1 to 25 of 35 Azure Sentinel Jobs in the UK excluding London

discipline. Proven ability to adapt quickly to emerging threats or new information, shifting focus as needed. Demonstrated expertise in Microsoft 365 Defender and Azure Sentinel for detecting, investigating, and responding to suspicious behaviors and anomalous activities. Familiarity with endpoint security solutions and security infrastructure, including … Working knowledge of cloud based web and email filtering solutions such as , Zscaler, Mimecast, Proofpoint, or Cisco. Experience with securing cloud environments (AWS, Azure, GCP), including configuration management, identity and access controls, monitoring, and incident response. Familiarity with cloud security tools (e.g., Microsoft Defender for Cloud, AWS Security ...

design" solutions are woven into the fabric of the entire ecosystem. Key Responsibilities Hybrid Architecture & Governance: Design and implement security controls across Azure, on-prem servers, and SaaS applications while maintaining hardening standards based on CIS and NIST benchmarks. Identity & Access Security: Define standards for Entra … overseeing requirements for Conditional Access, MFA, SSO, and PIM. Threat Detection & Incident Response: Own and operate the SIEM/SOAR stack, including Microsoft Sentinel and Defender XDR, to develop detection rules and support forensic investigations. Infrastructure Hardening: Enforce secure baselines across virtualized environments (VMware/Hyper-V), Windows ...

secure-by-design" solutions are woven into the fabric of the entire ecosystem.Key Responsibilities Hybrid Architecture & Governance: Design and implement security controls across Azure, on-prem servers, and SaaS applications while maintaining hardening standards based on CIS and NIST benchmarks. Identity & Access Security: Define standards for Entra … overseeing requirements for Conditional Access, MFA, SSO, and PIM. Threat Detection & Incident Response: Own and operate the SIEM/SOAR stack, including Microsoft Sentinel and Defender XDR, to develop detection rules and support forensic investigations. Infrastructure Hardening: Enforce secure baselines across virtualized environments (VMware/Hyper-V), Windows ...

passion for cybersecurity Willingness to learn Familiarity with security monitoring in cloud environments, especially Microsoft Azure. Experience with SIEM platforms, such as Microsoft Sentinel or Rapid7. Comfortable working in a collaborative, 24/7 shift-based SOC environments Desireable: Role: SOC AnalystLocation: Birmingham & LeedsWork Pattern: Hybrid ...

effective manner. Specifically you will: Support the rest of the security operations team to monitor, triage and investigate alerts and incidents within Sentinel Conduct initial incident triage, determining scope, urgency and appropriate actions to mitigate threats. Participate in the incident response process, assisting with investigation and remediation. Support … appreciation of how new security solutions can impact delivery. Experience with general security technologies and capabilities including Microsoft E5 technologies such as Azure Sentinel and the various Defender products would be a distinct advantage, as would exposure to automation and familiarity with Python to help streamline ...

PRTG). Microsoft Technologies Strong Windows Server (Apply online only)), AD, Group Policy, and systems admin. Working knowledge of Exchange Online. Experience with Azure AD and hybrid identity. Familiar with Intune and JAMF for device management. Solid Office 365 and Windows 10/11 admin skills. Virtualisation & Cloud … Skilled in Hyper-V and VMware (resource management, backups, failover). Exposure to Azure, AWS, GCP for migrations and optimisation. Communication Systems Experience with enterprise VoIP systems. Knowledge of IP CCTV setup, storage, and network integration. Backup & DR Proficient with Veeam for backup/replication. Experience ...

nature of the clients supported, candidates must be eligible for SC and NPPV3 security clearance . Key Responsibilities Create, maintain, and optimise Microsoft Sentinel analytics rules, Logic Apps, and playbooks to support incident detection and response. Support and enhance integrations between Microsoft Sentinel and other security … MSSP environment, responding to security incidents for public sector customers in line with agreed SLAs. Essential Experience Hands-on experience with Microsoft Sentinel within a SOC or MSSP environment. Experience building and maintaining automation using Azure Logic Apps and Sentinel playbooks. Working knowledge ...

will positively shape our future. What are the day-to-day tasks? Security Engineering & Automation Architect and implement security controls across Microsoft 365, Azure, Dynamics 365, Kubernetes (AKS), and AI/ML workloads. Lead the design and deployment of conditional access, Defender for Cloud, Purview DLP, Azure … related services. Integrate security into DevOps pipelines, CI/CD, infrastructure-as-code, and container workflows. Automate threat detection and response using Microsoft Sentinel SOAR, custom playbooks, and telemetry pipelines. Platform Security Oversight Own and optimise endpoint security through Intune, ensuring device compliance and integration with Zero Trust. ...

