201 to 225 of 281 Azure Sentinel Jobs

findings clearly to different audiences. A proactive approach to learning and working collaboratively. Desirable: CompTIA Security+, CySA+ or equivalent knowledge; familiarity with Microsoft Sentinel, Splunk or Microsoft Defender; and exposure to Azure, AWS, PowerShell or Python. Why apply? This role offers the chance to build hands ...

findings clearly to different audiences. A proactive approach to learning and working collaboratively. Desirable: CompTIA Security+, CySA+ or equivalent knowledge; familiarity with Microsoft Sentinel, Splunk or Microsoft Defender; and exposure to Azure, AWS, PowerShell or Python. Why apply? This role offers the chance to build hands ...

events and incidents in a CSOC or comparable environment, or demonstrable transferable skills and the ability to develop rapidly. Working knowledge of Microsoft Sentinel, Microsoft Defender XDR, Microsoft Defender Vulnerability Management, Microsoft Azure and Amazon Web Services (AWS). Experience of proactive threat hunting ...

where designs do not meet required standards. Represent Littlefish Group at CAB and design authority forums, assessing changes for security impact. Shape Microsoft Sentinel architecture across complex customer environments. Produce high and low-level security designs, control mappings and technical decision records. Deliver security assessments, architecture reviews … Microsoft 365 and Azure posture reviews. Design and implement layered security controls from initial requirements through to testing and handover. Provide technical escalation, mentoring and guidance to CSOC and project engineering teams. Support pre-sales activity and contribute reusable security designs, standards and playbooks to the Littlefish Group ...

facing environment Experience coaching/developing senior technical professionals Broad knowledge across cloud, infrastructure, M365, identity, digital workplace, cyber security, managed services Strong Azure, M365 and Entra ID/AD knowledge Strong grounding in Zero Trust, Defender/Sentinel, NCSC, NIST, ISO 27001 ITIL v4 Foundation ...

respond to threats across AJ Bell. This is a senior, hands-on technical role. You'll own the architecture and engineering of Microsoft Sentinel and our wider security monitoring estate, lead complex investigations and technical incident response, and turn real-world adversary behaviour into effective detection and response. … aligned with AJ Bell’s technology estate and threat profile. Define and govern the onboarding of security telemetry across on-premises, Microsoft Azure, AWS and third-party services, ensuring log sources address genuine visibility gaps and provide reliable value for detection and investigation. Own the detection engineering lifecycle ...

respond to threats across AJ Bell. This is a senior, hands-on technical role. You'll own the architecture and engineering of Microsoft Sentinel and our wider security monitoring estate, lead complex investigations and technical incident response, and turn real-world adversary behaviour into effective detection and response. … aligned with AJ Bell’s technology estate and threat profile. Define and govern the onboarding of security telemetry across on-premises, Microsoft Azure, AWS and third-party services, ensuring log sources address genuine visibility gaps and provide reliable value for detection and investigation. Own the detection engineering lifecycle ...

skills Formal training or certification on software engineering concepts and proficient applied experience Working knowledge of a major cloud provider (AWS, GCP or Azure) and its core security services, such as audit logging, threat detection, vulnerability scanning and compliance posture management Hands-on experience securing Kubernetes and container … Kubernetes Benchmark Hands-on experience with a managed Kubernetes service - we run on AWS EKS, and equivalent experience with Google GKE or Azure AKS is equally welcome Exposure to infrastructure-as-code and/or policy-as-code practices using tools such as Terraform, Sentinel, Kyverno ...

apart. What you'll be doing: Cloud Security – Own the cloud security posture for clients, designing and implementing security controls across AWS and Azure using Terraform (including Control Tower, Security Hub, GuardDuty, Azure Entra ID, Defender, and Sentinel) while driving continuous posture improvements (CSPM … CFTC) Experience with CI/CD, infrastructure‐as‐code skills such as github actions and Terraform. Hands‐on AWS security experience and Azure security experience (Entra ID, PIM, CAP, Defender, Policy) Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment Experience conducting or coordinating penetration testing ...

