51 to 75 of 196 Azure Sentinel Jobs

interested in engineers with experience across some of the following areas: Cyber security and platform engineering Networking and network security Cloud security - AWS, Azure or GCP CI/CD, DevSecOps and Infrastructure as Code Linux/WSL SIEM and log management - Splunk, Microsoft Sentinel, Cribl ...

risk assessments, threat modelling, and vulnerability management. Ensure compliance with UK GDPR, data protection regulations, and organisational policies. Cloud & Technology Security Hands-on Azure cloud security experience, including implementation and operation of Microsoft Defender security tools (e.g., Defender for Cloud, Defender for Endpoint, Defender for Identity, Defender … access management (IAM), Privileged Identity Management (PIM) encryption, and network security controls. Design and run SIEM/SOAR use-cases in Microsoft Sentinel (data connectors, analytics rules, workbooks, automation playbooks) to support SOC operations, threat detection, and incident response. Support DevSecOps practices and secure software development. Governance & Awareness ...

Senior Azure Cloud & Security Engineer Glasgow/Hybrid (2 days a week in the office) Salary up to £48,000 Our client, an established online education provider based in Glasgow, runs its learning platform and business systems on Microsoft Azure and Microsoft 365. They're looking … standard for how it's run. This is a hands-on role with real influence. You'll be the go-to person for Azure security, working with the IT team, developers and external partners to keep the platform secure, compliant and well run. What you'll be doing ...

/ML concepts and their application to identity and security data. Familiarity with Microsoft security and analytics tools such as Entra ID logs, Azure Monitor, Log Analytics and Sentinel. Exposure to Privileged Access Management (PAM) and role‐based privileged access. Understanding of data governance, responsible AI and information ...

experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform (GCP). Scripting or programming skills using Python, Bash and/ ...

experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform (GCP). Scripting or programming skills using Python, Bash and/ ...

experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform (GCP). Scripting or programming skills using Python, Bash and/ ...

experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform (GCP). Scripting or programming skills using Python, Bash and/ ...

experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform (GCP). Scripting or programming skills using Python, Bash and/ ...

experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform (GCP). Scripting or programming skills using Python, Bash and/ ...

/CD pipelines, virtualisation, and IaC Software development skills using Linux or WSL SIEM and log routing experience in tools such as Splunk, Sentinel, Cribl, and ELK Familiarity with AWS, Azure, and GCP services Proficiency in scripting or programming (Python, Bash, PowerShell) Excellent problem-solving, analytical ...

/CD pipelines, virtualisation, and IaC Software development skills using Linux or WSL SIEM and log routing experience in tools such as Splunk, Sentinel, Cribl, and ELK Familiarity with AWS, Azure, and GCP services Proficiency in scripting or programming (Python, Bash, PowerShell) Excellent problem-solving, analytical ...

across cloud, identity, endpoint and network platforms, and carry out malware analysis and threat validation. Design, implement and optimise detection content across Microsoft Sentinel, Defender XDR, CrowdStrike and associated platforms, developing advanced KQL queries and analytics rules aligned to MITRE ATT&CK. Act as senior technical owner … security platforms including Microsoft Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune, Darktrace and supporting technologies, managing platform health, onboarding and configuration. Design and maintain automation and orchestration workflows using Logic Apps, Sentinel Playbooks, Power Automate, PowerShell, Python and API integrations to reduce manual operational effort. ...

This hands‐on engineering role is responsible for the administration and continuous improvement of Microsoft Entra ID, Active Directory, Windows infrastructure, Intune and Azure services. The role will help strengthen identity security, improve operational reliability and support Space NK’s transition towards a cloud-native, Entra ID-centric … least‐privilege access controls. Support identity lifecycle activities, including joiner, mover and leaver processes and access reviews. Administer and troubleshoot Entra Connect, Azure AD Connect and Cloud Sync. Support application onboarding to Entra ID using SAML, OAuth 2.0 and OpenID Connect. Investigate authentication, authorisation and account‐related issues ...

Security Architect (Microsoft Security & Azure) Location: Remote (U.S.) Preference: Middle Tennessee candidates preferred Type: Direct Hire Compensation: $170,000 Base Salary Start Date: ASAP We're looking for a Security Architect to help lead a major security transformation for a growing healthcare organization. This is a rare opportunity … offers the chance to make a lasting impact. What You'll Be Doing Design and maintain enterprise security architecture across Microsoft 365 and Azure environments Develop security standards, roadmaps, governance models, and reference architectures Evaluate existing security tools and recommend modernization strategies Lead Zero Trust initiatives across identity ...

