51 to 75 of 81 Remote Azure Sentinel Jobs

looking for:Previously worked as a Threat Detection Engineer or in a similar role.Must have strong expertise in KQL.Hands-on experience with Microsoft Sentinel and Defender (Endpoint, Office 365).Familiarity with Microsoft Entra ID, including Identity Governance.Experience with Microsoft Purview, particularly DLP and data protection tools.Exposure to cloud … native logging in Azure and Kubernetes environments.Understanding of “detection as code” or “everything as code” approaches, including CI/CD pipelines.Experience working with or alongside MSP SOC teams.Awareness of Agile methodologies and ways of working.Knowledge of attacker TTPs, threat modelling, and cyber security frameworks.Understanding of statistics, data science ...

development using modern DevOps practices to enhance security operations.Understanding of social engineering tactics, phishing attacks, and physical security measures.Experience with secured cloud architectures (Azure, AWS) and tools such as Microsoft Defender for Endpoint and Microsoft Sentinel.Attainment of relevant Microsoft accreditations (e.g. … empower individuals to create sustainable value through innovative technology solutions. As one of Microsoft's leading partners in the UK specializing in Azure, Security, Dynamics 365, and Microsoft 365, we have a proven track record of delivering transformational IT services.Our Selection Process:We are committed to providing ...

skills. * Ability to gather and translate business requirements into technical solutions. * Willingness to travel to client sites as required. * Microsoft Security, Compliance or Azure certifications. * Experience with Microsoft Defender technologies. * Understanding of GDPR, ISO 27001 and other compliance frameworks. * Knowledge of Zero Trust security principles. * Experience delivering Microsoft … Retention Policies, eDiscovery, eDiscovery Premium, Insider Risk Management, Communication Compliance, Microsoft Defender, Defender XDR, Defender for Office 365, Defender for Cloud Apps, Microsoft Sentinel, Microsoft Entra ID, Azure Active Directory, Conditional Access, Identity and Access Management (IAM), Zero Trust, GDPR, ISO 27001, Cyber Essentials, Risk Management ...

POINTS * £50,000 - £55,000 salary * 9-month fixed-term contract * Hybrid working with UK and occasional EU site travel * Microsoft 365, Azure, Entra ID, Intune, Autopilot, Sentinel & Defender * Lead technical integrations following business acquisitions ABOUT THE CLIENT We're working with a growing technology … networks, identity and security environments before designing practical integration plans. A major part of the role will involve Microsoft technologies including Microsoft 365, Azure, Entra ID, Intune, Autopilot, Sentinel and Defender for Endpoint. You'll also lead system rationalisation, identify duplication and technical gaps, and work ...

Cyber Security Analyst - Microsoft Security/IAM 3-Month Contract | Inside IR35 Bristol/Hybrid - Ideally 1-2 days per week onsite Microsoft Sentinel | Entra ID | IAM | Conditional Access | MFA | RBAC We're looking for an experienced Cyber Security Analyst to join a highly innovative organisation in Bristol … Identity & Access Management within the Microsoft ecosystem , so we're looking for somebody with strong hands-on knowledge of Entra ID/Azure AD, Conditional Access, MFA and RBAC , alongside experience working with Microsoft Sentinel . What you'll be doing Supporting and improving Identity & Access ...

Cyber Security Analyst – Microsoft Security/IAM 3-Month Contract | Inside IR35 Bristol/Hybrid – Ideally 1-2 days per week onsite Microsoft Sentinel | Entra ID | IAM | Conditional Access | MFA | RBAC We’re looking for an experienced Cyber Security Analyst to join a highly innovative organisation in Bristol … Identity andamp; Access Management within the Microsoft ecosystem , so we’re looking for somebody with strong hands‐on knowledge of Entra ID/Azure AD, Conditional Access, MFA and RBAC , alongside experience working with Microsoft Sentinel . What you’ll be doing Supporting and improving Identity ...

scripts and engineering workflows. Drive AI-assisted engineering practices and help shape responsible AI adoption. Build and maintain CI/CD pipelines using Azure DevOps and Git-based workflows. Develop dashboards, reporting solutions and operational insights using Power BI and other tooling. Work with Azure services … reporting or operational improvement roles. Scripting and development expertise using PowerShell, Python or similar languages. Experience building automation workflows and repeatable technical processes. Azure DevOps experience including repositories, pipelines, version control and release processes. Strong understanding of CI/CD, Git and software engineering best practices. Experience creating ...

