1 to 25 of 45 Permanent Azure Sentinel Jobs in London

infrastructure lifecycle management: provisioning, patching, updates, scaling, and decommissioning Build and maintain cloud governance guardrails using policy‐as‐code (OPA, Sentinel, Azure Policy) to enforce security, cost, and compliance standards Implement FinOps practices including automated rightsizing, reserved instance management, waste detection, and cost allocation tagging Lead … Skills & Expertise Expert‐level IaC proficiency: Terraform (strongly preferred), CloudFormation, Pulumi, or Bicep Deep experience with at least two major cloud platforms: AWS, Azure, GCP, or VMware private cloud Strong experience with Kubernetes (EKS/AKS/GKE), container orchestration, and platform services Configuration management expertise: Ansible, Chef ...

infrastructure lifecycle management: provisioning, patching, updates, scaling, and decommissioning Build and maintain cloud governance guardrails using policy‐as‐code (OPA, Sentinel, Azure Policy) to enforce security, cost, and compliance standards Implement FinOps practices including automated rightsizing, reserved instance management, waste detection, and cost allocation tagging Lead … SKILLS & EXPERTISE Expert‐level IaC proficiency: Terraform (strongly preferred), CloudFormation, Pulumi, or Bicep Deep experience with at least two major cloud platforms: AWS, Azure, GCP, or VMware private cloud Strong experience with Kubernetes (EKS/AKS/GKE), container orchestration, and platform services Configuration management expertise: Ansible, Chef ...

Outside IR35 | Fully Remote (UK Only) We are partnering with a globally recognised health technology organisation to recruit an experienced Azure DevOps/Platform Engineer for an initial 6-month contract. This role sits within a high-performing Cloud Engineering team, working on secure, scalable, cloud-native systems … Sentinel for security monitoring and auditing Consolidate security auditing into unified reporting frameworks Required Skills & Experience Strong hands‐on experience with Microsoft Azure (certification required) HashiCorp Terraform certification and proven expertise in Terraform Kubernetes certification and experience with AKS Deep understanding of DevOps and platform engineering ...

close to the action. Key Responsibilities: Lead the design, implementation, and optimisation of security controls across Microsoft Defender, Intune, Entra ID, Azure, and M365. Own and evolve Conditional Access, identity protection, device compliance, and endpoint hardening strategies. Act as the technical lead for cyber incidents, supporting investigation, containment … Support governance activities including risk assessments, audits, and compliance reviews. Technical Experience: Strong hands-on experience with Microsoft Defender XDR, Intune, Entra ID, Azure security controls, and Microsoft Sentinel. Proven ability to design and implement Conditional Access, identity protection, and device compliance policies. Experience developing detection rules, analytics ...

MERITUS are recruiting for an Infrastructure & Cloud Engineer to join a large Technology Consultancy, supporting secure hybrid infrastructure and Microsoft Azure environments across UK Government customers. INFRASTRUCTURE & CLOUD ENGINEER - Up to £65,000 - REMOTE (UK) - ACTIVE SC CLEARANCE REQUIRED We're looking for an experienced Infrastructure & Cloud Engineer … with a strong Microsoft background to support and improve enterprise infrastructure across on-premise and Azure environments. This is a hands-on role offering the opportunity to work with modern cloud technologies, automation tools and Microsoft 365 services while supporting business-critical systems within a secure environment. Responsibilities ...

implement, and support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling. Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities. Develop automated controls and workflows to enhance governance, compliance, and incident response processes. Skills and Experience Essential … using services such as IAM, Security Hub, GuardDuty, CloudTrail, Config, AWS Organizations, Route 53, and Key Management Service (KMS). Microsoft 365 and Azure Security: Strong experience with Microsoft security technologies including Microsoft Defender XDR, Microsoft Sentinel, Microsoft Purview, Intune, Entra ID, Azure Security ...

Flagstone is actively seeking a senior security engineer to own critical parts of our security stack across Azure, Sentinel, Defender for Cloud, and related tooling. You’ll drive incident response, threat detection, and secure AI workflows in a fintech context with visible impact and cross‐team … collaboration. In this hands‐on role, you’ll harden Azure configurations, write/dial in detection rules, contribute to infrastructure‐as‐code (Terraform or Bicep), and coordinate penetration tests with #J-18808-Ljbffr ...

custom log parsing. Solid understanding of networking concepts (TCP/IP, firewalls, proxies, VPNs) and security protocols. Familiarity with cloud security principles, Azure, GCP, AWS Working knowledge over a range of operating systems and platforms including: Windows Server, Windows XP, UNIX (Solaris, Linux), Working knowledge of networks … industry certifications (e.g., AZ-500, SC-200, SC-900, CompTIA Security+) or similar Cert with Security Orchestration, Automation, and Response (SOAR) playbooks within Sentinel or other platforms. Scripting skills (PowerShell, Python) for automation and data manipulation. What Mizuho Can Offer You Here at Mizuho, there are fantastic progression ...