customer inquiries and support issues, spanning a variety of industries and technologies. This includes, but is not limited to, Public Cloud environments (Microsoft Azure and AWS), Microsoft 365, on-premise servers, and networks. Role Network infrastructure development: We've laid the groundwork for new leisure developments, ensuring seamless … Microsoft Fabric to build robust, scalable applications that set new standards in performance and usability Advanced security solutions: Our work with tools like Azure Sentinel places us at the vanguard of cybersecurity, safeguarding our clients' digital assets against evolving threats Training Why choose our Network Engineer ...

customer inquiries and support issues, spanning a variety of industries and technologies. This includes, but is not limited to, Public Cloud environments (Microsoft Azure and AWS), Microsoft 365, on-premise servers, and networks. As an Ofcom-registered ISP, we also offer a spectrum of connectivity solutions, including broadband … Microsoft Fabric to build robust, scalable applications that set new standards in performance and usability Advanced security solutions: Our work with tools like Azure Sentinel places us at the vanguard of cybersecurity, safeguarding our clients' digital assets against evolving threats Who we’re looking ...

reviews, and digital assurance. Maintain the technical security roadmap and drive improvements across tooling and capabilities. Operate and optimise core security tools (Defender, Sentinel, Tenable, CASB) and track control adoption through KPIs and dashboards. Lead and document security initiatives, including hardening guides, architecture diagrams, and evidence packs. Chair … certifications (Security+, CEH, CySA+, Cloud Security Engineer). Significant experience in cyber security operations or incident response. Hands-on expertise with Microsoft Defender, Sentinel, Tenable, CASB, and cloud security (AWS/Azure). Proven security project delivery, PowerShell automation skills, and familiarity with IR frameworks. Consulting ...

best practices Previous experience working for a consultancy Nice to Have Certifications (AZ-500, SC-200, CySA+, BTL1/2) Microsoft 365 & Azure security tooling (Sentinel, Defender) PowerShell and KQL experience Working Pattern & Package 37.5 hours per week, shift-based with on-call escalation 90% remote ...

experience Windows Server installation & configuration Virtualisation Vulnerability Scanning tools such as Qualys Cloud Platforms Experience with private & public cloud such as AWS & Azure Security Experience with MDM, MFA, Email filtering, Next generation firewalls & Anti-Virus solutions, SIEM Solutions such as Sentinel Skills An ability to work ...

security operations roles. Hands-on SIEM engineering and detection tuning experience. Proven ownership of complex incident response and investigations. Cloud security experience across Azure and AWS. Experience automating SOC workflows and response processes. Threat hunting experience beyond basic log review. Comfortable engaging directly with technical stakeholders. Able … prioritise and operate effectively under pressure. Useful but not essential Microsoft Sentinel experience. Container or Kubernetes environments. CI/CD security tooling exposure. Red or purple team experience. Why this opportunity Senior ownership and autonomy. Modern cloud-first environment. Strong investment in tooling and automation. Opportunity to genuinely ...

environment, focused on practical remediation and customer outcomes. The ideal candidate will have strong experience across Windows Server, Microsoft 365/Azure, and modern security technologies, and will be comfortable switching between customer meetings, technical design sessions, and hands-on engineering work when required. Key responsibilities and accountabilities … vulnerabilities and configuration weaknesses through practical changes and clear technical guidance. Assist with the deployment and improvement of security controls across Microsoft 365, Azure, and on-premises infrastructure. Work with Consulting and Security Operations teams to prioritise remediation activity based on risk and customer impact. Contribute to improving ...

environment, focused on practical remediation and customer outcomes. The ideal candidate will have strong experience across Windows Server, Microsoft 365/Azure, and modern security technologies, and will be comfortable switching between customer meetings, technical design sessions, and hands-on engineering work when required. Key responsibilities and accountabilities … vulnerabilities and configuration weaknesses through practical changes and clear technical guidance. Assist with the deployment and improvement of security controls across Microsoft 365, Azure, and on-premises infrastructure. Work with Consulting and Security Operations teams to prioritise remediation activity based on risk and customer impact. Contribute to improving ...

detection strategy and roadmap, aligning initiatives with KPIs and contractual requirements. Develop, optimise, and maintain high-fidelity detections using Splunk , Microsoft Sentinel , KQL , SPL , and Python for automation and Detection as Code. Work closely with cloud platforms ( AWS and Azure ) to enhance detection capabilities in hybrid … with day-to-day responsibilities. Essential Skills and Experience: SC clearance required to start; DV sponsorship available. Proven expertise with Splunk and Microsoft Sentinel SIEM platforms. Strong programming skills in Python , with experience developing automation and Detection as Code pipelines. Proficiency in KQL and SPL for creating efficient ...