Managers while acting as the lead security voice with customers. Technical credibility across the Microsoft security ecosystem, including Defender, Entra ID, Microsoft 365, Azure, Sentinel, and Purview, alongside broader cyber security domains. Excellent communication and presentation skills, with the ability to engage senior stakeholders, deliver compelling ...

experience troubleshooting containerized environments (Kubernetes, OpenShift) - including networking, namespace segmentation, and service-level debugging in complex enterprise deployments. Experience with cloud platforms (AWS, Azure, GCP) and enterprise software deployments Excellent communication skills with ability to explain complex technical concepts to various audiences Willingness to travel across EMEA region ...

wide | Business Area: Digital | Salary Details: Competitive basic salary based on experience You will provide strategic and technical leadership across large-scale Azure deployments, focusing on architecture, governance, security, automation, and migration. The role bridges technical delivery with stakeholder advisory, ensuring Azure solutions are secure, scalable … enterprise cloud strategy. a great place to work, a great place to be a customer Key Responsibilities: Lead design and implementation of Azure landing zones, subscription governance, and management group hierarchy. Define and enforce Azure Policies, RBAC, and identity models (including Entra ID design, PIM, Conditional ...

breadcrumbs - fully integrated with Microsoft Defender XDR (Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps), Microsoft Sentinel, and Microsoft Security Copilot. The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps … Defender XDR across endpoint, identity, email, and cloud‐app workloads. Integrate all deception signals (honeypot, honeytoken, decoy, breadcrumb) into Defender XDR and Microsoft Sentinel as first‐class, high‐fidelity detections. Define and enforce a unified detection and response strategy across the Microsoft security stack. Data Protection, DLP & Insider ...

ensuring our cyber defence capabilities remain modern, integrated and responsive to evolving threats. Key Responsibilities Build, maintain and enhance security detections using Sentinel‐as‐Code, ensuring accurate and high‐quality analytics. Develop and maintain CI/CD pipelines to automate deployment of detections, automation playbooks and configuration updates. … security operations. Experience managing and maintaining security tools within a global environment, preferably within Financial Services. Hands on experience developing detections in Microsoft Sentinel, including strong KQL and detection as code practices. Proven ability to build and maintain CI/CD pipelines (Azure DevOps, GitHub Actions ...

Depending on the client environment and engagement, you can expect to work across technologies including: SIEM and security analytics platforms, such as Microsoft Sentinel and Splunk. SOAR and security automation technologies used for enrichment, triage and response orchestration. Endpoint Detection and Response (EDR/XDR) platforms, such … Microsoft Defender for Endpoint and CrowdStrike Falcon. Threat intelligence, detection engineering, investigation and incident response technologies. Cloud security monitoring across Microsoft Azure, AWS and GCP environments. What you can expect Work collaboratively across multiple technical teams and stakeholder groups, using your Security Operations expertise to solve complex client ...

Depending on the client environment and engagement, you can expect to work across technologies including: SIEM and security analytics platforms, such as Microsoft Sentinel and Splunk. SOAR and security automation technologies used for enrichment, triage and response orchestration. Endpoint Detection and Response (EDR/XDR) platforms, such … Microsoft Defender for Endpoint and CrowdStrike Falcon. Threat intelligence, detection engineering, investigation and incident response technologies. Cloud security monitoring across Microsoft Azure, AWS and GCP environments. What you can expect Work collaboratively across multiple technical teams and stakeholder groups, using your Security Operations expertise to solve complex client ...

policies, authentication, application segmentation, and secure access controls Proven troubleshooting skills across access, identity, networking, and cloud connectivity issues Good knowledge of Microsoft Azure networking and infrastructure services Experience supporting Windows Server, Active Directory, DNS, certificates, and authentication services A solid understanding of enterprise networking concepts including routing … ability to work effectively with both technical and non‐technical stakeholders Desirable Experience Microsoft Entra ID, Conditional Access, MFA, and SSO Microsoft Sentinel, Defender, Splunk, or SIEM platforms Zscaler Digital Experience (ZDX) Cloud security and Zero Trust architectures PowerShell, Python, Terraform, or automation tooling Palo Alto, Cisco ...

Required3+ years of experience in Security Operations, Detection Engineering or Security Engineering. Hands-on experience with enterprise SIEM platforms such as Splunk, Microsoft Sentinel, Elastic, Chronicle or QRadar. Experience building and tuning detection rules. Experience developing SOAR playbooks or security automation. Strong scripting skills using Python, PowerShell … similar languages. Experience working within cloud environments (AWS preferred; Azure or GCP experience also valued). Solid understanding of the MITRE ATT&CK framework. Experience supporting security incident response. Comfortable working with Git, APIs and engineering workflows. Excellent communication skills with both Security and Engineering teams. PreferredExperience with ...

Sentinel Defender Consultant Location: Remote Contract Type: Contract Duration: 2 months Rate: £440 - £490 per day INSIDE IR35 Overview We are seeking an experienced Sentinel Defender to support the monitoring, investigation and response to cyber security incidents within a Microsoft security environment. The successful candidate will … detection, security monitoring and incident response activities. Working as part of a wider Security Operations or Cyber Defence team, you will leverage Microsoft Sentinel and the Microsoft Defender suite to identify, investigate and remediate security threats across complex enterprise environments. Key Responsibilities Monitor and investigate security alerts generated ...