Azure Principal Platform Engineer - Appvia - UK Government Security Clearance eligibility required. Location: London, UK (Hybrid - typically ~1-2 days per month in office) Contract: Permanent Package: £90,000 – 120,000 + 10% Bonus + 10% Shares + Benefits (see more below) About Us At Appvia, we are committed … edge technologies and services to support cloud adoption, enabling companies to deliver applications in the cloud with ease. About the role As an Azure Principal Platform Engineer, you will guide customers toward Cloud and DevOps excellence, designing and implementing scalable, resilient, and secure platforms while leading a team ...

/CD pipelines, virtualisation, and IaC Software development skills using Linux or WSL SIEM and log routing experience in tools such as Splunk, Sentinel, Cribl, and ELK Familiarity with AWS, Azure, and GCP services Proficiency in scripting or programming (Python, Bash, PowerShell) Excellent problem-solving, analytical ...

accountabilities Security Platform Operationalisation: Operationalise and tune the deployed security tooling estate, including CrowdStrike Falcon (EDR and Next-Gen SIEM), Wiz CSPM (Azure and AWS), Mimecast and the Microsoft security stack, moving platforms from deployed to fully managed through detection rule tuning, alert configuration, log source onboarding … tuning, host investigation and response actions. Experience operationalising SIEM, EDR/XDR and vulnerability management platforms (for example CrowdStrike Next-Gen SIEM, Microsoft Sentinel or Microsoft Defender), including detection tuning, alert management and vulnerability scanning and reporting. Microsoft security stack experience across Entra ID, Active Directory and Group ...

Responsibilities Security Platform Operationalisation: Operationalise and tune the deployed security tooling estate, including CrowdStrike Falcon (EDR and Next-Gen SIEM), Wiz CSPM (Azure and AWS), Mimecast and the Microsoft security stack, moving platforms from deployed to fully managed through detection rule tuning, alert configuration, log source onboarding … tuning, host investigation and response actions. Experience operationalising SIEM, EDR/XDR and vulnerability management platforms (for example CrowdStrike Next-Gen SIEM, Microsoft Sentinel or Microsoft Defender), including detection tuning, alert management and vulnerability scanning and reporting. Microsoft security stack experience across Entra ID, Active Directory and Group ...

frameworks and standards such as: NIST ISO 27001 CIS Controls Cyber Essentials Regulatory requirements within Financial Services Technical Knowledge Good understanding of: Microsoft Azure AWS Active Directory/Entra ID Security Monitoring Platforms Identity Management Solutions Network and Infrastructure Security Ability to engage effectively with technical architects, engineers … management skills with the ability to engage at Executive and C‐Level. Experience managing third‐party suppliers and system integrators. Experience with: Microsoft Sentinel Splunk SailPoint CyberArk Okta CrowdStrike Microsoft Defender Suite Knowledge of DevSecOps practices. Exposure to cloud migration and security transformation programmes. Experience supporting regulatory remediation ...

breadcrumbs - fully integrated with Microsoft Defender XDR (Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps), Microsoft Sentinel, and Microsoft Security Copilot. The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps … Defender XDR across endpoint, identity, email, and cloud-app workloads. Integrate all deception signals (honeypot, honeytoken, decoy, breadcrumb) into Defender XDR and Microsoft Sentinel as first-class, high-fidelity detections. Define and enforce a unified detection and response strategy across the Microsoft security stack. Data Protection, DLP & Insider ...

maintain cyber defence use cases, correlation rules, and attack chain detections across disparate systems. Design, implement, and integrate SIEM solutions—particularly Microsoft Sentinel—into Security Operations. Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem. Handle L2-level incidents leveraging Microsoft Sentinel and Microsoft Defender tools. Support incident response, triage, threat modelling, and vulnerability remediation within Azure-hosted environments. Create, run, and troubleshoot Azure Logic Apps, playbooks, and Sentinel automation components. Collaborate with business and security stakeholders to define and enhance security standards ...

support the design, deployment, configuration and ongoing development of the SOCs security monitoring capability. The role will work across technologies including Splunk, Microsoft Sentinel, SOAR, Microsoft XDR and wider security tooling, with a major focus on SIEM engineering, data onboarding, integrations, detection content and threat-led use cases. … What you need Strong experience designing, building, deploying and operating SIEM and SOAR platforms Hands-on experience with Splunk and/or Microsoft Sentinel, ideally with strong exposure to both Experience with technologies such as Splunk Enterprise Security, Splunk SOAR, UBA, Elastic or Microsoft XDR Proven experience deploying ...

identity telemetry (audit logs, sign in- logs, access data) and translate insights into actionable improvements Extensive hands-on- experience with Microsoft Entra ID (Azure AD), including: Users, Groups (static & dynamic), roles, service principals, app registrations Directories, Tenants, Objects, and Attribute Structures Conditional Access policies, SSO (SAML & OIDC), Access … experience in Privileged Access Management (PAM) such as CyberArk, StrongDM: User and group management, OU design, Group Policy Objects (GPOs) Hybrid identity integration (Azure AD Connect/Cloud Sync) Password rotation policies Different types of service accounts for on-premises and cloud use cases (SVC, gMSA ...

