1 to 25 of 43 Remote/Hybrid Permanent Azure Sentinel Jobs

Azure Platform Architect Location: UK Working Pattern: Hybrid/Client-facing Security Clearance: UK Government Security Clearance required We’re looking for an experienced Azure Platform Architect to join a growing cloud and infrastructure practice, taking a leading role in the design and delivery of secure … scalable Azure platforms for enterprise and public-sector customers. This is a hands-on architecture position with significant client exposure. You’ll combine deep Azure platform expertise with strong consulting and leadership skills, helping organisations shape their cloud strategy, modernise infrastructure and deliver large-scale transformation ...

traditional SOC Analyst position. We are looking for technically strong Microsoft Security Engineers with genuine hands-on experience designing, implementing, engineering and optimising Microsoft Sentinel and Defender solutions within enterprise customer environments. The organisation works extensively across the Microsoft Security portfolio and is looking for individuals … will take responsibility for the implementation, optimisation and ongoing improvement of Microsoft security solutions. Responsibilities will include: Design, implementation and support of Microsoft Sentinel and Microsoft Defender/Defender XDR Engineering and optimisation of SIEM capabilities across enterprise environments Developing and tuning KQL queries, analytics and detection rules ...

Practical experience evaluating security implications of AI systems and AI-assisted workflows Experience with cloud security controls across AWS, GCP, and/or Azure 3+ years of hands-on experience in security engineering and incident response Bachelor’s degree in Computer Science or a related field, or significant ...

Management processes Implement identity access control measures and DLP controls Respond to Tier 3 security incidents Monitor threat intelligence Participate in pentests Engineer Microsoft Sentinel detections & SOAR playbooks Senior Cyber Security Engineer: Technical Experience XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office … Azure AD Microsoft Purview Cloud & Endpoint Security Azure Sentinel The permanent opportunity for a Senior Cyber Security Engineer will be based out of the Birmingham offices on a hybrid basis. This is an opportunity to join an industry leader that has grown year ...

Define cloud architecture patterns and engineering standards to support enterprise cloud adoption. Design and implement container platforms using Google Kubernetes Engine (GKE) and Azure Kubernetes Service (AKS). Define and enforce cloud governance frameworks covering identity, access management, networking, security and compliance. Design reusable and modular Infrastructure … teams. Ability to provide thought leadership around cloud innovation and best practice. If you are an experienced Cloud Platform Architect with strong GCP, Azure, Kubernetes and Terraform expertise and would like to find out more, please apply with your most up to date CV. Senior Cloud Platform Architect ...

MERITUS are recruiting for an Infrastructure & Cloud Engineer to join a large Technology Consultancy, supporting secure hybrid infrastructure and Microsoft Azure environments across UK Government customers. INFRASTRUCTURE & CLOUD ENGINEER - Up to £65,000 - REMOTE (UK) - ACTIVE SC CLEARANCE REQUIRED We're looking for an experienced Infrastructure & Cloud Engineer … with a strong Microsoft background to support and improve enterprise infrastructure across on-premise and Azure environments. This is a hands-on role offering the opportunity to work with modern cloud technologies, automation tools and Microsoft 365 services while supporting business-critical systems within a secure environment. Responsibilities ...

implement, and support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling. Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities. Develop automated controls and workflows to enhance governance, compliance, and incident response processes. Skills and Experience Essential … using services such as IAM, Security Hub, GuardDuty, CloudTrail, Config, AWS Organizations, Route 53, and Key Management Service (KMS). Microsoft 365 and Azure Security: Strong experience with Microsoft security technologies including Microsoft Defender XDR, Microsoft Sentinel, Microsoft Purview, Intune, Entra ID, Azure Security ...

custom log parsing. Solid understanding of networking concepts (TCP/IP, firewalls, proxies, VPNs) and security protocols. Familiarity with cloud security principles, Azure, GCP, AWS Working knowledge over a range of operating systems and platforms including: Windows Server, Windows XP, UNIX (Solaris, Linux), Working knowledge of networks … industry certifications (e.g., AZ-500, SC-200, SC-900, CompTIA Security+) or similar Cert with Security Orchestration, Automation, and Response (SOAR) playbooks within Sentinel or other platforms. Scripting skills (PowerShell, Python) for automation and data manipulation. What Mizuho Can Offer You Here at Mizuho, there are fantastic progression ...

across cloud, identity, endpoint and network platforms, and carry out malware analysis and threat validation. Design, implement and optimise detection content across Microsoft Sentinel, Defender XDR, CrowdStrike and associated platforms, developing advanced KQL queries and analytics rules aligned to MITRE ATT&CK. Act as senior technical owner … security platforms including Microsoft Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune, Darktrace and supporting technologies, managing platform health, onboarding and configuration. Design and maintain automation and orchestration workflows using Logic Apps, Sentinel Playbooks, Power Automate, PowerShell, Python and API integrations to reduce manual operational effort. ...

