76 to 94 of 94 Permanent Sentinel Jobs

Senior Security Analyst Leeds | Hybrid Working | Microsoft Security | Defender XDR | Sentinel | KQL I'm working with an exciting new client looking to add several experienced Senior Security Analysts to a high-performing SOC team supporting a regulated enterprise environment. This is a genuinely hands-on SOC role where … weekends & bank holidays What you'll be doing Investigating and responding to complex cyber security incidents Threat hunting across Microsoft Defender XDR and Microsoft Sentinel Using KQL to investigate alerts and identify root cause Working closely with Infrastructure, Cloud and Security Engineering teams Running proactive security activities, including vulnerability scanning ...

Management processes Implement identity access control measures and DLP controls Respond to Tier 3 security incidents Monitor threat intelligence Participate in pentests Engineer Microsoft Sentinel detections & SOAR playbooks Senior Cyber Security Engineer: Technical Experience XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure … Microsoft Purview Cloud & Endpoint Security Azure Sentinel The permanent opportunity for a Senior Cyber Security Engineer will be based out of the Birmingham offices on a hybrid basis. This is an opportunity to join an industry leader that has grown year on year. For more information, please apply with ...

Lead the design and implementation of Microsoft security solutions across enterprise environments. Act as a Security Architect across Microsoft E5 technologies, including Purview, Defender, Sentinel and Entra ID. Design security architectures, operating models and technical roadmaps. Advise clients on data protection, compliance, information governance and insider risk. Provide technical leadership … teams to deliver secure-by-design solutions. What We're Looking For Strong experience with Microsoft E5 Security technologies. Expertise across Microsoft Purview, Defender, Sentinel and Entra ID. Experience designing enterprise security architectures. Good understanding of Zero Trust and modern security frameworks. Experience working within consulting or client-facing environments. ...

active investigations, and containment activities across the enterprise estate. SIEM/XDR Engineering: Continually tune and improve analytics rules, alerts, and workbooks within Microsoft Sentinel and Microsoft Defender. Threat Hunting: Conduct proactive threat hunting initiatives using KQL and intelligence-led techniques. Vulnerability Management: Oversee vulnerability scanning, remediation tracking, and control … governance. Incident Support: Lead investigations into potential data spills, policy violations, or insider risk alerts via Microsoft Purview. Tech Environment SIEM/SOAR: Microsoft Sentinel (Analytics rules, playbooks, KQL) XDR: Microsoft Defender (Endpoint, Office 365, Identity, Cloud Apps) Compliance: Microsoft Purview (eDiscovery, DLP, Insider Risk Management) Automation: Logic Apps/ ...

client engagements Provide guidance and support to the delivery team on security incidents and escalations Maintain working relationships with key vendors including Microsoft (Sentinel, Defender) and Tenable Requirements: Proven experience designing and delivering managed security services in an MSP or MSSP environment Strong hands-on expertise across MDR, SIEM (Microsoft … Sentinel preferred), Identity, and endpoint security Experience with vulnerability management tooling — Tenable or equivalent — and understanding of remediation workflows Desirable: Experience with HaloPSA or similar PSA platforms and workflow automation Microsoft Security certifications (SC-200, SC-300, SC-400 or equivalent) Experience with automation scripting and integrating security tooling ...

client engagements Provide guidance and support to the delivery team on security incidents and escalations Maintain working relationships with key vendors including Microsoft (Sentinel, Defender) and Tenable Requirements: Proven experience designing and delivering managed security services in an MSP or MSSP environment Strong hands-on expertise across MDR, SIEM (Microsoft … Sentinel preferred), Identity, and endpoint security Experience with vulnerability management tooling — Tenable or equivalent — and understanding of remediation workflows Desirable: Experience with HaloPSA or similar PSA platforms and workflow automation Microsoft Security certifications (SC-200, SC-300, SC-400 or equivalent) Experience with automation scripting and integrating security tooling ...

join our growing Cyber Security team. This is a hands-on engineering role where youll design and deliver high-quality detections across Microsoft Sentinel and Splunk, helping protect critical systems and clients in real time. If you thrive on turning threat intelligence into actionable detection logicand enjoy working … days from home. You do need to be eligible for SC Clearance. What youll be doing: Develop, test and deploy detection content across Microsoft Sentinel and Splunk SIEM. Write and optimise detection logic using KQL and SPL. Turn monitoring requirements and use cases into effective, actionable detections. Tune alerts ...

