276 to 291 of 291 Permanent Digital & IT Jobs

business continuity and disaster recovery planning activities. Security Engineering & Technology Support the deployment and management of security tools including: Microsoft Purview Microsoft Defender Microsoft Sentinel Microsoft Entra ID Email Security Solutions Endpoint Protection Technologies Vulnerability Management Platforms Assist with security configuration reviews and hardening activities. Reporting & Stakeholder Engagement Produce security … networking, operating systems, cloud technologies, and identity management. Strong analytical and problem‐solving skills. Excellent written and verbal communication skills. Desirable Experience with Microsoft Sentinel and Defender XDR. Experience with third‐party risk management. Knowledge of GDPR and data protection requirements. Experience working with managed SOC providers. Exposure to security ...

tools and recommend modernization strategies Lead Zero Trust initiatives across identity, endpoint, application, and cloud environments Architect solutions using Microsoft Entra ID, Intune, Defender, Sentinel, Purview, and Azure Security services Partner with infrastructure, compliance, application, and security teams on strategic initiatives Conduct architecture reviews, risk assessments, and security evaluations Improve … security architecture experience 5+ years designing and implementing Microsoft security solutions in enterprise environments Strong experience with: Microsoft Entra ID Microsoft Defender XDR Microsoft Sentinel Microsoft Intune Microsoft Purview Azure Security Services Experience implementing or supporting Zero Trust security strategies Experience developing security architectures, standards, and remediation roadmaps Ability ...

attack patterns, and provide recommendations to reduce risk and improve resilience. Security Platforms & Service Improvement Own the technical effectiveness and continual improvement of Microsoft Sentinel, Microsoft Defender, SIEM, SOAR, EDR, and XDR capabilities. Develop and maintain detection rules, use cases, automation, and response playbooks to improve operational efficiency. Work with … Incident Response role. Strong hands-on experience investigating and responding to complex cyber security incidents. Deep technical knowledge of Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID. Experience designing, tuning, and optimising SIEM, SOAR, EDR, and XDR solutions. Strong ...

Defender for Endpoint, ensuring the platform remains healthy, effective and aligned to evolving security requirements.* Develop, maintain and continuously improve Microsoft Defender and Microsoft Sentinel capabilities, including monitoring coverage, automation opportunities and operational effectiveness.* Support the onboarding of new applications, services and technology platforms, ensuring appropriate security monitoring and detection … operations and engineering disciplines. **Key Experience Required** * Experience deploying, configuring and managing Microsoft security technologies, particularly Microsoft Defender for Endpoint.* Experience working with Microsoft Sentinel in an engineering environment.* Experience working within Azure cloud environments and supporting cloud security controls.* Experience working with log management, data ingestion and integration technologies. ...

customer environments. You will work closely with Senior and Lead Analysts for guidance, development and collaborative investigation. You will use platforms such as Microsoft Sentinel, Google SecOps, Defender XDR, CrowdStrike Falcon, SentinelOne and Cortex XSOAR/XSIAM to understand what has happened, how activity progressed and what actions need … read and interpret logs from multiple sources. Awareness of MITRE ATT&CK and differentiating legitimate admin activity vs suspicious behaviour. Experience with Microsoft Sentinel, Google SecOps or other SIEM platforms. Experience with Defender, CrowdStrike, SentinelOne or other XDR solutions. Ability to query in KQL, CQL, S1QL, XQL or similar languages. ...

adoption programmes. Support pre-sales activities, workshops, proof of concepts, and executive presentations. Technology & Innovation Microsoft Azure Microsoft 365 Security Microsoft Defender Suite Microsoft Sentinel Microsoft Entra Microsoft Copilot for Security Microsoft Purview AWS Security Google Cloud Security Wiz Platform Emerging AI security platforms Evaluate and introduce new technologiesand services … Private Access) Microsoft 365 Defender (Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps) Microsoft Defender for Cloud Microsoft Sentinel Microsoft Copilot for Security Microsoft Intune AWS Security Services Google Cloud Platform Security Zero Trust Architectures DevSecOps CNAP platforms (like Wiz and Palo Alto) Secure ...

threat models. Advise on and implement security program strategy, including risk frameworks, maturity assessments, and roadmap development. Support SaaS security platform implementations (CrowdStrike, Sentinel, Splunk, Chronicle, and similar). Apply foundational networking principles and cloud security best practices across AWS, Azure, and GCP environments. Stay current on AI-driven security … hunting, SOC operations, MDR. Working knowledge of security program development, cyber risk frameworks, and compliance landscapes. Experience with major security platforms (CrowdStrike, Splunk, Microsoft Sentinel, Palo Alto, Chronicle, or similar). Strong understanding of networking fundamentals (TCP/IP, DNS, firewall architecture, segmentation) and cloud infrastructure security. Proven track record ...

driven and endpoint-focused security architecture for user-facing environments Data protection and compliance capabilities through Microsoft Purview Modern SOC enablement leveraging Defender and Sentinel telemetry alongside broader tooling The secure adoption of Microsoft Copilot and AI/LLM-driven capabilities, ensuring appropriate governance, data protection and access controls What … Entra ID (P2), including Conditional Access, MFA and Privileged Identity Management (PIM) Support the modernisation of Colt’s SOC operating model, leveraging Defender and Sentinel for user and endpoint telemetry, alongside integration of broader infrastructure data sources Conduct security architecture reviews and provide assurance for solutions leveraging Microsoft security technologies ...

