101 to 125 of 155 Permanent Azure Sentinel Jobs

development using modern DevOps practices to enhance security operations.Understanding of social engineering tactics, phishing attacks, and physical security measures.Experience with secured cloud architectures (Azure, AWS) and tools such as Microsoft Defender for Endpoint and Microsoft Sentinel.Attainment of relevant Microsoft accreditations (e.g. … empower individuals to create sustainable value through innovative technology solutions. As one of Microsoft's leading partners in the UK specializing in Azure, Security, Dynamics 365, and Microsoft 365, we have a proven track record of delivering transformational IT services.Our Selection Process:We are committed to providing ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, Remote (with UK wide travel) This is an exceptional permanent Security Engineer (SIEM/… Engineer (SIEM/XDR) Strong Security Engineer (SIEM/XDR), security engineering or detection engineering experience Hands-on SIEM and XDR tooling Microsoft Sentinel and Microsoft Defender for Endpoint Detection engineering, detection-as-code, KQL, security content and alert logic Automation, SOAR, playbooks, enrichment workflows and response improvement ...

Cyber, Edinburgh-based, is seeking a skilled Professional Services cloud security consultant to lead customer-facing engagements around Microsoft cloud security capabilities, including Azure, Defender XDR, Sentinel, Entra and M365 security. You will guide workstreams, develop high-quality deliverables, support onboarding, and ensure smooth handover … operations across Azure, Defender XDR, Sentinel, Entra and 365 security services, working with SOC and engineering teams. #J-18808-Ljbffr ...

processes - enrichment, ticketing, containment - using Python, Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius of an incident Run hypothesis-led threat hunts, not just reactive … equivalent) Practical scripting/automation experience (Python, Logic Apps, REST APIs) or hands-on SOAR platform configuration Working knowledge of several of: Microsoft Sentinel, Defender XDR, CrowdStrike, Microsoft Entra ID/Azure AD, Microsoft 365, AWS security tooling Experience investigating identity and cloud-based compromise, including ...

against Windows, macOS, and Linux platforms. Awareness of anti-virus, anti-malware, and endpoint protection concepts. Familiarity with SIEM concepts (Cortex XSIAM, Microsoft Sentinel, or equivalent). Familiarity with cloud services (Microsoft Azure, Microsoft 365, AWS). Awareness of incident management processes. Understanding of adversary motivations ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, Remote (with UK wide travel) This is an exceptional permanent Security Engineer (SIEM/… SIEM/XDR) Strong Security Engineer (SIEM/XDR), security engineering or detection engineering experience Hands-on SIEM and XDR tooling, ideally Microsoft Sentinel and Microsoft Defender for Endpoint Detection engineering, detection-as-code, KQL, security content and alert logic Security telemetry, logging pipelines, data quality and telemetry ...

perfect opportunity for you.Required Skills and ExperienceStrong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR … sources map to the attack lifecycleExperience with XDR or EDR platforms such as Microsoft Defender, CrowdStrike or Cortex Understanding of cloud environments, particularly Azure, and associated security telemetry Experience working in customer-facing or consultancy roles Strong communication skills, with the ability to explain technical concepts clearlyTechnical CompetenciesSIEM ...

perfect opportunity for you. Required Skills and Experience Strong hands‐on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps … attack lifecycle Experience with XDR or EDR platforms such as Microsoft Defender, CrowdStrike or Cortex Understanding of cloud environments, particularly Azure, and associated security telemetry Experience working in customer‐facing or consultancy roles Strong communication skills, with the ability to explain technical concepts clearly Technical Competencies SIEM ...

tools. This is mid level role and the individual will be expected to work across a variety of technologies such as Splunk and Sentinel SIEM, Nessus Vulnerability management, Microsoft XDR and other as appropriate. The role will range from advising on design, deploying and configuring new solutions, assessing … tools including Jira and Cribl Core Duties Knowledge and experience of design, build, deployment and operation of SIEM/SOAR tools (Splunk and Sentinel at a minimum) and other appropriate tooling e.g. SOAR, Threat Intelligence, traffic analysis tools etc. to identify signs of an intrusion, and advise where ...