apart. What you'll be doing: Cloud Security – Own the cloud security posture for clients, designing and implementing security controls across AWS and Azure using Terraform (including Control Tower, Security Hub, GuardDuty, Azure Entra ID, Defender, and Sentinel) while driving continuous posture improvements (CSPM … CFTC) Experience with CI/CD, infrastructure‐as‐code skills such as github actions and Terraform. Hands‐on AWS security experience and Azure security experience (Entra ID, PIM, CAP, Defender, Policy) Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment Experience conducting or coordinating penetration testing ...

apart. What you'll be doing: Cloud Security – Own the cloud security posture for clients, designing and implementing security controls across AWS and Azure using Terraform (including Control Tower, Security Hub, GuardDuty, Azure Entra ID, Defender, and Sentinel) while driving continuous posture improvements (CSPM … CFTC) Experience with CI/CD, infrastructure‐as‐code skills such as github actions and Terraform. Hands‐on AWS security experience and Azure security experience (Entra ID, PIM, CAP, Defender, Policy) Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment Experience conducting or coordinating penetration testing ...

apart. What you'll be doing: Cloud Security – Own the cloud security posture for clients, designing and implementing security controls across AWS and Azure using Terraform (including Control Tower, Security Hub, GuardDuty, Azure Entra ID, Defender, and Sentinel) while driving continuous posture improvements (CSPM … CFTC) Experience with CI/CD, infrastructure‐as‐code skills such as github actions and Terraform. Hands‐on AWS security experience and Azure security experience (Entra ID, PIM, CAP, Defender, Policy) Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment Experience conducting or coordinating penetration testing ...

with clients during incident response engagements, serving as a trusted advisor throughout the process. Knowledge of enterprise cloud infrastructure (AWS, G-Suite, O365, Azure, etc.) Experience in network infrastructure, communication protocols, and network log analysis. Knowledge of computer exploitation methodologies. Experience in using endpoint detection and response tools … such as Sentinel One, CrowdStrike, Carbon Black, Cisco AMP, or others. Experience in using forensic tools such as Axiom, FTK, Volatility, X-Ways, or similar. Experience in SIEM, EDR, IDS, and DLP technologies, memory and volatile data analysis. Knowledge of Command line tooling (grep, python, PowerShell, etc.) Prepare ...

secure-by-design principles and threat modelling into major technology change. Shaping security architecture across AI and agentic technologies, zero trust and identity, Azure, AWS and GCP, DevSecOps and data security. Overseeing penetration testing and offensive assurance activity, working with CHECK or CREST-accredited providers and incorporating … complex environments would be advantageous. Exposure to AI security, multi-cloud security, DevSecOps, data protection engineering or Microsoft security technologies including Defender XDR, Sentinel, Intune, Entra ID and Purview would also be beneficial. What you'll get in return A salary of up to £87,000 per annum ...

intelligence assessments, and comfort peer‐reviewing others’ analytic tradecraft. Working knowledge of cloud security event investigation and cloud detection tuning, particularly across AWS, Azure or GCP environments, including understanding of infrastructure‐level telemetry. Experience framing security findings in risk terms for non‐technical stakeholders—communicating likelihood, impact … expertise to proposals or bids. Tools and practice familiarity Hands‐on experience with at least one major SIEM platform (for example, Splunk, Microsoft Sentinel or Elastic Security) including writing and tuning detection rules. Familiarity with threat intelligence platforms, OSINT tooling or indicator lifecycle management in an operational context. ...

implementation of new detections and improvements to existing detections. Leveraging in-house knowledge to enrich and benefit the SIEM and SOC (e.g. managing Sentinel watchlists, assisting with triage, sharing knowledge of our technical estate with the MSP analysts, etc.) Assisting with incident investigation and insider threat monitoring. Producing … have some of the following skills and experience: Significant experience in Cyber Threat Intelligence. Significant experience in Threat Hunting. Experience with the Microsoft Sentinel SIEM/SOAR platform. Significant experience in writing KQL. Excellent understanding of threat intelligence principles and practices. Proven understanding of security risk management. Understanding ...

actually configure. M365 Workstream Inside an AI Platform Programme What you do: own Entra, Purview, Power Platform and Defender governance scope alongside an Azure architect, to deliverable and review-board dates. What it demands: holding the M365 position credibly next to other disciplines, and advising … Copilot, Copilot Studio, Agent 365 and Microsoft Foundry: environment strategy, agent lifecycle, data loss prevention, model and connector controls, and logging routes through Sentinel or Purview Map controls to recognised frameworks (NIST CSF 2.0, ISO/IEC 42001, CIS Controls, EU AI Act) and to the client ...

