101 to 125 of 270 Permanent Azure Sentinel Jobs

vulnerability triage workflows that score real risk by exploitability, reachability, and compensating controls rather than raw CVSS. Harden and secure our cloud environment (Azure), partnering with platform engineering on secure configuration, reviewing and remediating vulnerabilities, identity and network controls, posture management, and logging and detection. Strengthen endpoint … control landscape: cloud security, supply‐chain and vulnerability management, endpoint and identity, and detection and response. Are genuinely technical: comfortable in cloud environments (Azure preferred), CI/CD, and at least one scripting language (e.g. Python, Bash, PowerShell), so your controls hold up in engineering reality. Lead with ...

party application connectors. Windows Server, Active Directory, Group Policy, Kerberos, LDAP, RDP, SSH, certificates, networking, firewalls and load-balancing fundamentals. Integration with Microsoft Sentinel or another SIEM for privileged-access monitoring, alerting and audit evidence. Knowledge of Azure and hybrid-cloud privileged-access patterns … Cyber Security, Computer Science or a related discipline, or equivalent practical experience. Relevant certifications such as: PAM relevant certification Microsoft security or Azure certification CISSP, CISM or equivalent security certification What Mizuho Can Offer You Here at Mizuho, there are fantastic progression opportunities and clear paths to promotion. ...

control improvements, and reporting outputs against agreed engagement milestones. Contribute to solution architecture and pre-sales deal shaping for cloud security, Microsoft Defender, Sentinel, Entra, Defender for Cloud, and exposure management opportunities while building trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales … engagements. Design, implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies. Understand threat modelling, attack paths, cloud misconfigurations, identity risks, vulnerabilities, and how to prioritise remediation based on exploitability and business ...

response, threat hunting or security consultancy. Demonstrable experience leading complex incidents and coordinating multiple stakeholders. Strong experience with SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar or ArcSight. Practical knowledge of forensic investigation, threat intelligence and evidence-led root-cause analysis. Broad technical understanding of Microsoft … Azure, Windows Server, identity, networking, firewalls, endpoint security, virtualisation and resilience technologies. Ability to explain complex security risks clearly and provide proportionate, commercially aware recommendations. Experience within an MSP or multi-client environment is highly desirable. PowerShell or Python capability is advantageous. A recognised security certification such ...

initially lead a major enterprise migration from an incumbent endpoint detection and limited-hours outsourced monitoring model to Microsoft Defender XDR and Microsoft Sentinel, transitioning into a Cyro-managed SOC. The successful candidate will own the engagement from discovery and target-state design through migration, assurance and service … strategies, target operating models, service boundaries, responsibilities, escalation paths, service levels and transition plans for client-operated and managed SOC services. Design Microsoft Sentinel and Defender XDR solutions, including Defender for Endpoint, Defender for Identity, Defender for Office 365 and Defender for Cloud Apps where relevant, making effective ...

solution i.e. SIEM, SOAR, EDR/XDR and Data Management Tooling, preferably Google SecOps (formerly Chronicle/Simplify), Crowdstrike, Wiz, Cribl, Microsoft Sentinel and Microsoft Defender XDR Understanding of implementing data flow process and architectures Understanding of building Data models and platforms/tools for hosting, managing & manipulating … predicting outcomes Experience in Cloud computing, building and managing environments to host data analysis/science processes, preferred GCP but also AWS and Azure applicable Ability to work in a fast-paced environment where design, build, testing and operations are aligned within a multi-modal model, managing pipeline ...

mixed-vendor environments, including SaaS platforms and hybrid cloud estates. Deep hands-on expertise across the Microsoft security and compliance ecosystem, including Microsoft Sentinel, Defender XDR, Purview, Entra ID and Defender for Cloud, from solution design through to implementation and optimisation. Experience designing, onboarding and maturing SOC capabilities … CISSP, CISM, CISA or CySA+, alongside relevant Microsoft security certifications including SC-100 (Microsoft Cybersecurity Architect), SC-200 (Security Operations Analyst), AZ-500 (Azure Security Engineer) or alternates aligned the CrowdStrike ecosystem, such as, CrowdStrike Certified Falcon Administrator (CCFA), CrowdStrike Certified SIEM Engineer (CCSE), CrowdStrike Certified Identity Specialist ...

customers' digital roadmaps while supporting day-to-day operations. This role predominantly focuses on Microsoft Cloud technologies, specifically the Modern Workplace and Azure technologies, requiring subject matter expertise. Responsibilities Consulting & Guidance : Collaborating with clients to understand their digital transformation needs and providing expert advice on technical solutions. Design … Management, Service Delivery, and the BAU team to facilitate seamless support and issue resolution. Monitoring & Governance : Implementing monitoring, alerting, and operational governance within Azure to ensure a strong security posture and regulatory compliance. Documentation : Ensuring all solutions are fully documented, supportable, and transitioned into managed services with clear ...

