51 to 75 of 155 Permanent Azure Sentinel Jobs

similar role within enterprise software environments Strong technical expertise and hands-on experience across Microsoft Entra and Identity, the Microsoft Defender suite, Microsoft Sentinel, and Microsoft Purview. Proven ability to manage compliance with ISO 27001 controls and to coordinate the Cyber Essentials recertification process. Strong reporting skills with … overall security posture, monitor alerts, assess risks, and coordinate remediation activities while implementing key security technologies Oversee identity and access management across Entra, Azure, Intune, Jira, AWS and SaaS platforms, maintaining Conditional Access, MFA, PIM and Identity Protection Implement and maintain Microsoft Sentinel, Purview ...

technology team within a rapidlyscaling enterprise. The successful candidate will be responsible for designing,implementing, and maintaining robust cloud security solutions across AWS,Azure, and hybrid environments. This is an exciting opportunity to be at the forefront ofDevSecOps practices, helping secure cloud-native applications andinfrastructure while ensuring compliance … with industry standards. Job Responsibilities Designand implement cloud security architecture and controls in AWS, Azure, orGCP. Leadcloud security assessments and support vulnerability remediation. Automatesecurity tools and processes using Infrastructure-as-Code (IaC) practices. ManageIAM, encryption, firewalls, and compliance policies. Workclosely with DevOps and Engineering teams to embed security ...

office locations globally and stay away from home on occasion. Knowledge and experience of these technologies is a key requirement: Microsoft EntraID/Azure Microsoft Defender 365 (including Microsoft Defender XDR) Microsoft Sentinel Microsoft Active Directory Microsoft Intune VMWare Experience in as many of these technologies ...

Code (IaC), CI/CD, and DevSecOps practices. What you'll be doing Design, build, and manage complex cloud environments using GCP and Azure, ensuring adherence to architectural guardrails and tagging standards. Develop and maintain secure, multi-region, multi-account cloud landing zones using automation frameworks. Implement advanced … using Terraform, CloudFormation, and Ansible for repeatable, auditable deployments. Integrate IaC pipelines with version control (Git), automated testing, and policy-as-code (e.g., Sentinel, OPA) for compliance enforcement. Champion GitOps and immutable infrastructure patterns. CI/CD & DevOps: Build and optimize CI/CD pipelines (Azure ...

across identity, security, cloud, infrastructure, networking, data protection and operational security domains, with a particular focus on Microsoft technologies including Entra ID, Defender, Sentinel, Purview, Azure and Microsoft 365.Salary & BenefitsOur salaries are competitive within the cyber marketClick here for the list of benefits.Hybrid workingWe recognise … onboarding of customer environments into managed services.Ensure new solutions are operationally supportable.Define service acceptance criteria and operational design requirements.Work alongside SOC, Managed Identity, Azure and Infrastructure teams to establish support models.Provide technical governance throughout the service lifecycle.Client Advisory & Strategic EngagementAct as trusted advisor to CIO, CTO, CISO ...

PowerShell and APIs. Manage and optimise security tooling including SIEM, EDR/XDR and monitoring platforms. Support the secure configuration and governance of Azure, AWS and Microsoft 365 environments. Collaborate with IT, Development and Security teams to deliver secure-by-design solutions. Enhance detection, threat monitoring and incident … safeguards. Skills & Experience Essential Good level of experience within Cyber Security, Security Engineering, Cloud Security or Security Operations. Strong cloud security knowledge across Azure, AWS and/or Microsoft 365. Experience with scripting and automation using Python, PowerShell or similar technologies. Hands-on experience managing and configuring security ...

accountabilities Security Platform Operationalisation: Operationalise and tune the deployed security tooling estate, including CrowdStrike Falcon (EDR and Next-Gen SIEM), Wiz CSPM (Azure and AWS), Mimecast and the Microsoft security stack, moving platforms from deployed to fully managed through detection rule tuning, alert configuration, log source onboarding … tuning, host investigation and response actions. Experience operationalising SIEM, EDR/XDR and vulnerability management platforms (for example CrowdStrike Next-Gen SIEM, Microsoft Sentinel or Microsoft Defender), including detection tuning, alert management and vulnerability scanning and reporting. Microsoft security stack experience across Entra ID, Active Directory and Group ...

frameworks and standards such as: NIST ISO 27001 CIS Controls Cyber Essentials Regulatory requirements within Financial Services Technical Knowledge Good understanding of: Microsoft Azure AWS Active Directory/Entra ID Security Monitoring Platforms Identity Management Solutions Network and Infrastructure Security Ability to engage effectively with technical architects, engineers … management skills with the ability to engage at Executive and C‐Level. Experience managing third‐party suppliers and system integrators. Experience with: Microsoft Sentinel Splunk SailPoint CyberArk Okta CrowdStrike Microsoft Defender Suite Knowledge of DevSecOps practices. Exposure to cloud migration and security transformation programmes. Experience supporting regulatory remediation ...

