12 of 12 Permanent Azure Sentinel Jobs in the South East

Azure Platform Engineer Department: Internal Technology Employment Type: Permanent - Full Time Location: Oxford, UK Reporting To: Sam Smith Description Based in our Oxford office, you will join the Architecture and Engineering function within Internal Technology. The team is responsible for the design, delivery, continual improvement, and escalation support … needed to perform their best work. Reporting into Architecture and Engineering, you will be a hands‐on engineer responsible for strengthening Aurora’s Azure platform, including our Enterprise Service Bus integration platform, ALZ with hybrid networking, CI/CD pipelines and DevOps tooling. You will help mature ...

close to the action. Key Responsibilities: Lead the design, implementation, and optimisation of security controls across Microsoft Defender, Intune, Entra ID, Azure, and M365. Own and evolve Conditional Access, identity protection, device compliance, and endpoint hardening strategies. Act as the technical lead for cyber incidents, supporting investigation, containment … Support governance activities including risk assessments, audits, and compliance reviews. Technical Experience: Strong hands-on experience with Microsoft Defender XDR, Intune, Entra ID, Azure security controls, and Microsoft Sentinel. Proven ability to design and implement Conditional Access, identity protection, and device compliance policies. Experience developing detection rules, analytics ...

Analysts to identify and respond to threats effectively. This is not a generalist cyber security role. Key Responsibilities Administer and optimise Microsoft Sentinel (or equivalent SIEM), including log ingestion, parsing, normalisation, and retention. Develop and maintain SOAR workflows and automation using Azure Logic Apps, Python, PowerShell …/7 operational environment. Familiarity with MITRE ATT&CK, CVEs, and vulnerability management. Exposure to cloud security monitoring across Azure, AWS, or Microsoft 365. Desirable Certifications Microsoft SC-200 CompTIA Security+/CySA+ ISC2 CC or CISSP GIAC GCIA CEH Cisco CyberOps or Fortinet certifications What ...

background, looking to develop further within security operations. Key Responsibilities Monitor, triage, and respond to security incidents using SIEM tools such as Microsoft Sentinel Investigate and resolve alerts, escalating where necessary Manage and maintain SOC tools, configurations, and updates Follow ITIL-based processes for incident, problem, and service … Looking For Experience in a SOC Analyst role or strong systems administration experience with security exposure Hands-on experience with Microsoft Sentinel and Microsoft Defender technologies Good understanding of networking concepts (DNS, IP, routing, SSL, etc.) Familiarity with cloud environments, ideally Azure Experience with Windows ...

analytic techniques for incident detection Collaborate with an MSP SOC to maintain and tune the detection catalogue Build automated reporting dashboards using Microsoft Sentinel workbooks Support security initiatives including ISO 27001 activities and KQL-based tasks Ensure monitoring coverage across cloud platforms, SaaS apps, and internal systems Contribute … Experience: Previously worked as a Threat Detection Engineer or in a similar role. Strong proficiency in KQL and hands-on experience with Microsoft Sentinel Familiarity with Microsoft Defender tools (Endpoint & O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ...

including developing custom automation and integrations via API with proficiency in at least one scripting language (preferably Python or GO). Preferred vendors: Azure, AWS, GCP Expert Knowledge of SIEM Architecture and Design – Including familiarity in SIEM deployment and architecture of at least one cloud environment … Azure, IBM). Preferred vendors: Microsoft Sentinel, Google SecOps, XSIAM Expert Knowledge of EDR/XDR – including configuration and deployment/maintenance. Preferred vendors: CrowdStrike, Microsoft Defender, Palo Alto XDR, SentinelOne Intermediate Knowledge of VM – including deployment, automation of reporting. Preferred vendors: Rapid 7, Tennable Intermediate ...

processes - enrichment, ticketing, containment - using Python, Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius of an incident Run hypothesis-led threat hunts, not just reactive … equivalent) Practical scripting/automation experience (Python, Logic Apps, REST APIs) or hands-on SOAR platform configuration Working knowledge of several of: Microsoft Sentinel, Defender XDR, CrowdStrike, Microsoft Entra ID/Azure AD, Microsoft 365, AWS security tooling Experience investigating identity and cloud-based compromise, including ...

perfect opportunity for you. Required Skills and Experience Strong hands‐on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps … attack lifecycle Experience with XDR or EDR platforms such as Microsoft Defender, CrowdStrike or Cortex Understanding of cloud environments, particularly Azure, and associated security telemetry Experience working in customer‐facing or consultancy roles Strong communication skills, with the ability to explain technical concepts clearly Technical Competencies SIEM ...

background in Cyber Security, Identity & Access Management (IAM), an MSP, MSSP or security consultancy. Desirable Experience Microsoft Defender for Identity. Microsoft Graph API. Azure Automation. Identity Governance. Microsoft Sentinel or Purview. BloodHound, PingCastle or similar identity assessment tools. Microsoft certifications such ...

security operations roles. Hands-on SIEM engineering and detection tuning experience. Proven ownership of complex incident response and investigations. Cloud security experience across Azure and AWS. Experience automating SOC workflows and response processes. Threat hunting experience beyond basic log review. Comfortable engaging directly with technical stakeholders. Able … prioritise and operate effectively under pressure. Useful but not essential Microsoft Sentinel experience. Container or Kubernetes environments. CI/CD security tooling exposure. Red or purple team experience. Why this opportunity Senior ownership and autonomy. Modern cloud-first environment. Strong investment in tooling and automation. Opportunity to genuinely ...

call duties as required Essential Skills: Good technical background and experience with Cloud and On-Premise technologies Demonstratable technical knowledge of Microsoft Azure components such as Sentinel Considerable understanding of firewall & networking systems Diligent with close attention to detail, ensuring tickets, emails and technical documentation adheres … team standards Understanding of Git repositories and code management technologies such as Azure DevOps & Bitbucket The EIT Cyber Security Engineering SIEM team: Within EIT Cyber Security Engineering - Team SIEM, the primary focus is to provide and maintain the UK Cyber Security Operations Enhanced Protective Monitoring Capability platform (EPMC ...

What you'll be doing You'll lead the design and delivery of cloud architecture solutions across Google Cloud Platform, while also leveraging Azure where required. You'll be responsible for designing enterprise Landing Zones, developing Infrastructure as Code solutions, establishing cloud governance standards, and supporting the adoption … looking for We're looking for someone with proven experience designing enterprise cloud solutions on Google Cloud Platform (GCP) , alongside strong Azure knowledge. You'll have hands-on experience with Kubernetes , particularly Google Kubernetes Engine (GKE) and Azure Kubernetes Service (AKS) , and be confident designing scalable ...