CISSP, CCSP, CISM, SANS. Microsoft Security and Exposure Management: Build strong knowledge of Microsoft Security tools such as Defender for Cloud, Microsoft Sentinel, Defender XDR, Security Copilot, Entra ID, and Exposure Management capabilities to help clients identify, prioritise, and reduce security risks across cloud and hybrid environments. Cloud … engaged technology professionals to join our Managed Services team delivering continuous value to our client’s businesses. We are seeking a n Azure Cloud Architect with experience in Cloud Resiliency Architect ure who is passionate about improving reliability, continuity, and disaster recovery capabilities of enterprise cloud environments. ...

attacks.Develop and maintain cyber defence use cases, correlation rules, and attack chain detections across disparate systems.Design, implement, and integrate SIEM solutions—particularly Microsoft Sentinel—into Security Operations.Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem.Handle L2-level incidents leveraging Microsoft Sentinel and Microsoft Defender tools.Support incident response, triage, threat modelling, and vulnerability remediation within Azure-hosted environments.Create, run, and troubleshoot Azure Logic Apps, playbooks, and Sentinel automation components.Collaborate with business and security stakeholders to define and enhance security standards and improve security posture. ...

Line IT Engineer - Key ResponsibilitiesAct as the primary escalation point for complex 2nd/3rd line incidents and service requests across infrastructure, networking, Azure, Microsoft 365, and cybersecurity.Manage and maintain client systems and centralized services, including Mimecast, Avanan, SentinelOne, MDR/XDR, Fortinet, DR/BC, Huntress, Autotask … resilience, and performance.Key Skills & ExperienceProven experience in a 3rd Line/Senior Engineer role within an MSP environmentStrong knowledge of Microsoft technologies, including Azure, 365, SharePoint, and IntuneExcellent understanding of networking, firewalls, VPNs, and Windows Server environmentsExperience with RMM tools, security platforms, and endpoint managementFamiliarity with tools ...

Ready to shape the future of enterprise cloud? Our client is looking for a hands‐on Senior Cloud Architect to advance a mature Azure platform powering innovation across the organization. You'll help define cloud standards, improve reliability at scale, and build secure, automated solutions that enable teams … Employer without sponsorship. Sponsorship is not provided and this person will not need to require sponsorship in the future. Benefits & Extras Enterprise‐scale Azure environment with modern cloud technologie High‐impact architecture role with significant technical influence Collaborative team of senior cloud and infrastructure experts Opportunity to drive ...

background in Cyber Security, Identity & Access Management (IAM), an MSP, MSSP or security consultancy. Desirable Experience Microsoft Defender for Identity. Microsoft Graph API. Azure Automation. Identity Governance. Microsoft Sentinel or Purview. BloodHound, PingCastle or similar identity assessment tools. Microsoft certifications such ...

attacks.Develop and maintain cyber defence use cases, correlation rules, and attack chain detections across disparate systems.Design, implement, and integrate SIEM solutions—particularly Microsoft Sentinel—into Security Operations.Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem.Handle L2-level incidents leveraging Microsoft Sentinel and Microsoft Defender tools.Support incident response, triage, threat modelling, and vulnerability remediation within Azure-hosted environments.Create, run, and troubleshoot Azure Logic Apps, playbooks, and Sentinel automation components.Collaborate with business and security stakeholders to define and enhance security standards and improve security posture. ...

client stakeholders (engineering, security, operations) to validate requirements, manage technical risks, and coordinate delivery plans and change windows. QualificationsRequiredStrong track record delivering production Azure environments, including hands-on experience ofnetworking, IAM, governance, and security controls, ideally through working with external clients Significant hands-on experience implementing and operating … restore, performance, and HA/DR. Strong experience with Infrastructure as Code (Terraform and/or Bicep/ARM) and CI/CD (Azure DevOps, GitHub Actions, GitLab CI or similar). Solid cloud security engineering knowledge: RBAC/IAM, private networking, key/secrets management, encryption, secure ...

client stakeholders (engineering, security, operations) to validate requirements, manage technical risks, and coordinate delivery plans and change windows. QualificationsRequiredStrong track record delivering production Azure environments, including hands-on experience ofnetworking, IAM, governance, and security controls, ideally through working with external clients Significant hands-on experience implementing and operating … restore, performance, and HA/DR. Strong experience with Infrastructure as Code (Terraform and/or Bicep/ARM) and CI/CD (Azure DevOps, GitHub Actions, GitLab CI or similar). Solid cloud security engineering knowledge: RBAC/IAM, private networking, key/secrets management, encryption, secure ...

control improvements, and reporting outputs against agreed engagement milestones.• Contribute to solution architecture and pre-sales deal shaping for cloud security, Microsoft Defender, Sentinel, Entra, Defender for Cloud, and exposure management opportunities.Build trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales engagements.• Design … implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies.• Understand threat modelling, attack paths, cloud misconfigurations, identity risks, vulnerabilities, and how to prioritise remediation based on exploitability and business impact.• Understand ...

