tooling, and incident response. You will own meaningful parts of the security stack, contribute to Azure hardening, and coordinate pen-test cycles. The role is a contract position with day-one impact and independent work expectations. You’ll bring hands … SIEM experience (Microsoft Sentinel preferred), Azure security knowledge, Terraform/Bicep for security tooling, and a proactive approach #J-18808-Ljbffr ...

scripts and engineering workflows. Drive AI-assisted engineering practices and help shape responsible AI adoption. Build and maintain CI/CD pipelines using Azure DevOps and Git-based workflows. Develop dashboards, reporting solutions and operational insights using Power BI and other tooling. Work with Azure services … reporting or operational improvement roles. Scripting and development expertise using PowerShell, Python or similar languages. Experience building automation workflows and repeatable technical processes. Azure DevOps experience including repositories, pipelines, version control and release processes. Strong understanding of CI/CD, Git and software engineering best practices. Experience creating ...

processes - enrichment, ticketing, containment - using Python, Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius of an incident Run hypothesis-led threat hunts, not just reactive … equivalent) Practical scripting/automation experience (Python, Logic Apps, REST APIs) or hands-on SOAR platform configuration Working knowledge of several of: Microsoft Sentinel, Defender XDR, CrowdStrike, Microsoft Entra ID/Azure AD, Microsoft 365, AWS security tooling Experience investigating identity and cloud-based compromise, including ...

troubleshoot and resolve technical issues Strong knowledge of Microsoft cloud and security technologies, including Exchange Online, Entra ID (cloud and hybrid), and Azure Hands‐on experience with Microsoft identity and access security services, including Conditional Access, PIM, RBAC, and identity protection Experience deploying and supporting Microsoft XDR solutions … Protection and Purview (DLP, Data Lifecycle Management) Email security solutions such as Defender for Office 365, Mimecast, or Barracuda SIEM platforms including Microsoft Sentinel, Splunk, or LogRhythm Endpoint protection solutions such as Microsoft Defender, Sophos, or CrowdStrike Certifications Microsoft Certified: Azure Fundamentals – AZ-900 Microsoft Certified ...

protecting critical systems and data, while driving improvements across security operations, threat detection and incident response. You’ll work with technologies including Microsoft Sentinel, Security Copilot and Azure, collaborating with internal IT teams and an outsourced SOC to strengthen security capabilities. You’ll also have … methods. We’re looking for someone with: Experience in Cyber Security Operations, Incident Response or Threat Detection Strong hands-on experience with Microsoft Sentinel (SIEM) Experience with Microsoft Security Copilot or similar AI-assisted security tools Azure cloud security experience Experience working with an outsourced ...

modernisation, and AI adoption programmes. Support pre-sales activities, workshops, proof of concepts, and executive presentations. Technology & Innovation Drive capability development across: Microsoft Azure Microsoft 365 Security Microsoft Defender Suite Microsoft Sentinel Microsoft Entra Microsoft Copilot for Security Microsoft Purview AWS Security Google Cloud Security … Access) Microsoft 365 Defender (Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps) Microsoft Defender for Cloud Microsoft Sentinel Microsoft Copilot for Security Microsoft Intune AWS Security Services Google Cloud Platform Security Zero Trust Architectures DevSecOps CNAP platforms (like Wiz and Palo Alto ...