1 to 25 of 29 Permanent Azure Sentinel Jobs in the South East

Azure Platform Architect Location: UK Working Pattern: Hybrid/Client-facing Security Clearance: UK Government Security Clearance required We’re looking for an experienced Azure Platform Architect to join a growing cloud and infrastructure practice, taking a leading role in the design and delivery of secure … scalable Azure platforms for enterprise and public-sector customers. This is a hands-on architecture position with significant client exposure. You’ll combine deep Azure platform expertise with strong consulting and leadership skills, helping organisations shape their cloud strategy, modernise infrastructure and deliver large-scale transformation ...

programming, networking, system administration, or DevOps Experience performing firewall reviews - Palo Alto, Cisco, Checkpoint, pfSense. Experience with SIEM's such as LogRhythm, Splunk, Azure Sentinel, Alien Vault or Rapid 7 Strong experience using Microsoft 365 suite of products such as Endpoint Manager (InTune), Defender, Purview (Compliance … Entra, etc. In depth experience securing a hybrid infrastructure Strong Cloud Experience with either AWS, Azure, or GCP. REQUIRED SKILLS Knowledge MITRE ATT&CK, and Kill Chain Knowledge of IOC extraction, computer forensics, and malware analysis, technologies and methods Expert IPv4 Networking fundamental skills are required. TCP/ ...

willingness to support occasional out-of-hours requirements is also needed. Desirable Experience Experience with any of the following would be useful: Microsoft Azure, Microsoft 365, Entra ID, Defender or Sentinel. SIEM, endpoint detection and response, secure web gateways, email security or privileged access technologies. Security audits ...

Essential Skills, Qualifications & Experience: Experience working in Security Operations, a SOC, or in Incident Response. Hands‐on experience with SIEM platforms such as Azure Sentinel, Splunk, or Sophos Taegis. Familiarity with EDR tools including SentinelOne or CrowdStrike. A strong understanding of common attack techniques (MITRE ...

across cloud, identity, endpoint and network platforms, and carry out malware analysis and threat validation. Design, implement and optimise detection content across Microsoft Sentinel, Defender XDR, CrowdStrike and associated platforms, developing advanced KQL queries and analytics rules aligned to MITRE ATT&CK. Act as senior technical owner … security platforms including Microsoft Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune, Darktrace and supporting technologies, managing platform health, onboarding and configuration. Design and maintain automation and orchestration workflows using Logic Apps, Sentinel Playbooks, Power Automate, PowerShell, Python and API integrations to reduce manual operational effort. ...

SIEM Engineer (SC Cleared) for a Reading/Havant based 6-month contract. The role focuses on onboarding log sources into Microsoft Sentinel, developing parsers, and creating automated detection and response workflows. Responsibilities include tuning KQL queries, building analytic rules, and deploying SIEM content via CI/ ...

SIEM Engineer (SC Cleared) for a Reading/Havant based 6-month contract. The role focuses on onboarding log sources into Microsoft Sentinel, developing parsers, and creating automated detection and response workflows. Responsibilities include tuning KQL queries, building analytic rules, and deploying SIEM content via CI/ ...

supporting the wider team. Lead serious incidents, forensic investigations and root cause analysis. Develop detections, automation and orchestration; conduct proactive threat hunting. Engineer Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune and Darktrace. Support Microsoft 365, Azure, AWS, identity and endpoint security. Maintain documentation, support compliance … mentor colleagues. Experience and qualifications Substantial SOC, cyber operations or security engineering experience. Hands-on Sentinel, Defender XDR and CrowdStrike expertise. Incident response, malware analysis, forensics and threat hunting. Advanced KQL; PowerShell and/or Python automation. Entra ID, Conditional Access, Intune and Microsoft 365 security. Cloud ...

ability to participate in ad hoc out‐of‐hours support where required. Desirable experience and qualifications Experience administering security capabilities within Microsoft Azure, Microsoft 365, Microsoft Entra ID, Microsoft Defender and/or Microsoft Sentinel. Experience of SIEM, endpoint detection and response, secure web gateway, email security, network … security and privileged access technologies. Relevant current certifications such as Microsoft Security, Compliance and Identity, Azure, CompTIA Security+, CISSP, SSCP, CCNA Security or Palo Alto Networks certifications. ITIL Foundation certification or practical experience working within an IT service management framework. Experience in a regulated, safety‐critical, transport, logistics ...

client stakeholders (engineering, security, operations) to validate requirements, manage technical risks, and coordinate delivery plans and change windows. QualificationsRequiredStrong track record delivering production Azure environments, including hands-on experience ofnetworking, IAM, governance, and security controls, ideally through working with external clients Significant hands-on experience implementing and operating … restore, performance, and HA/DR. Strong experience with Infrastructure as Code (Terraform and/or Bicep/ARM) and CI/CD (Azure DevOps, GitHub Actions, GitLab CI or similar). Solid cloud security engineering knowledge: RBAC/IAM, private networking, key/secrets management, encryption, secure ...

provide recommendations to strengthen detection outcomes Job Requirements: Strong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps … attack lifecycle Experience with XDR or EDR platforms such as Microsoft Defender, CrowdStrike or Cortex Understanding of cloud environments, particularly Azure, and associated security telemetry Experience working in customer-facing or consultancy roles Strong communication skills, with the ability to explain technical concepts clearly Technical Competencies: SIEM ...

perfect opportunity for you.Required Skills and ExperienceStrong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR … sources map to the attack lifecycleExperience with XDR or EDR platforms such as Microsoft Defender, CrowdStrike or Cortex Understanding of cloud environments, particularly Azure, and associated security telemetry Experience working in customer-facing or consultancy roles Strong communication skills, with the ability to explain technical concepts clearlyTechnical CompetenciesSIEM ...

processes - enrichment, ticketing, containment - using Python, Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius of an incident Run hypothesis-led threat hunts, not just reactive … equivalent) Practical scripting/automation experience (Python, Logic Apps, REST APIs) or hands‐on SOAR platform configuration Working knowledge of several of: Microsoft Sentinel, Defender XDR, CrowdStrike, Microsoft Entra ID/Azure AD, Microsoft 365, AWS security tooling Experience investigating identity and cloud-based compromise, including ...

provide recommendations to strengthen detection outcomesJob Requirements:Strong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferredExperience writing detection logic using KQL or similar query languagesProven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR … sources map to the attack lifecycleExperience with XDR or EDR platforms such as Microsoft Defender, CrowdStrike or CortexUnderstanding of cloud environments, particularly Azure, and associated security telemetryExperience working in customer-facing or consultancy rolesStrong communication skills, with the ability to explain technical concepts clearlyTechnical Competencies:SIEM ...

skills, with the confidence to assess risk, make informed decisions and remain composed during high-pressure cyber incidents. Hands-on experience with Microsoft Sentinel, Microsoft Defender, SIEM and EDR technologies, with a strong understanding of security monitoring, detection and response. Good knowledge of modern technology environments, including Microsoft … Azure, AWS, SaaS platforms, identity services and enterprise infrastructure, alongside an understanding of attacker methodologies and frameworks such as MITRE ATT&CK. Excellent communication and stakeholder management skills, capable of translating technical findings into clear, meaningful updates for both technical and business audiences. Experience coaching, mentoring and supporting ...

projects, change initiatives and operations, with a focus on Microsoft cloud security. Responsibilities include secure design and configuration of Microsoft cloud services (Azure, Microsoft 365), configuring MS Sentinel and Defender, Azure firewalls, and providing risk assessments and security consultancy #J-18808-Ljbffr ...

Essential) Location: Hybrid, Hampshire Contract: Initial 6 Months with potential extension Specialist SIEM Engineer needed to develop, optimise and automate SSE's Microsoft Sentinel platform, supporting security monitoring, detection engineering and Project Amur/ECAF compliance. Scope Onboard and integrate log sources into Sentinel; build custom … queries; build and tune analytic rules and detection logic Develop Logic Apps/SOAR workflows to automate response Implement CI/CD pipelines (Azure DevOps/Git) for SIEM content deployment Automate deployment/config across environments; tune detections to reduce false positives Key Skills Active SC Clearance ...

last 12 Months 6 Months Seim Engineer to come on board to be Responsible for onboarding and integrating security log sources into Microsoft Sentinel, ensuring reliable and comprehensive security telemetry. Develop custom parsers and data transformations to normalise and enrich ingested data, and design and optimise KQL queries … support effective threat detection, monitoring and security investigations. Key skills and responsibilities, Integrate and onboard log sources into Microsoft Sentinel, ensuring reliable security telemetry. Develop custom parsers, data transformations and KQL queries for threat detection and investigation. Create and maintain analytic rules and detection logic aligned to emerging ...

diligence Produce clear security reporting for IT and business leadership The technology You’ll work across a modern security environment including: Microsoft Azure, Intune, Okta, Zscaler, SentinelOne, Mimecast, Tenable, KnowBe4, SD-WAN, SIEM About you We’re looking for an experienced IT/cyber security professional with … risk and compliance, ideally within a multi-site or international environment. You’ll bring: Experience developing IT security policies and governance frameworks Strong Azure security and cloud governance knowledge Experience with Cyber Essentials, Cyber Essentials Plus, ISO 27001 or similar Practical knowledge of security technologies and SIEM platforms ...

operational processes. Key Responsibilities for the Senior Information Security Analyst: Provide secure design, configuration and assurance of Microsoft cloud services, including Microsoft Azure, Microsoft 365 and associated security, identity, compliance and monitoring tooling Use hands-on Microsoft cloud security expertise to assess project designs, define security requirements, validate … delivered solutions Configure MS Sentinel and MS Defender as well as Azure firewalls Provide security and risk assessment consultancy on projects, change initiatives, and other formal workgroups and committees. Assessing security risk and directing the design and implementation of appropriate security controls to effectively manage ...

Title: SIEM Engineer (SC Cleared) Location: Reading/Havant Duration:6 months Description: Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries … threats and business use cases Develop Logic Apps and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed ...

Title: SIEM Engineer (SC Cleared) Location: Reading/Havant Duration:6 months Description: Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries … threats and business use cases Develop Logic Apps and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed ...

supported customer environments, ensuring progress, actions and updates are clearly tracked through to resolution. Act as a technical escalation point across Microsoft 365, Azure, Intune, Power Platform, Dynamics 365, cybersecurity tooling and custom applications. Support customer relationships through service reporting, reviews, governance and escalation activity, helping to track … technical support, service desk or managed services delivery Possess a strong working knowledge of Microsoft cloud and workplace technologies such as: Microsoft 365, Azure, Entra ID, Intune, Defender, Sentinel, Power Platform or Dynamics 365. Experience in managing complex incidents, service requests and customer escalations. A clear ...

Nash in the United Kingdom seeks an experienced SEIM Engineer with Active SC clearance to onboard and integrate security log sources into Microsoft Sentinel, delivering reliable telemetry and comprehensive threat visibility. You will develop custom parsers, transformations and KQL queries, and design SIEM detections aligned to evolving threats. …/CD pipelines with Azure DevOps/Git enable controlled deployments. #J-18808-Ljbffr ...

operational processes. Key Responsibilities for the Senior Information Security Analyst: Provide secure design, configuration and assurance of Microsoft cloud services, including Microsoft Azure, Microsoft 365 and associated security, identity, compliance and monitoring tooling Use hands‐on Microsoft cloud security expertise to assess project designs, define security requirements, validate … delivered solutions Configure MS Sentinel and MS Defender as well as Azure firewalls Provide security and risk assessment consultancy on projects, change initiatives, and other formal workgroups and committees. Assessing security risk and directing the design and implementation of appropriate security controls to effectively manage ...