improving vulnerability tooling and providing security advice to operational and project teams. You will work across technologies including Windows, Linux, mainframe, AWS and Azure, while collaborating with infrastructure teams, security colleagues, suppliers and wider stakeholders. Responsibilities Design, implement and improve technical security systems and controls across HMLR … skills Strong experience designing and implementing technical security systems and controls. Advanced knowledge of at least three security technologies, such as SIEM, Defender, Sentinel, EDR/XDR, Active Directory, Nessus, PAM, AWS IAM or Entra. Extensive knowledge of security controls across Windows, Linux, mainframe, AWS or Azure ...

improving vulnerability tooling and providing security advice to operational and project teams. You will work across technologies including Windows, Linux, mainframe, AWS and Azure, while collaborating with infrastructure teams, security colleagues, suppliers and wider stakeholders. Responsibilities Design, implement and improve technical security systems and controls across HMLR … skills Strong experience designing and implementing technical security systems and controls. Advanced knowledge of at least three security technologies, such as SIEM, Defender, Sentinel, EDR/XDR, Active Directory, Nessus, PAM, AWS IAM or Entra. Extensive knowledge of security controls across Windows, Linux, mainframe, AWS or Azure ...

cases aligned to MITRE ATT&CK, develop response playbooks, and implement Detection-as-Code best practices. Key Requirements Experience with SIEM platforms (Microsoft Sentinel preferred) Strong KQL and detection engineering skills SOAR automation and playbook development experience Python and/or PowerShell scripting XDR/EDR experience Knowledge … MITRE ATT&CK and threat detection methodologies Azure security and cloud telemetry exposure Previous consultancy or customer-facing experience What's on Offer 65,000 base salary Annual Bonus Predominantly remote working No on-call requirement Exposure to enterprise-scale cyber security projects Strong development and progression opportunities ...

security operations roles. Hands-on SIEM engineering and detection tuning experience. Proven ownership of complex incident response and investigations. Cloud security experience across Azure and AWS. Experience automating SOC workflows and response processes. Threat hunting experience beyond basic log review. Comfortable engaging directly with technical stakeholders. Able … prioritise and operate effectively under pressure. Useful but not essential Microsoft Sentinel experience. Container or Kubernetes environments. CI/CD security tooling exposure. Red or purple team experience. Why this opportunity Senior ownership and autonomy. Modern cloud-first environment. Strong investment in tooling and automation. Opportunity to genuinely ...

across SIEM, firewalls, endpoint protection, identity and access management, and secure configuration. Manage cyber security across cloud and hybrid environments (Microsoft 365/Azure), including patching assurance, disaster recovery and business continuity testing. Lead vulnerability management and security testing activity (internal scanning, external testing, remediation tracking, evidence gathering … assurance approaches. Security compliance and audit-readiness (e.g., PSN, PCI-DSS, GDPR, Cyber Essentials Plus and similar frameworks). Microsoft security tooling (e.g., Sentinel, Defender, and M365 E5 security capabilities); exposure to Copilot for Security is beneficial. Experience operating within structured service environments (e.g., ITIL) and change governance. ...

across SIEM, firewalls, endpoint protection, identity and access management, and secure configuration. Manage cyber security across cloud and hybrid environments (Microsoft 365/Azure), including patching assurance, disaster recovery and business continuity testing. Lead vulnerability management and security testing activity (internal scanning, external testing, remediation tracking, evidence gathering … assurance approaches. Security compliance and audit-readiness (e.g., PSN, PCI-DSS, GDPR, Cyber Essentials Plus and similar frameworks). Microsoft security tooling (e.g., Sentinel, Defender, and M365 E5 security capabilities); exposure to Copilot for Security is beneficial. Experience operating within structured service environments (e.g., ITIL) and change governance. ...

design and delivery of cloud services. Act as security SME for cloud services Standard Technical Skills & Competencies Experience working in enterprise cloud environments (Azure, AWS, GCP). Experience building cloud infrastructure and using cloud IaC tooling (Terraform, Cloudformation, BICEP) Experience in threat modelling, security reviews and testing. Proficiency … SSPM tooling and use Container knowledge, particularly in Kubernetes. Experience with Linux operating systems. Experience with IaC policy-as-code security tools - Terraform Sentinel, Wiz, etc. Strong understanding of cryptography, modern authentication and authorization mechanisms, networking, and enterprise security architectures. Desirable Previous experience in the financial/regulated ...