processes - enrichment, ticketing, containment - using Python, Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius of an incident Run hypothesis-led threat hunts, not just reactive … equivalent) Practical scripting/automation experience (Python, Logic Apps, REST APIs) or hands-on SOAR platform configuration Working knowledge of several of: Microsoft Sentinel, Defender XDR, CrowdStrike, Microsoft Entra ID/Azure AD, Microsoft 365, AWS security tooling Experience investigating identity and cloud-based compromise, including ...

troubleshoot and resolve technical issues Strong knowledge of Microsoft cloud and security technologies, including Exchange Online, Entra ID (cloud and hybrid), and Azure Hands‐on experience with Microsoft identity and access security services, including Conditional Access, PIM, RBAC, and identity protection Experience deploying and supporting Microsoft XDR solutions … Protection and Purview (DLP, Data Lifecycle Management) Email security solutions such as Defender for Office 365, Mimecast, or Barracuda SIEM platforms including Microsoft Sentinel, Splunk, or LogRhythm Endpoint protection solutions such as Microsoft Defender, Sophos, or CrowdStrike Certifications Microsoft Certified: Azure Fundamentals – AZ-900 Microsoft Certified ...

protecting critical systems and data, while driving improvements across security operations, threat detection and incident response. You’ll work with technologies including Microsoft Sentinel, Security Copilot and Azure, collaborating with internal IT teams and an outsourced SOC to strengthen security capabilities. You’ll also have … methods. We’re looking for someone with: Experience in Cyber Security Operations, Incident Response or Threat Detection Strong hands-on experience with Microsoft Sentinel (SIEM) Experience with Microsoft Security Copilot or similar AI-assisted security tools Azure cloud security experience Experience working with an outsourced ...

modernisation, and AI adoption programmes. Support pre-sales activities, workshops, proof of concepts, and executive presentations. Technology & Innovation Drive capability development across: Microsoft Azure Microsoft 365 Security Microsoft Defender Suite Microsoft Sentinel Microsoft Entra Microsoft Copilot for Security Microsoft Purview AWS Security Google Cloud Security … Access) Microsoft 365 Defender (Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps) Microsoft Defender for Cloud Microsoft Sentinel Microsoft Copilot for Security Microsoft Intune AWS Security Services Google Cloud Platform Security Zero Trust Architectures DevSecOps CNAP platforms (like Wiz and Palo Alto ...

dedicated Security Operations Centre (SOC) to support the defence of a major UK CNI organisation. The networks protected are predominantly hosted in Azure and AWS cloud platforms, with many hundred systems within these environments that must be protected. The customer is committed to development of this improved … groups or targeted ransomware attacks). Understand TCP/IP component layers to identify normal and abnormal traffic Understanding of AWS &/or Azure cloud services Experience of Splunk (with ES) &/or Sentinel, content development experience desirable Non-technical Client side consulting, including stakeholder engagement ...

dedicated Security Operations Centre (SOC) to support the defence of a major UK CNI organisation. The networks protected are predominantly hosted in Azure and AWS cloud platforms, with many hundred systems within these environments that must be protected. The customer is committed to development of this improved … groups or targeted ransomware attacks). Understand TCP/IP component layers to identify normal and abnormal traffic Understanding of AWS &/or Azure cloud services Experience of Splunk (with ES) &/or Sentinel, content development experience desirable Non-technical Client side consulting, including stakeholder engagement ...

provide recommendations to strengthen detection outcomesJob Requirements:Strong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferredExperience writing detection logic using KQL or similar query languagesProven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR … sources map to the attack lifecycleExperience with XDR or EDR platforms such as Microsoft Defender, CrowdStrike or CortexUnderstanding of cloud environments, particularly Azure, and associated security telemetryExperience working in customer-facing or consultancy rolesStrong communication skills, with the ability to explain technical concepts clearlyTechnical Competencies:SIEM ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, London (Hybrid) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity to join … SIEM/XDR) Strong Security Engineer (SIEM/XDR), security engineering or detection engineering experience Hands-on SIEM and XDR tooling, ideally Microsoft Sentinel and Microsoft Defender for Endpoint Detection engineering, detection-as-code, KQL, security content and alert logic Security telemetry, logging pipelines, data quality and telemetry ...

Defender (essential) KQL knowledge desirable Ability to work independently and manage complex cyber investigations Technical Exposure: IBM QRadar Microsoft Defender/EDR Microsoft Sentinel (desirable) Microsoft Entra ID/Azure AD Email threat response Incident Experience: Phishing & Business Email Compromise Malware & Ransomware Account Compromise Privilege Escalation ...

enterprise clients: SOC onboardings, SIEM and EDR rollouts, vulnerability management programmes and incident response service deployments, most of them built on Microsoft Sentinel, Defender and Azure. You'll own each engagement from scoping to handover, sitting between the client, the SOC and the engineers making it happen. … managing the trade-offs between them Confident with clients, and able to coordinate technical teams across departments Experience delivering projects on Microsoft Azure and the Microsoft cloud ecosystem, including transformation, migration or modernisation work Nice to have: PMP, PRINCE2 or an equivalent project management certification Experience working ...