performing cloud solutions for our customers. Acting as a senior escalation point within our Managed Services team, you'll tackle technical challenges across Azure, Windows Server, virtualisation, networking, and hybrid infrastructure environments. Working closely with customers, engineers, and technical leads, you'll: Resolve cloud and infrastructure issues from … investigation through to resolution Support and optimise Azure services, including IaaS workloads and Azure Virtual Desktop (AVD) Manage and maintain Windows Server and virtualised environments across customer estates Contribute to service improvement, and infrastructure enhancement initiatives Identify opportunities to improve reliability, performance, security, and operational efficiency ...

delivery role. They need someone who has implemented Microsoft security solutions for real organisations, not just administered or supported them. If youve taken Sentinel, Defender XDR or Entra ID from design through to go-live, this is the role for you. The role is home-based, with … customer security and identity projects, working with architects, engineers, SOC analysts and project managers. Day to day that means: Implementing and tuning Microsoft Sentinel and Defender XDR Designing and deploying Entra ID controls, including Conditional Access, PIM, Identity Governance and Entra GSA Configuring Intune security baselines and hardening ...

following would be desirable but will not be assessed as part of the recruitment process: Experience integrating with APIs and enterprise systems using Azure or Power Platform services. Familiarity with Azure services such as Functions, Logic Apps and Application Insights. Understanding of secure solution design, including … identity (Entra ID), managed identities and secrets management. Experience monitoring and troubleshooting agentic solutions using tools such as Azure Monitor, Log Analytics or Sentinel. Experience with scripting and automation (e.g. PowerShell, CLI) and working with configuration formats such as JSON/YAML. Experience applying DevOps practices, including ...

depending on experience This is a hands-on, cloud-first engineering role for someone who builds and secures Microsoft 365 and Azure, rather than someone who supports it from a service desk. You will own the configuration, hardening and continual improvement of our tenant, act as the senior … standard for how our platforms are run. If your strongest work is configuring Conditional Access policies, deploying and tuning Microsoft Defender, standing up Sentinel, automating with PowerShell and Infrastructure as Code, and driving Secure Score in the right direction, this role is built for you. What you will ...

Month Contract Rate: £550 IR35: Outside IR35 Start Date: ASAP The Role: You will act as a Subject Matter Expert for Microsoft Sentinel, detection engineering, security monitoring architecture and associated security platforms. Key Responsibilities: Act as a Subject Matter Expert for Microsoft Sentinel, detection engineering, security … integrations Develop logging standards, onboarding patterns, use-case documentation and governance for the detection engineering lifecycle Design and implement automation using Logic Apps, Azure Functions, REST APIs, PowerShell and Python Perform security engineering activities including secure solution design, technical risk assessment, platform hardening, vulnerability remediation and security control ...

into commercial opportunities. This isn’t a role for someone who simply sells Microsoft licences. We want someone who understands Microsoft 365 and Azure – including Business Premium, E3, E5, E7 and relevant add-ons – and has a strong commercial understanding of Azure consumption. … able to articulate what a customer’s licensing, Azure usage and wider Microsoft estate mean for their security posture, capability and investment. You’ll sell our secure365® Security Managed Services , Microsoft Security solutions and consultancy to net-new customers, supported by our BDR, Marketing and technical teams. ...

dedicated Security Operations Centre (SOC) to support the defence of a major UK CNI organisation. The networks protected are predominantly hosted in Azure and AWS cloud platforms, with many hundred systems within these environments that must be protected. The customer is committed to development of this improved … groups or targeted ransomware attacks). Understand TCP/IP component layers to identify normal and abnormal traffic Understanding of AWS &/or Azure cloud services Experience of Splunk (with ES) &/or Sentinel, content development experience desirable Non-technical Client side consulting, including stakeholder engagement ...

Strong understanding of: Identity and Access Management Zero Trust Architecture Data Protection Security Operations Threat Detection and Response Cloud Security Experience implementing Microsoft Sentinel and Defender technologies at enterprise scale. Experience implementing Data Loss Prevention and Information Protection capabilities. Strong understanding of Azure and Microsoft ...