251 to 275 of 290 Permanent Digital & IT Jobs

work rather than on administration. Project Safe works in rail and construction, so the role carries genuine compliance weight: RISQS, Constructionline and ISO evidence, Sentinel competence and medical records, and client vendor management platforms. The successful candidate will be comfortable setting a standard, holding people to it, and keeping … starters are ready before their first day. Maintain the training matrix and competence records, issuing expiry alerts and booking renewals before certificates lapse. Administer Sentinel, covering competence, training and medical monitoring, and sponsorship administration. Maintain HR lifecycle records, including probation, appraisals, absence and leave, working with external HR advisors where ...

moves effectively between operational incidents, control reviews, stakeholder requests, and security improvement initiatives. Key Responsibilities Investigate and respond to security alerts from Microsoft Sentinel, Microsoft Defender XDR, endpoint security tools, and other monitoring platforms; gather evidence, review logs, coordinate containment, and document findings through resolution. Manage security incidents, approvals … analysis, phishing‐submission review, policy tuning, and investigation of SPF, DKIM, and DMARC failures. Administer assigned Microsoft security platforms, including Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra ID, and Microsoft Purview, using least‐privilege and formal change‐management practices. Support the secure adoption and operation of approved artificial intelligence ...

security engagements. The role requires a strong understanding of Microsoft's security ecosystem, including Microsoft 365 E3/E5/E7, Entra ID, Defender, Sentinel, Purview, Copilot and emerging technologies such as Agent 365. While primarily advisory and client-focused, the individual should possess sufficient technical knowledge to assess security … Microsoft 365 Security & Compliance Microsoft Security Copilot Agent 365 and emerging Microsoft AI‐driven security capabilities Entra ID & Identity Governance Microsoft Defender Suite Microsoft Sentinel Microsoft Purview Defender for Cloud Defender for Cloud Apps Intune Zero Trust Architecture Microsoft E3, E5 and E7 security capabilities and licensing. Commercial & Sales Skills ...

tooling, help teams threat model, sit on design reviews for security‐relevant changes, and coach the security champions. SOC operations and Microsoft Sentinel Run the SOC day to day: queue health, shift and on‐call cover, escalation, and the runbooks the analysts work from. Administer SOC tooling: workspace and data … telemetry and bring threat intelligence into detections. Analytics and monitoring Own the logging and telemetry standard with the architect: which sources go to Sentinel, at what level, and how a new service is onboarded before go‐live. Build SIEM workbooks and dashboards for coverage, alert quality and response times ...

tuning Microsoft security controls, including Defender policies, Entra settings and Exchange Online security Building and maintaining detection capabilities using KQL, Advanced Hunting and Microsoft Sentinel Managing phishing simulation campaigns and supporting vulnerability scanning Reviewing client environments and identifying opportunities to improve their Microsoft 365 security posture Supporting incident response activities … Microsoft security technologies, particularly Defender XDR, Entra, Defender for Cloud Apps and Exchange Online Strong knowledge of KQL and Advanced Hunting Experience with Microsoft Sentinel, including analytics rules and Content Hub solutions Good understanding of security protocols, standards and best practices Knowledge of vulnerability management and risk analysis Strong technical ...

security and endpoint management. This includes Windows Active Directory and integration with Microsoft Entra ID, unified security operations with Microsoft Defender XDR and Microsoft Sentinel, and modern endpoint and device management with Microsoft Intune and Microsoft Configuration Manager (SCCM/ConfigMgr), providing practical guidance, design assurance and implementation support where … capability across Microsoft Azure and core Microsoft cloud services Proficiency in security technologies, frameworks, and secure architecture patterns (including Microsoft Defender XDR and Microsoft Sentinel) Strong expertise in Windows Active Directory and hybrid identity integration with Microsoft Entra ID Experience with modern endpoint and device management and configuration management, including ...