Managers while acting as the lead security voice with customers. Technical credibility across the Microsoft security ecosystem, including Defender, Entra ID, Microsoft 365, Azure, Sentinel, and Purview, alongside broader cyber security domains. Excellent communication and presentation skills, with the ability to engage senior stakeholders, deliver compelling ...

workdays. Your tasks Join our new Security team in the Lisbon IT Hub and help us build secure, scalable cloud environments across AWS, Azure and GCP. Your responsibilities: Design and implement secure cloud architectures (AWS & Azure) Operate and optimize our SIEM platform (Microsoft Sentinel … Maintain clear and structured technical documentation Your profile Must-have: 3+ years of experience in Cloud Engineering and IT Security Strong knowledge of Azure and/or AWS Hands-on experience with scripting/automation (Python, Bash or PowerShell) Good understanding of DevSecOps principles Solid communication skills ...

exception and risk acceptance process: assess compensating controls, document residual risk, and obtain formal sign-off. • Integrate VM tooling with SIEM (Splunk, Microsoft Sentinel), ITSM (ServiceNow VR module), and CMDB for automated ticket creation and asset correlation. • Automate vulnerability reporting and remediation tracking using Python, REST APIs (Qualys … Automation and API integration: Python scripting, REST API calls to Qualys/Tenable/Rapid7; ServiceNow VR module configuration. • SIEM integration: Splunk, Microsoft Sentinel – correlating vulnerability data with threat events. • CMDB-driven asset correlation: ServiceNow CMDB, ensuring VM data reflects accurate asset inventory. • Network and infrastructure knowledge sufficient ...

various memory acquisition techniques/tools: FTK Imager Volatility 3 Velociraptor for remote memory dumps Experience with enterprise SIEM platforms such as: Microsoft Sentinel Splunk Enterprise Security Elastic Security Experience with EDR technologies including: Microsoft Defender XDR CrowdStrike Falcon SentinelOne Singularity Familiarity with: Windows Event Logs Sysmon … attack techniques Detection engineering principles Experience with adversary emulation frameworks. Familiarity with: Caldera Prelude Operator Velociraptor TheHive Cloud security investigation experience in: Microsoft Azure Amazon AWS Google Cloud Certifications: GIAC certifications such as GCFA, GCIH, GCFE, etc. Microsoft certifications such as SC-200, SC-400, AZ-500 CISSP ...

DigiCert PKI Certifications Venafi Professional Certification Microsoft Security Certifications Preferred Technical Tools & Platforms HSM Platforms Thales Luna HSM Entrust nShield HSM AWS CloudHSM Azure Dedicated HSM PKI & Certificate Management Microsoft Active Directory Certificate Services (ADCS) DigiCert Entrust PKI Venafi Keyfactor AppViewX Key Management Technologies HashiCorp Vault … Azure Key Vault Google Cloud KMS Thales CipherTrust Manager Operating Systems Linux (RHEL, CentOS, Ubuntu) Windows Server Security & Monitoring Splunk Microsoft Sentinel QRadar Dynatrace Datadog Infrastructure & Automation PowerShell Python Bash/Shell Scripting Ansible Terraform Git All profiles will be reviewed against the required skills ...

SIEM and other security platforms. Proactive Threat Hunting - Formulate hypotheses and hunt for undetected attacker TTPs across our cloud (AWS, GCP, Azure), SaaS, and endpoint environments. Purple Team - Collaborate with our Adversarial Simulation team in Purple Team exercises to test, validate, and improve detection logic and response. Incident … like MITRE ATT&CK to prioritize and enhance detective controls. SIEM Expertise: Hands-on experience with SIEM platforms (e.g., Splunk, Google SecOps, Elastic, Sentinel) for rule/query creation and analytics. Threat Hunting: Experience conducting proactive threat hunts, defining hypotheses, and developing hunting methodologies. Cloud Security: Solid knowledge ...

SIEM and other security platforms. Proactive Threat Hunting - Formulate hypotheses and hunt for undetected attacker TTPs across our cloud (AWS, GCP, Azure), SaaS, and endpoint environments. Purple Team - Collaborate with our Adversarial Simulation team in Purple Team exercises to test, validate, and improve detection logic and response. Incident … like MITRE ATT&CK to prioritize and enhance detective controls. SIEM Expertise: Hands-on experience with SIEM platforms (e.g., Splunk, Google SecOps, Elastic, Sentinel) for rule/query creation and analytics. Threat Hunting: Experience conducting proactive threat hunts, defining hypotheses, and developing hunting methodologies. Cloud Security: Solid knowledge ...

