14 of 14 Permanent Azure Sentinel Jobs in Berkshire

Azure Platform Architect Location: UK Working Pattern: Hybrid/Client-facing Security Clearance: UK Government Security Clearance required We’re looking for an experienced Azure Platform Architect to join a growing cloud and infrastructure practice, taking a leading role in the design and delivery of secure … scalable Azure platforms for enterprise and public-sector customers. This is a hands-on architecture position with significant client exposure. You’ll combine deep Azure platform expertise with strong consulting and leadership skills, helping organisations shape their cloud strategy, modernise infrastructure and deliver large-scale transformation ...

across cloud, identity, endpoint and network platforms, and carry out malware analysis and threat validation. Design, implement and optimise detection content across Microsoft Sentinel, Defender XDR, CrowdStrike and associated platforms, developing advanced KQL queries and analytics rules aligned to MITRE ATT&CK. Act as senior technical owner … security platforms including Microsoft Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune, Darktrace and supporting technologies, managing platform health, onboarding and configuration. Design and maintain automation and orchestration workflows using Logic Apps, Sentinel Playbooks, Power Automate, PowerShell, Python and API integrations to reduce manual operational effort. ...

across cloud, identity, endpoint and network platforms, and carry out malware analysis and threat validation. Design, implement and optimise detection content across Microsoft Sentinel, Defender XDR, CrowdStrike and associated platforms, developing advanced KQL queries and analytics rules aligned to MITRE ATT&CK. Act as senior technical owner … security platforms including Microsoft Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune, Darktrace and supporting technologies, managing platform health, onboarding and configuration. Design and maintain automation and orchestration workflows using Logic Apps, Sentinel Playbooks, Power Automate, PowerShell, Python and API integrations to reduce manual operational effort. ...

supporting the wider team. Lead serious incidents, forensic investigations and root cause analysis. Develop detections, automation and orchestration; conduct proactive threat hunting. Engineer Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune and Darktrace. Support Microsoft 365, Azure, AWS, identity and endpoint security. Maintain documentation, support compliance … mentor colleagues. Experience and qualifications Substantial SOC, cyber operations or security engineering experience. Hands-on Sentinel, Defender XDR and CrowdStrike expertise. Incident response, malware analysis, forensics and threat hunting. Advanced KQL; PowerShell and/or Python automation. Entra ID, Conditional Access, Intune and Microsoft 365 security. Cloud ...

processes - enrichment, ticketing, containment - using Python, Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius of an incident Run hypothesis-led threat hunts, not just reactive … equivalent) Practical scripting/automation experience (Python, Logic Apps, REST APIs) or hands-on SOAR platform configuration Working knowledge of several of: Microsoft Sentinel, Defender XDR, CrowdStrike, Microsoft Entra ID/Azure AD, Microsoft 365, AWS security tooling Experience investigating identity and cloud-based compromise, including ...

security operations roles. Hands-on SIEM engineering and detection tuning experience. Proven ownership of complex incident response and investigations. Cloud security experience across Azure and AWS. Experience automating SOC workflows and response processes. Threat hunting experience beyond basic log review. Comfortable engaging directly with technical stakeholders. Able … prioritise and operate effectively under pressure. Useful but not essential Microsoft Sentinel experience. Container or Kubernetes environments. CI/CD security tooling exposure. Red or purple team experience. Why this opportunity Senior ownership and autonomy. Modern cloud-first environment. Strong investment in tooling and automation. Opportunity to genuinely ...

offboarding Password vaulting, rotation, reconciliation Session monitoring, recording, and auditing Manage privileged access for: Windows, Linux/Unix, Network devices Databases Cloud platforms (Azure) Service, application, and DevOps accounts Integration & Automation Integrate CyberArk with: Active Directory/LDAP SIEM tools (Sentinel) Ticketing tools (ServiceNow) Identity platforms … Azure AD, SSO solutions) Develop and maintain automation scripts using: REST APIs PowerShell/Python Support PAM integrations for CI/CD and DevOps pipelines (Secrets Management). Security, Risk & Compliance Act as SME for PAM best practices, Zero Trust principles, and least privilege. Support internal and external ...

skills, with the confidence to assess risk, make informed decisions and remain composed during high-pressure cyber incidents. Hands-on experience with Microsoft Sentinel, Microsoft Defender, SIEM and EDR technologies, with a strong understanding of security monitoring, detection and response. Good knowledge of modern technology environments, including Microsoft … Azure, AWS, SaaS platforms, identity services and enterprise infrastructure, alongside an understanding of attacker methodologies and frameworks such as MITRE ATT&CK. Excellent communication and stakeholder management skills, capable of translating technical findings into clear, meaningful updates for both technical and business audiences. Experience coaching, mentoring and supporting ...

last 12 Months 6 Months Seim Engineer to come on board to be Responsible for onboarding and integrating security log sources into Microsoft Sentinel, ensuring reliable and comprehensive security telemetry. Develop custom parsers and data transformations to normalise and enrich ingested data, and design and optimise KQL queries … support effective threat detection, monitoring and security investigations. Key skills and responsibilities, Integrate and onboard log sources into Microsoft Sentinel, ensuring reliable security telemetry. Develop custom parsers, data transformations and KQL queries for threat detection and investigation. Create and maintain analytic rules and detection logic aligned to emerging ...

diligence Produce clear security reporting for IT and business leadership The technology You’ll work across a modern security environment including: Microsoft Azure, Intune, Okta, Zscaler, SentinelOne, Mimecast, Tenable, KnowBe4, SD-WAN, SIEM About you We’re looking for an experienced IT/cyber security professional with … risk and compliance, ideally within a multi-site or international environment. You’ll bring: Experience developing IT security policies and governance frameworks Strong Azure security and cloud governance knowledge Experience with Cyber Essentials, Cyber Essentials Plus, ISO 27001 or similar Practical knowledge of security technologies and SIEM platforms ...

Title: SIEM Engineer (SC Cleared) Location: Reading/Havant Duration:6 months Description: Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries … threats and business use cases Develop Logic Apps and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed ...

supported customer environments, ensuring progress, actions and updates are clearly tracked through to resolution. Act as a technical escalation point across Microsoft 365, Azure, Intune, Power Platform, Dynamics 365, cybersecurity tooling and custom applications. Support customer relationships through service reporting, reviews, governance and escalation activity, helping to track … technical support, service desk or managed services delivery Possess a strong working knowledge of Microsoft cloud and workplace technologies such as: Microsoft 365, Azure, Entra ID, Intune, Defender, Sentinel, Power Platform or Dynamics 365. Experience in managing complex incidents, service requests and customer escalations. A clear ...

Nash in the United Kingdom seeks an experienced SEIM Engineer with Active SC clearance to onboard and integrate security log sources into Microsoft Sentinel, delivering reliable telemetry and comprehensive threat visibility. You will develop custom parsers, transformations and KQL queries, and design SIEM detections aligned to evolving threats. …/CD pipelines with Azure DevOps/Git enable controlled deployments. #J-18808-Ljbffr ...

ability to prioritise under pressure. Aware of how security decisions impact operations and customer outcomes. Familiarity with ISO 27001, Cyber Essentials, Microsoft Defender, Azure, Fortinet, Mimecast, Sentinel or similar platforms. Ability to meet vetting requirements (BS7858). Certifications Working towards or holding at least ...