identity telemetry (audit logs, sign in-logs, access data) and translate insights into actionable improvements Extensive hands-on-experience with Microsoft Entra ID (Azure AD), including: Users, Groups (static & dynamic), roles, service principals, app registrations Directories, Tenants, Objects, and Attribute Structures Conditional Access policies, SSO (SAML & OIDC), Access … experience in Privileged Access Management (PAM) such as CyberArk, StrongDM: User and group management, OU design, Group Policy Objects (GPOs) Hybrid identity integration (Azure AD Connect/Cloud Sync) Password rotation policies Different types of service accounts for on-premises and cloud use cases (SVC, gMSA ...

analytical, with excellent written and verbal communication skills. You are familiar with architecture frameworks (TOGAF or equivalent) and Well‐Architected reviews (AWS/Azure/GCP). You have proven hands‐on experience leading migrations from incumbent tooling to a modern, consolidated delivery platform – including continuous delivery (e.g. … areas listed below, with working knowledge of the rest: CI/CD & pipelines: GitLab CI/CD, GitHub Actions, Jenkins, Azure DevOps, CircleCI, GitOps principles with Argo CD/Workflows, Tekton, Buildkite, Bamboo, TeamCity, AWS CodePipeline. Policy‐as‐Code & governance: OPA/Rego, HashiCorp Sentinel, Kyverno. ...

complex cloud transformation, security modernisation, and AI adoption programmes. Support pre-sales activities, workshops, proof of concepts, and executive presentations. Technology & Innovation Microsoft Azure Microsoft 365 Security Microsoft Defender Suite Microsoft Sentinel Microsoft Entra Microsoft Copilot for Security Microsoft Purview AWS Security Google Cloud Security … Access) Microsoft 365 Defender (Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps) Microsoft Defender for Cloud Microsoft Sentinel Microsoft Copilot for Security Microsoft Intune AWS Security Services Google Cloud Platform Security Zero Trust Architectures DevSecOps CNAP platforms (like Wiz and Palo Alto ...

three. About the team Security Engineering is a team of five covering cloud security, detection, and security operations. They work directly in the Azure estate and are close to the infrastructure, not abstracted behind a policy layer. The team runs Microsoft Sentinel, Defender XDR, and Defender … cloud security, detection tooling, and incident response, without being narrowly specialised. You own meaningful parts of the security stack, contribute hands‐on to Azure cloud hardening, and show up reliably when incidents need investigating or pen test cycles need coordinating. You're energised by visible impact, your work ...

vulnerability triage workflows that score real risk by exploitability, reachability, and compensating controls rather than raw CVSS. Harden and secure our cloud environment (Azure), partnering with platform engineering on secure configuration, reviewing and remediating vulnerabilities, identity and network controls, posture management, and logging and detection. Strengthen endpoint … control landscape: cloud security, supply‐chain and vulnerability management, endpoint and identity, and detection and response. Are genuinely technical: comfortable in cloud environments (Azure preferred), CI/CD, and at least one scripting language (e.g. Python, Bash, PowerShell), so your controls hold up in engineering reality. Lead with ...

designs and implements automated detection and response capabilities that protect G-Research's diverse and complex estate, spanning high-performance compute (HPC) environments, Azure and Windows corporate infrastructure, and public cloud platforms such as AWS. As part of SAE, you'll play a hands-on role building secure … environments. Key responsibilities of the role include: Design, build and maintain automated detection and response systems across G-Research's hybrid environments (HPC, Azure, AWS). Develop high-quality, well-tested code primarily in Python, following secure engineering best practices. Implement and maintain infrastructure-as-code ...

experience both on-prem and cloud Infrastructure, preferably Azure. You will be responsible for building, designing, implementing, maintaining and supporting the organisation's Azure cloud infrastructure and network estate. You will be experienced in supporting and maintaining Azure environments. You will have knowledge of implementing … supporting VM,SQL serverless, web apps, function & logic apps. You will have experience of using Azure Dev Ops, building CI/CD pipelines and building resources using IaC. You will have experience of using Github, terraform, Bicep and Powershell scripting. You will be certified in Azure ...

analytic techniques for incident detection Collaborate with an MSP SOC to maintain and tune the detection catalogue Build automated reporting dashboards using Microsoft Sentinel workbooks Support security initiatives including ISO 27001 activities and KQL-based tasks Ensure monitoring coverage across cloud platforms, SaaS apps, and internal systems Contribute … Experience: Previously worked as a Threat Detection Engineer or in a similar role. Strong proficiency in KQL and hands-on experience with Microsoft Sentinel Familiarity with Microsoft Defender tools (Endpoint & O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ...