1 to 25 of 30 Permanent Azure Sentinel Jobs in the UK excluding London

DevSecOps Engineer - Azure/Application Security We're working with an established organisation looking to appoint an experienced DevSecOps Engineer to strengthen its Azure deployment and application security capabilities. This is a hands-on position combining Azure DevOps, cloud infrastructure and application security. … embed secure practices throughout the software delivery lifecycle. The Role You'll be responsible for: Designing and maintaining CI/CD pipelines within Azure DevOps Deploying Azure applications and infrastructure using Terraform Supporting Azure services including App Services, AKS, Azure SQL, Storage ...

demonstrable capability in pipeline engineering and Infrastructure as Code, with hands-on experience designing, implementing and optimising CI/CD pipelines (for example Azure DevOps, GitHub Actions or GitLab CI) and defining reusable, governed infrastructure using Terraform and Azure-native tooling (ARM or Bicep), setting … engineering standards that others follow. Containerisation and orchestration - Extensive experience building and operating scalable, resilient container platforms using Docker and Kubernetes, preferably Azure Kubernetes Service, from design through to production support. Security and DevSecOps - Strong, practical application of secure-by-design and Zero Trust principles, including managed identities ...

team. This is a great opportunity for an experienced support engineer with a strong Microsoft infrastructure background who wants to develop further across Azure, Microsoft 365, cloud infrastructure and security . You'll work in a fast-paced technical environment, supporting a global customer base while gaining exposure … modern Microsoft technologies including Azure Virtual Desktop, Microsoft Sentinel, Defender and Privileged Identity Management. What you'll do Provide 2nd Line support across incidents and service requests, troubleshooting through to resolution. Support technologies including Windows Server, Active Directory, Entra ID, Group Policy, Microsoft 365, Intune ...

Management processes Implement identity access control measures and DLP controls Respond to Tier 3 security incidents Monitor threat intelligence Participate in pentests Engineer Microsoft Sentinel detections & SOAR playbooks Senior Cyber Security Engineer: Technical Experience XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office … Azure AD Microsoft Purview Cloud & Endpoint Security Azure Sentinel The permanent opportunity for a Senior Cyber Security Engineer will be based out of the Birmingham offices on a hybrid basis. This is an opportunity to join an industry leader that has grown year ...

Engineer will be responsible for strengthening security across the firm, you'll protect client data and critical systems having excellent experience with Microsoft Sentinel, azure and Security Copilot. You will be in the office 3 days a week. What you'll bring: A minimum … SIEM, EDR, and vulnerability management platforms Comfort using AI tools (Claude, Copilot, ChatGPT) as part of your day-to-day toolkit Strong Azure expertise Bonus points if you've worked in legal or another regulated sector. What you'll be doing: Owning the design and rollout of security ...

threat detection, while helping improve the organisation's overall cyber resilience. What you'll be doing: Managing and improving Microsoft Defender and Sentinel capabilities Securing Azure environments and implementing effective security controls Managing Entra ID security, including Conditional Access, Identity Protection and privileged access Supporting vulnerability … security SME to technical and non-technical stakeholders What we're looking for: Proven Security Engineer experience Strong Microsoft Defender and Sentinel knowledge Good Azure and Entra ID security experience Hands-on vulnerability management experience Understanding of security frameworks and technical controls Strong communication and stakeholder ...

exception and risk acceptance process: assess compensating controls, document residual risk, and obtain formal sign-off. Integrate VM tooling with SIEM (Splunk, Microsoft Sentinel), ITSM (ServiceNow VR module), and CMDB for automated ticket creation and asset correlation. Automate vulnerability reporting and remediation tracking using Python, REST APIs (Qualys … Automation and API integration: Python scripting, REST API calls to Qualys/Tenable/Rapid7; ServiceNow VR module configuration. SIEM integration: Splunk, Microsoft Sentinel – correlating vulnerability data with threat events. CMDB-driven asset correlation: ServiceNow CMDB, ensuring VM data reflects accurate asset inventory. Network and infrastructure knowledge sufficient ...

similar role within enterprise software environments Strong technical expertise and hands-on experience across Microsoft Entra and Identity, the Microsoft Defender suite, Microsoft Sentinel, and Microsoft Purview. Proven ability to manage compliance with ISO 27001 controls and to coordinate the Cyber Essentials recertification process. Strong reporting skills with … overall security posture, monitor alerts, assess risks, and coordinate remediation activities while implementing key security technologies Oversee identity and access management across Entra, Azure, Intune, Jira, AWS and SaaS platforms, maintaining Conditional Access, MFA, PIM and Identity Protection Implement and maintain Microsoft Sentinel, Purview ...