SIEM and other security platforms. Proactive Threat Hunting - Formulate hypotheses and hunt for undetected attacker TTPs across our cloud (AWS, GCP, Azure), SaaS, and endpoint environments. Purple Team - Collaborate with our Adversarial Simulation team in Purple Team exercises to test, validate, and improve detection logic and response. Incident … like MITRE ATT&CK to prioritize and enhance detective controls. SIEM Expertise: Hands-on experience with SIEM platforms (e.g., Splunk, Google SecOps, Elastic, Sentinel) for rule/query creation and analytics. Threat Hunting: Experience conducting proactive threat hunts, defining hypotheses, and developing hunting methodologies. Cloud Security: Solid knowledge ...

complex cloud transformation, security modernisation, and AI adoption programmes. Support pre-sales activities, workshops, proof of concepts, and executive presentations. Technology & Innovation Microsoft Azure Microsoft 365 Security Microsoft Defender Suite Microsoft Sentinel Microsoft Entra Microsoft Copilot for Security Microsoft Purview AWS Security Google Cloud Security … Access) Microsoft 365 Defender (Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps) Microsoft Defender for Cloud Microsoft Sentinel Microsoft Copilot for Security Microsoft Intune AWS Security Services Google Cloud Platform Security Zero Trust Architectures DevSecOps CNAP platforms (like Wiz and Palo Alto ...

vulnerability triage workflows that score real risk by exploitability, reachability, and compensating controls rather than raw CVSS. Harden and secure our cloud environment (Azure), partnering with platform engineering on secure configuration, reviewing and remediating vulnerabilities, identity and network controls, posture management, and logging and detection. Strengthen endpoint … control landscape: cloud security, supply‐chain and vulnerability management, endpoint and identity, and detection and response. Are genuinely technical: comfortable in cloud environments (Azure preferred), CI/CD, and at least one scripting language (e.g. Python, Bash, PowerShell), so your controls hold up in engineering reality. Lead with ...

colleagues within the cyber security team. Technology Environment You'll be working within a predominantly Microsoft-focused environment, including: Microsoft Defender Suite Microsoft Sentinel Microsoft Purview Microsoft Entra ID Azure Microsoft Fabric Vulnerability management platforms such as Tenable and Intruder Operational Technology (OT) environments and industrial … experience in a Security Engineer, Cyber Security Engineer or similar role. Strong experience securing Microsoft cloud and enterprise environments. Expertise across Microsoft Defender, Sentinel, Entra ID and Azure security technologies. Experience implementing vulnerability management and security monitoring solutions. Strong understanding of security frameworks such as NCSC ...

clean handover once migration is complete. What We're Looking For Essential: Proven experience delivering a migration onto Microsoft Entra ID (formerly Azure AD) — from on-prem AD DS or from a third-party IdP (Okta, Ping, ForgeRock, etc.). Strong working knowledge of Conditional Access, Zero Trust … Graph PowerShell SDK. Comfortable working independently and communicating migration risk/status to non-technical stakeholders. Desirable: KQL for log analysis in Microsoft Sentinel or Azure Monitor. Experience with Entra ID B2B/B2C. Background with an alternative IAM platform (ForgeRock, Ping, Okta) — genuinely useful ...

structure detections, gaps analysis, and defensive improvements. Experience with security operations in cloud platforms and common tools (e.g., Microsoft Defender, Sentinel, Splunk, CrowdStrike, Palo Alto, AWS/Azure security services) and integrating telemetry across environments. Calm under pressure, able to lead effectively during incidents and make ...

structure detections, gaps analysis, and defensive improvements. Experience with security operations in cloud platforms and common tools (e.g., Microsoft Defender, Sentinel, Splunk, CrowdStrike, Palo Alto, AWS/Azure security services) and integrating telemetry across environments. Calm under pressure , able to lead effectively during incidents and make ...

provide recommendations to strengthen detection outcomes Job Requirements: Strong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps … attack lifecycle Experience with XDR or EDR platforms such as Microsoft Defender, CrowdStrike or Cortex Understanding of cloud environments, particularly Azure, and associated security telemetry Experience working in customer-facing or consultancy roles Strong communication skills, with the ability to explain technical concepts clearly Technical Competencies: SIEM ...

POINTS * £50,000 - £55,000 salary * 9-month fixed-term contract * Hybrid working with UK and occasional EU site travel * Microsoft 365, Azure, Entra ID, Intune, Autopilot, Sentinel & Defender * Lead technical integrations following business acquisitions ABOUT THE CLIENT We're working with a growing technology … networks, identity and security environments before designing practical integration plans. A major part of the role will involve Microsoft technologies including Microsoft 365, Azure, Entra ID, Intune, Autopilot, Sentinel and Defender for Endpoint. You'll also lead system rationalisation, identify duplication and technical gaps, and work ...