Microsoft Security Architect Department: Azure Employment Type: Full Time Location: Belfast Description We are seeking a highly skilled and experienced Microsoft Security Architect to join our dynamic team! The ideal candidate will be a subject matter expert in Microsoft's security ecosystem, with a strong focus on Azure … customers to understand their business needs, security challenges, and technical requirements. Solution Design & Architecture: Design comprehensive security solutions utilizing Microsoft technologies such as Azure, Entra ID, Entra Private Access, and the Defender suite (Defender for Endpoint, Defender for Cloud). Proposal Development: Create detailed solution proposals, including technical ...

experience across: • Experience working with SIEM or security monitoring platforms (not necessarily as a primary role), such as: o Google SecOps/Chronicle, Sentinel, QRadar, Splunk, Elastic or similar o Experience supporting or building log ingestion pipelines or data integrations • Exposure to integrating systems across: o Security tooling … code (e.g. Terraform) • Experience working with security tooling integrations (EDR, SOAR, threat intelligence platforms) • Understanding of cloud-native security services across AWS, Azure, or GCP • Relevant certifications such as: o SC-200, AZ-500, or cloud certifications • Experience working in regulated or public sector environments • Awareness of secure ...

experienced Microsoft Sentinel SME is required to support a major security transformation programme within a large enterprise environment. The successful consultant will take ownership of the Microsoft Sentinel platform, helping to improve detection capabilities, optimise existing configurations, develop new use cases, and enhance the organisation … hands‐on Security Engineer, Detection Engineer, SIEM Engineer, or Security Operations specialist with deep Microsoft security expertise and extensive experience working with Sentinel in complex enterprise environments. Key Responsibilities Act as the technical lead and subject matter expert for Microsoft Sentinel Review and optimise existing Sentinel ...

Loss Prevention (DLP) investigations and partnering with business teams to manage potential information security incidents.Managing and optimising key security technologies, including Microsoft Defender, Sentinel, Purview, XDR, email and web security platforms, phishing simulation tools and other operational security controls.Leveraging automation and AI to enhance threat detection, streamline investigations … with:Experience leading security operations teams within hybrid or outsourced environments.Strong technical expertise across modern security tooling, including Microsoft Defender, Microsoft E5 Security, Sentinel, AWS, Azure, Purview, SIEM, XDR/EDR, CSPM and vulnerability management platforms.Experience leading technical incident response, problem management and security investigations.A solid ...

controls.Develop and maintain incident response procedures, playbooks and documentation aligned to industry best practice.Detection Engineering & Security AutomationConfigure, optimise and continuously improve Microsoft Sentinel and Microsoft Defender technologies.Develop and tune detection logic using KQL to identify emerging threats and attacker behaviours.Build and maintain automated SOAR workflows using Logic Apps … premise environments.Maintain high-quality technical documentation for detections, automations and operational workflows.Cloud Security & Secure-by-DesignSupport secure configuration and operational security across Azure and associated cloud services.Collaborate with infrastructure and engineering teams to embed secure-by-design principles.Evaluate configuration changes and ensure alignment with security standards and controls.Support ...

analytical, with excellent written and verbal communication skills. You are familiar with architecture frameworks (TOGAF or equivalent) and Well-Architected reviews (AWS/Azure/GCP) You have proven hands-on experience leading migrations from incumbent tooling to a modern, consolidated delivery platform - including continuous delivery (e.g. … areas listed below, with working knowledge of the rest: CI/CD & pipelines: GitLab CI/CD, GitHub Actions, Jenkins, Azure DevOps, CircleCI, GitOps principles with Argo CD/Workflows, Tekton, Buildkite, Bamboo, TeamCity, AWS CodePipeline. Policy-as-Code & governance: OPA/Rego, HashiCorp Sentinel, Kyverno. ...

company’s cyber services. You will translate security data into actionable narratives, guide a defensible 12-month roadmap, and collaborate with Microsoft Azure Sentinel/Defender XDR expertise to prioritize improvements and drive measurable outcomes. You will maintain relationships with senior stakeholders, deliver proactive and reactive ...

complex cloud transformation, security modernisation, and AI adoption programmes. Support pre-sales activities, workshops, proof of concepts, and executive presentations. Technology & Innovation Microsoft Azure Microsoft 365 Security Microsoft Defender Suite Microsoft Sentinel Microsoft Entra Microsoft Copilot for Security Microsoft Purview AWS Security Google Cloud Security … Access) Microsoft 365 Defender (Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps) Microsoft Defender for Cloud Microsoft Sentinel Microsoft Copilot for Security Microsoft Intune AWS Security Services Google Cloud Platform Security Zero Trust Architectures DevSecOps CNAP platforms (like Wiz and Palo Alto ...