prem LDAP applications, and outdated protocols like Kerberos and NTLM. Automation: Streamline operations by automating identity tasks using PowerShell, Microsoft Graph API, and Azure CLI. Governance & Compliance: Ensure all platforms meet hardening standards and assist with audit readiness for frameworks such as ISO 27001, GDPR, or PCI DSS. … What We’re Looking For Essential Experience: Expertise in Microsoft Identity: Proven track record with Azure Entra ID, Active Directory, and managing hybrid-to-cloud transitions. Device Management: Strong proficiency in Microsoft Intune/Endpoint Manager and modern Windows device transformation. Security Tooling: Hands-on experience deploying ...

goal: delivering an exceptional customer experience with speed and precision. Responsibilities: Be fast: Monitor alerts and events using tools like Microsoft Sentinel and PRTG, spotting issues before they become problems. Stay curious : Triage security and infrastructure incidents, follow playbooks, and keep things moving to resolution. Go further … DHCP). Windows/Linux systems or firewalls. Security tools (SIEM, antivirus, vulnerability scanners). Scripting (PowerShell, Python). Cloud platforms (Azure, AWS). Entry requirements: an A-Level in ICT OR an International Baccalaureate at Level 3 ICT OR an A-Level 3 apprenticeship in a similar ...

incident response, and threat hunting across a Microsoft-centric SIEM and XDR environment. This is a hands-on L3 role focused on Microsoft Sentinel and the Microsoft Defender XDR suite, acting as a technical authority within the SOC and supporting the ongoing expansion of security tooling and controls. … Responsibilities: Engineering and optimising Microsoft Sentinel, including log onboarding, connectors, parsers, and data normalisation Monitoring and optimising Sentinel and Defender licensing and ingestion costs Designing automated response and SOAR workflows using Sentinel playbooks Leading complex incident investigations and advanced threat response Proactive threat hunting ...

vulnerability management and coordinate remediation activities. Provide technical security guidance to IT teams and project stakeholders. Profile Experience with Microsoft security stacks (Defender, Sentinel, Entra ID, etc.). Experience in networking, firewalls, routers/switches, and cloud infrastructure (Azure preferred). Experience with vulnerability management ...

vulnerability management and coordinate remediation activities. Provide technical security guidance to IT teams and project stakeholders. Profile Experience with Microsoft security stacks (Defender, Sentinel, Entra ID, etc.). Experience in networking, firewalls, routers/switches, and cloud infrastructure (Azure preferred). Experience with vulnerability management ...

Intelligence Analyst, Threat Intelligence Analyst or Threat Hunting role Strong understanding of cyber threats, malware and adversary TTPs Hands-on experience with Microsoft Sentinel and Defender XDR Good working knowledge of KQL (Kusto Query Language) Strong understanding of the MITRE ATT&CK framework Experience investigating IOCs and real … Intelligence Analyst , not rigid office attendance. Keywords Cyber Threat Intelligence Analyst, Threat Intelligence Analyst, Cyber Threat Analyst, Threat Hunter, Cyber Security Analyst, Microsoft Sentinel, Defender XDR, KQL, Kusto Query Language, SIEM, EDR, MITRE ATT&CK, Threat Hunting, Cyber Threat Intelligence, Malware Analysis, IOCs, OSINT, SOC, Incident Response, Blue ...

focussed projects to improve security across Network, Windows Desktop/Server Environments, wider Wintel environment inc virtualised server environments VMWare, intune, O365/Azure in conjunction with the relevant teams. Review vulnerabilities in the environment and suggest, plan and implement remediation. Requirements: Technically minded security engineer Proficiency with … security tools such as SIEM, PAM, web filtering, email filtering (Mimecast), IDS/IPS, antivirus, endpoint protection, MS Sentinel, vulnerability assessment tools ie Tenable. Experience in SentinelOne MDR Experience in working with a third party to a managed SOC provision An understanding of the importance of Identity Threat ...

looking for a hands-on DevSecOps Engineer to take ownership of application and cloud security across a modern, Azure-first product environment. This is a product-focused security role, sitting at the intersection of development, DevOps and security, helping teams understand why vulnerabilities exist … understanding vulnerabilities at a low level and advising development teams on remediation Work closely with DevOps to ensure secure configuration and deployment within Azure (including Azure Front Door, WAF, Defender for Cloud, Sentinel) Support and interpret results from ITHC (UK Government-standard) penetration tests ...