driven and endpoint-focused security architecture for user-facing environments Data protection and compliance capabilities through Microsoft Purview Modern SOC enablement leveraging Defender and Sentinel telemetry alongside broader tooling The secure adoption of Microsoft Copilot and AI/LLM-driven capabilities, ensuring appropriate governance, data protection and access controls What … Entra ID (P2), including Conditional Access, MFA and Privileged Identity Management (PIM) Support the modernisation of our clients SOC operating model, leveraging Defender and Sentinel for user and endpoint telemetry, alongside integration of broader infrastructure data sources Conduct security architecture reviews and provide assurance for solutions leveraging Microsoft security technologies ...

timely and effective manner. Specifically you will: Support the rest of the security operations team to monitor, triage and investigate alerts and incidents within Sentinel Conduct initial incident triage, liaising with a 3rd party SOC provider, determining scope, urgency and appropriate actions to mitigate threats. Participate in the incident response … appreciation of how new security solutions can impact delivery. Experience with general security technologies and capabilities including Microsoft E5 technologies such as Azure Sentinel and the various Defender products would be a distinct advantage, as would exposure to automation and familiarity with Python to help streamline processes and support security ...

provide recommendations to strengthen detection outcomes Job Requirements: Strong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR … customer-facing or consultancy roles Strong communication skills, with the ability to explain technical concepts clearly Technical Competencies: SIEM and XDR platforms, including Microsoft Sentinel, Microsoft Defender, Palo Alto XSIAM or XDR, CrowdStrike and SentinelOne SOAR development, including automation and playbook design using platforms such as Palo Alto XSOAR ...

enrichment, and provide recommendations to strengthen detection outcomesJob Requirements: Strong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferredExperience writing detection logic using KQL or similar query languagesProven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR … working in customer-facing or consultancy rolesStrong communication skills, with the ability to explain technical concepts clearlyTechnical Competencies: SIEM and XDR platforms, including Microsoft Sentinel, Microsoft Defender, Palo Alto XSIAM or XDR, CrowdStrike and SentinelOneSOAR development, including automation and playbook design using platforms such as Palo Alto XSOAR or similarScripting ...

escalation quality, handoff, and case closure - Design and facilitate tabletop exercises and translate findings into control improvements SIEM optimization and detection engineering: - Tune Microsoft Sentinel for signal quality and cost efficiency, including connector selection, ingestion tiering, and table-level retention decisions - Author and maintain analytic rules and hunting queries … models - Support segmentation and egress control initiatives Required Qualifications - 7+ years in security engineering or security operations - Deep hands-on Microsoft security stack experience: Sentinel, Defender XDR, Defender for Cloud, Entra ID, Intune - Direct, demonstrable Microsoft Purview experience across DLP, sensitivity labels, and Insider Risk Management - Strong KQL authoring ability ...

technical role for engineers who love seeing things work. Job Responsibilities Execute end-to-end platform deployments across Google SecOps and/or Microsoft Sentinel for new customers Onboard log sources, configure data connectors, and validate ingestion pipelines Load and deploy existing TENEX content into customer environments - including parsers, dashboards … cybersecurity, IT operations, cloud engineering, or a related technical field Hands-on experience with SIEM platforms, particularly Google SecOps and/or Microsoft Sentinel Experience with log source onboarding, data connectors, and ingestion pipeline configuration Familiarity with data pipeline technologies such as Bindplane, OpenTelemetry, Cribl, or similar Scripting experience ...

secure, resilient, available and well-optimised. Troubleshoot complex infrastructure, network and virtualisation issues. Cyber Security & Compliance Lead cyber security initiatives and administer Microsoft Defender, Sentinel and Purview services. Monitor alerts, investigate incidents, manage vulnerabilities, conduct risk reviews and maintain security baselines. Support compliance, audits, business continuity and disaster recovery planning … across Azure, Microsoft 365, VMware, Intune, Autopilot, Entra ID and Conditional Access. Cyber security capability across security operations, vulnerability management, monitoring, incident response, Defender, Sentinel, Zero Trust, risk, compliance and governance. Professional strengths in PowerShell automation, documentation, problem solving, project delivery, vendor management, stakeholder engagement and continuous improvement. What ...