seeking an Infrastructure Cloud Engineer to design, implement and improve its cloud infrastructure, platform services and automation capabilities. The role combines hands-on Azure engineering with support for application delivery and data platforms, helping the business build secure, scalable and reliable technology foundations. You will contribute to cloud … architecture, automate operational processes and support technology transformation across the business. Key Responsibilities: Design, deploy and maintain secure, scalable and cost-effective Microsoft Azure infrastructure. Build repeatable environments using Infrastructure as Code tools such as Terraform, Bicep or ARM templates. Support cloud infrastructure for application hosting, APIs, containerised ...

problem-solving skills. Excellent communication and stakeholder engagement abilities. Technical Experience Experience with some of the following technologies is highly desirable: Microsoft Sentinel Microsoft Defender XDR CrowdStrike SentinelOne Splunk IBM QRadar Azure Security Services Security Automation & SOAR platforms Endpoint Detection & Response (EDR) Desirable Qualifications CISSP SSCP … CompTIA Security+ SC-200 SC-300 Azure Security certifications GIAC certifications Equivalent experience will also be considered. Why Join? This is more than a security operations role. It's an opportunity to help shape the future of cyber security within a business that values innovation, continuous improvement ...

problem-solving skills. Excellent communication and stakeholder engagement abilities. Technical Experience Experience with some of the following technologies is highly desirable: Microsoft Sentinel Microsoft Defender XDR CrowdStrike SentinelOne Splunk IBM QRadar Azure Security Services Security Automation & SOAR platforms Endpoint Detection & Response (EDR) Desirable Qualifications CISSP SSCP … CompTIA Security+ SC-200 SC-300 Azure Security certifications GIAC certifications Equivalent experience will also be considered. Why Join? This is more than a security operations role. It's an opportunity to help shape the future of cyber security within a business that values innovation, continuous improvement ...

environments. Specifically, we’re interested in speaking with candidates who have: Experience leading and mentoring security engineering teams Strong Microsoft security stack expertise (azure, sentinel and defender) Delivered security projects across a range of security environments (cloud, endpoint, identity etc) Managed multiple engineering initiatives alongside ...

complex cloud transformation, security modernisation, and AI adoption programmes. Support pre-sales activities, workshops, proof of concepts, and executive presentations. Technology & Innovation Microsoft Azure Microsoft 365 Security Microsoft Defender Suite Microsoft Sentinel Microsoft Entra Microsoft Copilot for Security Microsoft Purview AWS Security Google Cloud Security … Access) Microsoft 365 Defender (Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps) Microsoft Defender for Cloud Microsoft Sentinel Microsoft Copilot for Security Microsoft Intune AWS Security Services Google Cloud Platform Security Zero Trust Architectures DevSecOps CNAP platforms (like Wiz and Palo Alto ...

ensure security is embedded into all technology services and projects. Main Responsibilities Design and maintain secure architectures and technical controls across Microsoft Azure, Microsoft 365, AWS, hybrid and approved Cloud services. Deliver secure configuration and designs, investigation findings, vulnerability remediation plans, monitoring improvements, documented standards and playbooks, risk … assessments, audit evidence and management summaries. Play a key role in protecting our AWS and Azure cloud environments, ensuring security controls, configurations and services remain aligned to best industry practise, internal standards and PCI DSS, CE+ requirements. Works collaboratively with IT Security, Infrastructure, Networks, Architecture, Applications, Digital, DevOps ...

Entra ID compromise, including the unified audit log, token and conditional access abuse and mailbox rules. Investigate cloud intrusions in AWS, Azure or Google Cloud using the provider's own logging. Scope data exfiltration and establish what was actually taken, which is the question that drives the client … more of Velociraptor, KAPE, X-Ways, Magnet Axiom, EnCase, FTK, Volatility or the Zimmerman tools, plus a SIEM such as Splunk or Microsoft Sentinel and query languages including KQL. Cloud and identity forensics across Microsoft 365, Entra ID and at least one of AWS, Azure ...

Previously worked as a Threat Detection Engineer or in a similar role. Must have strong expertise in KQL.Hands-on experience with Microsoft Sentinel and Defender (Endpoint, Office 365).Familiarity with Microsoft Entra ID, including Identity Governance. Experience with Microsoft Purview, particularly DLP and data protection tools. Exposure … cloud-native logging in Azure and Kubernetes environments. Understanding of "detection as code" or "everything as code" approaches, including CI/CD pipelines. Experience working with or alongside MSP SOC teams. Awareness of Agile methodologies and ways of working. Knowledge of attacker TTPs, threat modelling, and cyber security ...

similar languages.Experience developing detection rules, response playbooks, threat hunts or security orchestration and automation workflows.Knowledge of Microsoft security technologies such as Sentinel, Defender XDR, Defender for Identity and Defender for Cloud, or equivalent platforms.Exposure to forensic tools such as EnCase, FTK, Velociraptor, Volatility, Wireshark or equivalent.Understanding of cloud … investigation techniques across Microsoft Azure, Microsoft 365 or other major cloud platforms.QualificationsRelevant professional experience supported by a degree in Cyber Security, Computer Science or a related discipline, or equivalent practical experience.One or more relevant certifications such as GCIH, GCIA, GCFA, GNFA, SC-200, CySA+, CISSP or equivalent ...