Cyber Security, a leading UK professional services firm, seeks a Cyber Security Architect & Engineering Lead to own security across Microsoft 365, Azure, Entra ID, Defender XDR, Sentinel, and Purview. This senior, hands-on role blends architecture and engineering to secure cloud, data, endpoints, apps and networks … while enabling AI adoption. You will lead security reviews, threat modelling and automation using Python, PowerShell, and Azure Functions; drive ISO 27001 and Cyber Essentials #J-18808-Ljbffr ...

Essential) Location: Hybrid, Hampshire Contract: Initial 6 Months with potential extension Specialist SIEM Engineer needed to develop, optimise and automate SSE's Microsoft Sentinel platform, supporting security monitoring, detection engineering and Project Amur/ECAF compliance. Scope Onboard and integrate log sources into Sentinel; build custom … queries; build and tune analytic rules and detection logic Develop Logic Apps/SOAR workflows to automate response Implement CI/CD pipelines (Azure DevOps/Git) for SIEM content deployment Automate deployment/config across environments; tune detections to reduce false positives Key Skills Active SC Clearance ...

cyber security posture . Detect, investigate, and respond to cyber threats and security incidents . Administer Identity & Access Management (IAM) across Microsoft , Azure , AWS , and SaaS platforms. Deploy and optimise Microsoft Defender , Microsoft Sentinel , and Microsoft Purview . Drive vulnerability management and penetration testing programmes. Secure … Requirements 4+ years' experience in a cyber security or information security role. Strong technical expertise in Microsoft Entra ID , Microsoft Defender Suite , Microsoft Sentinel , and Microsoft Purview . Proven experience managing vulnerability scanning and penetration testing programmes. Experience supporting ISO 27001 compliance and coordinating Cyber Essentials and Cyber ...

regulatory stipulations regarding security incidents on a global scale Experience in operationalizing automation to support process efficiency Experience with SIEM technologies (i.e. Sentinel), cloud-based management and investigation consoles (i.e. Azure), and other Digital Forensics analysis tools Deep understanding of both Windows and Unix/Linux ...

This role can offer 3 days remote working. Essential Experience: Strong technical expertise in security, network, and infrastructure technologies, including experience with secure Azure/AWS cloud environments, Microsoft Defender for Endpoint, Microsoft Sentinel, and security tooling development. Proven ability to drive security automation and operational ...

organisation. Manage relationships with external security providers, partners, and auditors. Technology Environment You will work across a modern technology estate including: Microsoft Azure Microsoft Intune Okta Identity & Access Management Zscaler SentinelOne Mimecast Abnormal AI Tenable KnowBe4 SD-WAN Technologies SIEM and Security Monitoring Platforms About … compliance. Experience implementing and supporting security frameworks such as Cyber Essentials, Cyber Essentials Plus, ISO 27001, or similar. Strong knowledge of Microsoft Azure security and cloud governance. Experience working with modern identity, endpoint protection, email security, and security monitoring platforms. Experience managing cyber security incidents and supporting recovery ...

skills for proposals, presentations and technical documentation. Full UK driving licence and willingness to travel. Desirable Experience & Skills Hands-on experience with Microsoft Sentinel and Microsoft Defender. Experience delivering technical demonstrations. Knowledge of SOAR, automation and AI-assisted security operations. Microsoft or other relevant cyber security certifications. Experience … security certifications, supported by Nomios through training, study time and lab access. Target certifications include: SC-200 Microsoft Security Operations Analyst AZ-500 Azure Security Engineer Associate SC-100 Microsoft Cybersecurity Architect Relevant Microsoft partner accreditations Job Specifics Location: This is a hybrid role, requiring attendance ...

Pipeline & Analytics, who can lead the engineering strategy, architecture, delivery, and operational excellence of Allstate’s enterprise telemetry and analytics platforms, including Cribl, Azure Data Explorer (ADX), and related observability data services, and own the end‐to‐end observability pipeline ecosystem that enables scalable collection, transformation, routing, governance … employment at Allstate. Allstate is not providing sponsorship for this vacancy. A minimum of 3years’ experience with Cribl Stream, Cribl Edge, Azure Data Explorer (ADX), or equivalent large‐scale telemetry platforms. A minimum of 2years experience leading enterprise observability, telemetry, logging, or analytics platform engineering teams. Hands ...