technical role for engineers who love seeing things work. Job Responsibilities Execute end-to-end platform deployments across Google SecOps and/or Microsoft Sentinel for new customers Onboard log sources, configure data connectors, and validate ingestion pipelines Load and deploy existing TENEX content into customer environments — including parsers, dashboards … cybersecurity, IT operations, cloud engineering, or a related technical field Hands-on experience with SIEM platforms, particularly Google SecOps and/or Microsoft Sentinel Experience with log source onboarding, data connectors, and ingestion pipeline configuration Familiarity with data pipeline technologies such as Bindplane, OpenTelemetry, Cribl, or similar Scripting experience ...

doing Designing and maintaining identity and access controls across Entra ID, including Conditional Access and Privileged Identity Management. Enhancing security controls across Microsoft Defender, Sentinel and Purview environments. Developing endpoint security standards for Windows and macOS platforms. Automating security processes, reporting and evidence collection using PowerShell, Microsoft Graph and related … smarter, more effective ways to solve complex challenges. Experience in Cyber Security Engineering, Infrastructure Security or Cloud Security. Exposure to Microsoft Defender XDR, Microsoft Sentinel and KQL. Knowledge of Entra ID, including Conditional Access, PIM and identity lifecycle controls. Experience with vulnerability management and security operations processes. Practical automation skills ...

continuous improvement of SOC operations. What You'll Bring: Proven experience working within a Security Operations Centre. Hands-on experience with Microsoft Sentinel and Splunk. Strong understanding of MITRE ATT&CK. It would be great if you had: Networking protocols and infrastructure (TCP/IP, LAN/WAN, HTTP, SMTP … engineering experience. Python, PowerShell, Bash, Perl or C++ scripting skills. CySA+, Blue Team Level 2 or other SOC-focused certifications. Experience with QRadar alongside Sentinel and Splunk. If you are interested in this role but not sure if your skills and experience are exactly what were looking for, please ...

guidance, helping customers optimize their security defenses and mitigate risks effectively. Microsoft Focus: Utilize your knowledge of Microsoft security products, including Azure, Microsoft Sentinel, KQL, and the Microsoft Defender suite, to offer tailored recommendations and solutions. Relationship Building: Build and nurture strong relationships with customers, acting as a reliable … levels of business and providing informal leadership in cyber security matters. Strong understanding of Microsoft security products and technologies, with proficiency in Azure, Microsoft Sentinel, KQL, and the Microsoft Defender suite or related product lines. Deep understanding of attacker tradecraft and security hardening techniques, enabling you to offer valuable insights ...

strategy. Monitor security alerts and investigate cyber security incidents. Manage vulnerability remediation across servers, endpoints, cloud platforms and network infrastructure. Support Microsoft Defender, Microsoft Sentinel, Microsoft Intune and Microsoft Entra security capabilities. Implement and maintain security controls including Conditional Access, Multi-Factor Authentication, Privileged Identity Management and Zero Trust principles. … across the UK. Desirable: Microsoft Azure Administrator Associate certification. Microsoft security certifications such as AZ-500, SC-200 or SC-300. Experience with Microsoft Sentinel, Defender XDR, Qualys or Tenable. Experience with Microsoft Power BI, Microsoft Fabric and data visualisation. Experience with Microsoft Copilot, Azure AI Services or enterprise ...

implementatie en het beheer van specifieke security-oplossingen. Je bent de kartrekker voor onder andere het opzetten van ons nieuwe SOC, Microsoft Sentinel (SIEM) voor actieve threat detection en het beheren van Microsoft Defender for Cloud voor vulnerability management. Je analyseert en volgt security-incidenten op, en bent de drijvende … denkniveau, aangevuld met security-certificeringen (bijv. AZ-500, SC-200); Diepgaande, specialistische kennis van de Azure security-stack; Hands-on ervaring met Microsoft Sentinel voor het opzetten van detectieregels, incident response (SOAR) en threat hunting; Ervaring met Microsoft Defender for Cloud voor Cloud Security Posture Management (CSPM) en vulnerabilitymanagement; Sterke ...