similar languages. Experience developing detection rules, response playbooks, threat hunts or security orchestration and automation workflows. Knowledge of Microsoft security technologies such as Sentinel, Defender XDR, Defender for Identity and Defender for Cloud, or equivalent platforms. Exposure to forensic tools such as EnCase, FTK, Velociraptor, Volatility, Wireshark … equivalent. Understanding of cloud investigation techniques across Microsoft Azure, Microsoft 365 or other major cloud platforms. Qualifications Relevant professional experience supported by a degree in Cyber Security, Computer Science or a related discipline, or equivalent practical experience. One or more relevant certifications such as GCIH, GCIA, GCFA, GNFA ...

facing role (TAM, Customer Engineer, Senior Support, or similar). Hands-on experience with SIEM or observability platforms, Splunk, Elastic/ELK, Microsoft Sentinel, or equivalent. You've actually used these tools for incident investigation, threat hunting, or application troubleshooting, not just sold them. Strong cloud fundamentals across … Azure, and/or GCP Infrastructure-as-Code experience (Terraform or similar). Scripting skills in Python and/or Bash Comfortable troubleshooting distributed systems, data pipelines, and query performance. Equally fluent talking to engineers and executive stakeholders. Startup or high-growth experience, you know how to move ...

platforms. You’ll identify, track and remediate vulnerabilities, stay ahead of patching priorities, and administer and continuously improve Microsoft Defender and Microsoft Sentinel, integrating infrastructure and security tooling for monitoring and detection. When incidents happen, you’ll coordinate and technically lead the response alongside our external Security Operations … services. This includes delivering identity and access solutions with Microsoft Entra ID, Conditional Access, role-based access control and secure authentication, and administering Azure infrastructure such as VNets, routing, VPN and site-to-site gateways, and network security groups. You’ll design network segmentation using VLANs, firewall rules ...

delivery. Excellent communication and stakeholder management skills. Experience working in Agile, product‐led environments. Passion for coaching, mentoring, and developing others. Microsoft Defender, Sentinel, Entra, and Purview experience. Security architecture and secure‐by‐design expertise. Experience in highly regulated environments. Terraform and Infrastructure as Code tooling. Building self … service security capabilities. Knowledge of ISO 27001 and security governance frameworks. Relevant certifications such as CISSP, CCSP, GIAC, or Azure Security Engineer. Salary from £105,000 per annum. Generous Pension Scheme – We invest in your future with employer contributions of up to 12% 30 Days Holiday pro rata ...

Ensure alignment with security standards, controls, and compliance requirements Skills & Experience Technical Expertise Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, Elastic, ArcSight, LogRhythm, or Exabeam Strong understanding of log formats (JSON, syslog, XML, CEF) and ingestion methods (APIs, Kafka, Event Hubs, agents) Experience … rules, dashboards, and alerts Familiarity with SOAR tools and automation workflows Security Knowledge Solid understanding of networking, Windows/Linux systems, cloud platforms (Azure, AWS, GCP), identity systems, and endpoint security tools Knowledge of MITRE ATT&CK , cyber kill chain, and threat hunting techniques Requirements Degree (Level 4+ ...

years of hands-on experience in a Security Operations, SOC, or equivalent operational security role Practical experience operating modern security tooling SIEM (e.g. Sentinel), Data Loss Prevention (DLP) tools, EDR, and vulnerability management platforms Solid understanding of security operations workflows: alert triage, incident handling, and vulnerability/finding … Experience coordinating remediation across multiple engineering or platform teams, and keeping work moving to closure Working knowledge of cloud environments (e.g. AWS, Azure and GCP) and how security operations apply across cloud and SaaS Familiarity with common frameworks and standards such as PCI DSS, NIST ...

implementing and continuously improving security controls across Microsoft technologies and cloud platforms. What You'll Do Enhance and optimise Microsoft Defender and Microsoft Sentinel capabilities across the estate Design and implement security controls within Azure environments Lead improvements across Entra ID security, Conditional Access, Identity Protection … likely have: Experience in a Security Engineering, Cyber Engineering or Security Infrastructure position Strong hands-on knowledge of Microsoft Defender and Microsoft Sentinel Experience securing Azure environments in production enterprise settings Good understanding of Entra ID security, Conditional Access and identity governance Practical experience of vulnerability ...

issues. You'll also guide and mentor two analysts, without direct line management, and support the rollout and management of IBM QRadar, Microsoft Sentinel, Defender for Endpoint, Defender for Identity and Defender for Cloud. Key responsibilities Handle security incidents escalated by L1 and L2 analysts, carry out business … Eligible for SC clearance (mandatory) Proven experience at Level 3 SOC Analyst or senior security operations level Strong hands-on experience with Microsoft Sentinel, Microsoft Defender for Endpoint (MDE) and KQL Experience onboarding, configuring, tuning and reporting on SIEM solutions Threat intelligence experience Leadership and mentoring experience Commercial ...