maintain cyber defence use cases, correlation rules, and attack chain detections across disparate systems. Design, implement, and integrate SIEM solutions—particularly Microsoft Sentinel—into Security Operations. Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem. Handle L2-level incidents leveraging Microsoft Sentinel and Microsoft Defender tools. Support incident response, triage, threat modelling, and vulnerability remediation within Azure-hosted environments. Create, run, and troubleshoot Azure Logic Apps, playbooks, and Sentinel automation components. Collaborate with business and security stakeholders to define and enhance security standards ...

background, looking to develop further within security operations. Key Responsibilities Monitor, triage, and respond to security incidents using SIEM tools such as Microsoft Sentinel Investigate and resolve alerts, escalating where necessary Manage and maintain SOC tools, configurations, and updates Follow ITIL-based processes for incident, problem, and service … Looking For Experience in a SOC Analyst role or strong systems administration experience with security exposure Hands-on experience with Microsoft Sentinel and Microsoft Defender technologies Good understanding of networking concepts (DNS, IP, routing, SSL, etc.) Familiarity with cloud environments, ideally Azure Experience with Windows ...

security engineers (currently 3) Act as the senior escalation point for security incidents and decision‐making Work across a modern Microsoft/Azure environment, driving improvements in M365 security and identity Influence how security is delivered across our sites, combining internal and client‐facing services … governance Translate regulatory obligations ( FCA , PRA , ISO 27001 , Lloyd’s ) into practical, measurable controls Hands‐On Security Engineering Implement and optimise controls across Azure, M365, and infrastructure environments Lead hardening initiatives across IAM, PAM, AD, and network security Drive security automation and DevSecOps practices Incident Response & Threat Detection ...

Cortex XDR. Data Protection & Compliance Support and monitor the company's Data Loss Prevention controls within Microsoft Purview, and data classification through Azure Information Protection labelling. Help maintain the evidence and controls that support the company's accreditations, including ISO/IEC 27001, 27017, and 27018, Cyber Essentials … Request, Change, and Problem management. Understanding of GDPR, data protection, and information governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience with Endpoint Detection ...

solutions that provide business, platform, and technology capabilities for customers and colleagues. This role focuses on administering and optimizing Splunk Enterprise Security, Microsoft Sentinel, and supporting modern Security Operations by developing SIEM use cases, managing data pipelines, automating security workflows, and strengthening enterprise cyber defense capabilities. What … Build and maintain Splunk data models to support advanced analytics and security monitoring. Configure and support Splunk Cloud environments. Administer and maintain Microsoft Sentinel security monitoring capabilities. Manage log ingestion, routing, parsing, normalization, and transformation using Splunk Enterprise and Cribl Stream. Develop automation workflows and security playbooks using ...

Responsibilities Security Platform Operationalisation: Operationalise and tune the deployed security tooling estate, including CrowdStrike Falcon (EDR and Next-Gen SIEM), Wiz CSPM (Azure and AWS), Mimecast and the Microsoft security stack, moving platforms from deployed to fully managed through detection rule tuning, alert configuration, log source onboarding … tuning, host investigation and response actions. Experience operationalising SIEM, EDR/XDR and vulnerability management platforms (for example CrowdStrike Next-Gen SIEM, Microsoft Sentinel or Microsoft Defender), including detection tuning, alert management and vulnerability scanning and reporting. Microsoft security stack experience across Entra ID, Active Directory and Group ...

mixed-vendor environments, including SaaS platforms and hybrid cloud estates. Deep hands‐on expertise across the Microsoft security and compliance ecosystem, including Microsoft Sentinel, Defender XDR, Purview, Entra ID and Defender for Cloud, from solution design through to implementation and optimisation. Experience designing, onboarding and maturing SOC capabilities … CISSP, CISM, CISA or CySA+, alongside relevant Microsoft security certifications including SC-100 (Microsoft Cybersecurity Architect), SC-200 (Security Operations Analyst), AZ-500 (Azure Security Engineer) or alternates aligned the CrowdStrike ecosystem, such as, CrowdStrike Certified Falcon Administrator (CCFA), CrowdStrike Certified SIEM Engineer (CCSE), CrowdStrike Certified Identity Specialist ...

either in a vendor, partner, or customer capacity Extensive technical experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Experience with enterprise security architectures, including identity infrastructure, cloud … environments (AWS, Azure, GCP), OT/ICS environments, or hybrid data center Bachelor's degree or equivalent work experience.Bonus points if you have Strong written and verbal communication skills; able to translate complex technical concepts into business outcomes for executive audiences Active CrowdStrike certification(s): CCFA, CCSE ...

conversations at the CISO, security architect, or SOC lead levelExtensive experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure managementProven experience with enterprise security architectures, including identity infrastructure, cloud … environments (AWS, Azure, GCP), OT/ICS environments, or hybrid data centerBachelor's degree or equivalent work experience.Bonus points if you haveStrong written and verbal communication skills; able to translate complex technical concepts into business outcomes for executive audiencesActive CrowdStrike certification(s): CCFA, CCSE, or CrowdStrike Champions Professional ...