will initially lead a major enterprise migration from an incumbent endpoint detection and limited-hours outsourced monitoring model to Microsoft Defender XDR and Microsoft Sentinel, transitioning into a Cyro-managed SOC. The successful candidate will own the engagement from discovery and target-state design through migration, assurance and service transition. … monitoring strategies, target operating models, service boundaries, responsibilities, escalation paths, service levels and transition plans for client-operated and managed SOC services. Design Microsoft Sentinel and Defender XDR solutions, including Defender for Endpoint, Defender for Identity, Defender for Office 365 and Defender for Cloud Apps where relevant, making effective ...

identity and access management (IAM), Privileged Identity Management (PIM) encryption, and network security controls. Design and run SIEM/SOAR use-cases in Microsoft Sentinel (data connectors, analytics rules, workbooks, automation playbooks) to support SOC operations, threat detection, and incident response. Support DevSecOps practices and secure software development. Governance & Awareness … management, and endpoint protection Cloud security (AWS, Azure, or similar) Security frameworks (ISO 27001, NIST, CIS) Proven experience with Azure Security tools, including Microsoft Sentinel (SIEM) and the Microsoft Defender suite, covering onboarding, configuration, alert tuning, and day-to-day monitoring. Experience with security posture management in Azure (e.g., Defender ...

understanding of Cyber Security Engineering, Security Operations and Security Architecture. Experience working with enterprise security tooling and platforms. Knowledge of technologies such as Microsoft Sentinel, and Zscaler. Experience driving tooling improvements, automation and operational efficiency. The ability to translate technical concepts into practical business outcomes. A pragmatic and risk-based … opportunity to: Lead a high-performing cyber engineering team. Influence strategic cyber investment decisions. Work with modern security technologies including Microsoft Defender, Microsoft Sentinel and Zscaler. Partner with senior leaders across technology and cyber security. Play a key role in protecting critical services and infrastructure used by millions of customers ...

controls. Develop and maintain incident response procedures, playbooks and documentation aligned to industry best practice. Detection Engineering & Security AutomationConfigure, optimise and continuously improve Microsoft Sentinel and Microsoft Defender technologies. Develop and tune detection logic using KQL to identify emerging threats and attacker behaviours. Build and maintain automated SOAR workflows using … Security Operations, Cyber Defence, Incident Response or Blue Team functions. Experience operating within hybrid cloud and on-premise environments. Hands-on experience with Microsoft Sentinel, Microsoft Defender XDR and Azure security technologies. Experience with detection engineering, threat detection and security automation. Exposure to vulnerability management platforms such as Tenable ...

perfect opportunity for you. Required Skills and ExperienceStrong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR … working in customer-facing or consultancy roles Strong communication skills, with the ability to explain technical concepts clearlyTechnical CompetenciesSIEM and XDR platforms, including Microsoft Sentinel, Microsoft Defender, Palo Alto XSIAM or XDR, CrowdStrike and SentinelOne SOAR development, including automation and playbook design using platforms such as Palo Alto XSOAR ...

business continuity and disaster recovery planning activities. Security Engineering & Technology Support the deployment and management of security tools including: Microsoft Purview Microsoft Defender Microsoft Sentinel Microsoft Entra ID Email Security Solutions Endpoint Protection Technologies Vulnerability Management Platforms Assist with security configuration reviews and hardening activities. Reporting & Stakeholder Engagement Produce security … networking, operating systems, cloud technologies, and identity management. Strong analytical and problem‐solving skills. Excellent written and verbal communication skills. Desirable Experience with Microsoft Sentinel and Defender XDR. Experience with third‐party risk management. Knowledge of GDPR and data protection requirements. Experience working with managed SOC providers. Exposure to security ...