first dedicated hire for cloud security within the organisation and will be critical in defining, implementing, and managing security controls across our Azure, AWS and SaaS environments. The successful candidate will work independently, reporting to the Head of Security Engineering, while collaborating with SOC, GRC, IT, Modern Workplace … security frameworks and best practice (CSA STAR, NCSC Cloud Security Principles). Experience with automation and scripting (Python, PowerShell, Bash). Proficiency with: Azure security services : Defender for Cloud, Entra ID, Sentinel etc. AWS security services : Security Hub, GuardDuty, IAM, Config, CloudTrail, CloudWatch. Working knowledge ...

Cortex XDR. Data Protection & Compliance Support and monitor the company's Data Loss Prevention controls within Microsoft Purview, and data classification through Azure Information Protection labelling. Help maintain the evidence and controls that support the company's accreditations, including ISO/IEC 27001, 27017, and 27018, Cyber Essentials … Request, Change, and Problem management. Understanding of GDPR, data protection, and information governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience with Endpoint Detection ...

Shape the Future of Microsoft Sentinel Detection Engineering. Are you passionate about Microsoft Sentinel, KQL and building high-quality detections that help a SOC identify threats effectively? We're looking for a Senior Detection Engineer to join our growing Aerospace, Defence & Security business. You'll play … role in designing, developing, testing and improving detection content in Microsoft Sentinel, translating threat behaviours and security requirements into reliable analytics. This is an opportunity to join the Detection Engineering team and help strengthen detection coverage, reduce false positives and ensure detection content remains accurate, performant and operationally ...

POINTS * £50,000 - £55,000 salary * 9-month fixed-term contract * Hybrid working with UK and occasional EU site travel * Microsoft 365, Azure, Entra ID, Intune, Autopilot, Sentinel & Defender * Lead technical integrations following business acquisitions ABOUT THE CLIENT We're working with a growing technology … networks, identity and security environments before designing practical integration plans. A major part of the role will involve Microsoft technologies including Microsoft 365, Azure, Entra ID, Intune, Autopilot, Sentinel and Defender for Endpoint. You'll also lead system rationalisation, identify duplication and technical gaps, and work ...

processes - enrichment, ticketing, containment - using Python, Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius of an incident Run hypothesis-led threat hunts, not just reactive … equivalent) Practical scripting/automation experience (Python, Logic Apps, REST APIs) or hands-on SOAR platform configuration Working knowledge of several of: Microsoft Sentinel, Defender XDR, CrowdStrike, Microsoft Entra ID/Azure AD, Microsoft 365, AWS security tooling Experience investigating identity and cloud-based compromise, including ...

protecting critical systems and data, while driving improvements across security operations, threat detection and incident response. You'll work with technologies including Microsoft Sentinel, Security Copilot and Azure, collaborating with internal IT teams and an outsourced SOC to strengthen security capabilities. You'll also have … methods. We're looking for someone with: Experience in Cyber Security Operations, Incident Response or Threat Detection Strong hands-on experience with Microsoft Sentinel (SIEM) Experience with Microsoft Security Copilot or similar AI-assisted security tools Azure cloud security experience Experience working with an outsourced ...

against Windows, macOS, and Linux platforms. Awareness of anti-virus, anti-malware, and endpoint protection concepts. Familiarity with SIEM concepts (Cortex XSIAM, Microsoft Sentinel, or equivalent). Familiarity with cloud services (Microsoft Azure, Microsoft 365, AWS). Awareness of incident management processes. Understanding of adversary motivations ...

dedicated Security Operations Centre (SOC) to support the defence of a major UK CNI organisation. The networks protected are predominantly hosted in Azure and AWS cloud platforms, with many hundred systems within these environments that must be protected. The customer is committed to development of this improved … groups or targeted ransomware attacks). Understand TCP/IP component layers to identify normal and abnormal traffic Understanding of AWS &/or Azure cloud services Experience of Splunk (with ES) &/or Sentinel, content development experience desirable Non-technical Client side consulting, including stakeholder engagement ...