colleagues across the Club, promoting practical security behaviours and helping teams understand and manage information security risks. Work with Microsoft security technologies, including Defender, Sentinel, Entra ID, Intune and Purview, supporting monitoring, investigation, configuration review and control improvement activity. Support supplier and third‐party security assurance activities, including security questionnaires … role. Experience of investigating security alerts, vulnerabilities, incidents or control weaknesses in a business environment. Knowledge of Microsoft 365 security technologies, ideally including Defender, Sentinel, Entra ID, Intune and Purview. Understanding of cyber security frameworks and standards such as ISO 27001, Cyber Essentials, PCI DSS and NIST. Experience working with ...

Security or SOC-related security qualification or apprenticeship such as: Cisco Certified CyberOps Associate, or Cyber Technologist L4 Apprenticeship Sentinel, PowerShell, M365, InTune, MS Dynamics, Tenable You will be required to have/go through SC vetting. Role Profile Working within CSOC, this key function supports the group in providing … Static and Dynamic analysis Event Log analysis (preferrable) DNS Investigations and Blocking Privileged Access Management Solutions Familiar with intelligence sources Basic Threat Hunting MS Sentinel MS 365 Tenable Cyro is committed to ensuring that we offer industry leading career opportunities, salary and benefits packages. Join us and you can expect ...

containers and AKS, App Service, Functions, storage, databases and other platform services. Configure security logging and monitoring using Azure Monitor, Log Analytics and Microsoft Sentinel, and integrate relevant Defender XDR telemetry. Implement Microsoft Purview capabilities where required, including information protection, sensitivity labels, data classification, data loss prevention, retention and records … data classification or data loss prevention. Microsoft certifications such as AZ-500, AZ-104, SC-300, SC-400 or SC-100. Experience with Microsoft Sentinel, Defender XDR or Defender for Cloud Apps. Experience implementing security controls through Azure DevOps or GitHub CI/CD pipelines. Knowledge of the Microsoft Cloud ...

customers when incidents require escalation beyond routine monitoring, triage, and response activities. Support customers in maximising the security value of Microsoft Defender, Sentinel, Entra, Azure, and Microsoft 365 capabilities during investigations and recovery activities. Provide consultative advice that links technical threats and vulnerabilities to business risk, helping customers make informed … SIEM platforms for investigation and threat hunting. Experience with Microsoft-aligned security stacks. Practical experience investigating Microsoft security telemetry and incidents across Microsoft Defender, Sentinel, Entra, Azure, and Microsoft 365 environments. Understanding of how MDR and SOC operations support the wider Incident Response lifecycle, from detection and triage through ...

task. Depending on the client environment and engagement, you can expect to work across technologies including: SIEM and security analytics platforms, such as Microsoft Sentinel and Splunk. SOAR and security automation technologies used for enrichment, triage and response orchestration. Endpoint Detection and Response (EDR/XDR) platforms, such as Microsoft … incidents (such as ransomware, account takeovers, or supply chain breaches). Technical Stack: Direct experience working with major SIEM/SOAR tools (e.g., Microsoft Sentinel, Splunk) and EDR/XDR platforms (e.g., Microsoft Defender for Endpoint, CrowdStrike Falcon). Security Frameworks: Solid understanding of MITRE ATT&CK, NIST CSF, NCSC ...

through with minimal supervision. Key responsibilities include: Security Monitoring and Operations - Own the day-to-day security operations across Microsoft security technologies including Microsoft Sentinel, Microsoft Defender, Conditional Access, Entra ID, and related Azure security capabilities, strengthening monitoring, detection, protection, and response. You will help shape what effective monitoring looks … process: Microsoft security technologies, in depth. Microsoft Defender across endpoint, identity, Office 365, and cloud apps, including triage and tuning of Defender alerts. Microsoft Sentinel, including writing and tuning your own KQL queries, analytic rules, and workbooks. Microsoft Entra ID and Conditional Access policy design, testing, and troubleshooting. Microsoft Purview ...

detection engineering, technical investigation and incident response. This is a hands‐on technical role responsible for the architecture, engineering and operational performance of Microsoft Sentinel and the wider security monitoring estate. The role would particularly suit an experienced detection engineering, security operations, red‐team, purple‐team or offensive‐security leader … security monitoring, SIEM engineering, detection engineering and incident response within a complex enterprise environment. A strong record of designing, building, operating and evolving Microsoft Sentinel as a production security monitoring and response capability. Deep expertise in KQL and the engineering of analytics rules, hunting queries, workbooks and threat‐informed detection ...

detection engineering, technical investigation and incident response. This is a hands‐on technical role responsible for the architecture, engineering and operational performance of Microsoft Sentinel and the wider security monitoring estate. The role would particularly suit an experienced detection engineering, security operations, red‐team, purple‐team or offensive‐security leader … security monitoring, SIEM engineering, detection engineering and incident response within a complex enterprise environment. A strong record of designing, building, operating and evolving Microsoft Sentinel as a production security monitoring and response capability. Deep expertise in KQL and the engineering of analytics rules, hunting queries, workbooks and threat‐informed detection ...