dedicated Security Operations Centre (SOC) to support the defence of a major UK CNI organisation. The networks protected are predominantly hosted in Azure and AWS cloud platforms, with many hundred systems within these environments that must be protected. The customer is committed to development of this improved … groups or targeted ransomware attacks). Understand TCP/IP component layers to identify normal and abnormal traffic Understanding of AWS &/or Azure cloud services Experience of Splunk (with ES) &/or Sentinel, content development experience desirable Non-technical Client side consulting, including stakeholder engagement ...

point of escalation/subject matter expert for other members of the team. Providing support to forces for the configuration of Sentinel and log sources. Co-ordination of the testing, implementation and configuration of new data sources. Contribute towards the management of SIEM content such as detections. Line … Broad cyber security awareness and practical experience. Desirable Relevant cloud certification or equal experience. Previous public sector experience. Experience with Microsoft Power Platform, Azure DevOps, Microsoft Sentinel (or other SIEM's). Experience working with code repositories and CI/CD. Why Join us? Balance ...

cyber security posture . Detect, investigate, and respond to cyber threats and security incidents . Administer Identity & Access Management (IAM) across Microsoft , Azure , AWS , and SaaS platforms. Deploy and optimise Microsoft Defender , Microsoft Sentinel , and Microsoft Purview . Drive vulnerability management and penetration testing programmes. Secure … Requirements 4+ years' experience in a cyber security or information security role. Strong technical expertise in Microsoft Entra ID , Microsoft Defender Suite , Microsoft Sentinel , and Microsoft Purview . Proven experience managing vulnerability scanning and penetration testing programmes. Experience supporting ISO 27001 compliance and coordinating Cyber Essentials and Cyber ...

cyber security posture . Monitor, investigate, and respond to security threats and vulnerabilities . Administer Identity and Access Management (IAM) across Microsoft , Microsoft Azure , Amazon Web Services (AWS) , and Software as a Service (SaaS) platforms. Implement and maintain Microsoft Defender , Microsoft Sentinel , Microsoft Purview , and other … Requirements 4+ years' experience in a cyber security or information security role. Strong technical expertise in Microsoft Entra ID , Microsoft Defender Suite , Microsoft Sentinel , and Microsoft Purview . Proven experience managing vulnerability scanning and penetration testing programmes. Experience supporting ISO 27001 compliance and coordinating Cyber Essentials and Cyber ...

improving vulnerability tooling and providing security advice to operational and project teams. You will work across technologies including Windows, Linux, mainframe, AWS and Azure, while collaborating with infrastructure teams, security colleagues, suppliers and wider stakeholders. Responsibilities Design, implement and improve technical security systems and controls across HMLR … skills Strong experience designing and implementing technical security systems and controls. Advanced knowledge of at least three security technologies, such as SIEM, Defender, Sentinel, EDR/XDR, Active Directory, Nessus, PAM, AWS IAM or Entra. Extensive knowledge of security controls across Windows, Linux, mainframe, AWS or Azure ...

background in Cyber Security, Identity & Access Management (IAM), an MSP, MSSP or security consultancy. Desirable Experience Microsoft Defender for Identity. Microsoft Graph API. Azure Automation. Identity Governance. Microsoft Sentinel or Purview. BloodHound, PingCastle or similar identity assessment tools. Microsoft certifications such ...

Engineer ready to step into an architecture role. You'll ideally have experience with: Enterprise Security Architecture SIEM SOAR EDR Microsoft Security Microsoft Sentinel Microsoft Defender SentinelOne Cloud Security Azure Detection Engineering Security Automation Security Governance API integrations Security Platform Design Experience with other leading enterprise ...

This role can offer 3 days remote working. Essential Experience: Strong technical expertise in security, network, and infrastructure technologies, including experience with secure Azure/AWS cloud environments, Microsoft Defender for Endpoint, Microsoft Sentinel, and security tooling development. Proven ability to drive security automation and operational ...

join its security operations team. You’ll work primarily within Microsoft’s Unified Security Operations Platform, including Microsoft Defender XDR and Microsoft Sentinel, helping manage incidents, support junior analysts and strengthen security operations for a range of clients. Key responsibilities Monitor priority incidents and ensure SLAs … Support incident response, client communications and incident bridges Maintain runbooks, internal documentation and the KQL library Tune detections and manage improvement requests through Azure DevOps What we’re looking for Strong experience in a security operations or analytical role Hands-on expertise with Microsoft Defender and Microsoft Sentinel ...