Stay current with emerging threats and recommend improvements SOC ENGINEER ESSENTIAL SKILLS Strong understanding of information security fundamentals Experience with SIEM tools such as Sentinel or Splunk Familiarity with security monitoring technologies Analytical mindset with strong problem solving skills Ability to manage multiple priorities and meet deadlines Strong communication … this role, you give consent for your application to be submitted to our client in connection with this vacancy. KEY SKILLS SOC Engineer, SIEM, Sentinel, Splunk, Cyber Security, Security Monitoring, Threat Detection, Azure, AWS, Network Security ...

SHIFT LEAD ESSENTIAL SKILLS Proven experience within a Security Operations Centre Previous line management or team leadership experience Strong hands on experience with Microsoft Sentinel and Splunk Solid understanding of MITRE ATT and threat informed defence Strong networking knowledge including TCP IP, LAN, WAN, SMTP, HTTP, FTP, POP and LDAP … subject to required skills, your application to our client in conjunction with this vacancy only. KEY SKILLS SOC Shift Lead, Security Operations Centre, Microsoft Sentinel, Splunk, MITRE ATT, Incident Response, DV Cleared ...

breadcrumbs - fully integrated with Microsoft Defender XDR (Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps), Microsoft Sentinel, and Microsoft Security Copilot. The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering … Microsoft Defender XDR across endpoint, identity, email, and cloud-app workloads. Integrate all deception signals (honeypot, honeytoken, decoy, breadcrumb) into Defender XDR and Microsoft Sentinel as first-class, high-fidelity detections. Define and enforce a unified detection and response strategy across the Microsoft security stack. Defender for Identity & Identity Deception ...

diverse technologies and real cyber threats. SOC Analyst essential skills Experience working in a Security Operations Centre environment Hands-on experience with Microsoft Sentinel or Splunk Knowledge of the MITRE ATT&CK framework Understanding of networks and systems, including TCP/IP, firewalls, VPNs and endpoint security Strong analytical … submit (subject to required skills) your application to our client in conjunction with this vacancy only. KEY SKILLS: SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, MITRE ATT and CK, Networking, SC Clearance ...

Vault, Entra ID (AAD), and Data Lake with least-privilege access. You'll also work with Azure Policy, Microsoft Defender for Cloud, Microsoft Sentinel, and Kubernetes security features (RBAC, NetworkPolicies, Pod Security Standards, admission controllers). Experience with ACR image scanning (e.g., Defender, Trivy), OPA/Gatekeeper or Kyverno, CodeQL … feature stores; add model artifact signing, provenance, and runtime isolation for training/serving. Monitoring, logging & response : wire platform and security telemetry to Microsoft Sentinel/Defender, define alerts/runbooks, and support incident response and tabletop exercises. CVE & vulnerability management : maintain and publish SBOMs; continuously scan for vulnerabilities; triage ...

security and endpoint management. This includes Windows Active Directory and integration with Microsoft Entra ID, unified security operations with Microsoft Defender XDR and Microsoft Sentinel, and modern endpoint and device management with Microsoft Intune and Microsoft Configuration Manager (SCCM/ConfigMgr), providing practical guidance, design assurance and implementation support where … capability across Microsoft Azure and core Microsoft cloud services Proficiency in security technologies, frameworks, and secure architecture patterns (including Microsoft Defender XDR and Microsoft Sentinel) Strong expertise in Windows Active Directory and hybrid identity integration with Microsoft Entra ID Experience with modern endpoint and device management and configuration management, including ...

documentation. Key Responsibilities Monitoring and Triage Monitor security events and alerts using industry-standard SIEM and incident/event management platforms (e.g., Elastic, Microsoft Sentinel, Splunk). Perform rapid triage to determine alert validity, severity, scope, and potential business or operational impact. Correlate related events and identify patterns across multiple … excellent written communication (clear, structured incident notes and stakeholder updates). Strong foundational knowledge of incident and event management/SIEM platforms (e.g., Elastic, Sentinel, Splunk), including query languages used for investigations and detections such as: Kusto Query Language (KQL) ES|QL Kibana Query Language Strong understanding of attacker tactics ...

than simply follow a process, this is the right environment for you. Core Responsibilities: Security Monitoring & Incident Response Monitor security alerts generated by Microsoft Sentinel, Microsoft Defender, Datadog and Elastic. Assess severity and impact of alerts, triage and investigate incidents independently. Execute containment and remediation actions using defined runbooks … reviews for internal and client use. Maintain accurate incident records in JIRA Service Management. Detection Engineering Develop and implement new detection rules in Microsoft Sentinel aligned to the MITRE ATT&CK framework. Draft and optimise KQL queries for detection and threat hunting. Refine existing detection logic based on false positive ...

point of escalation/subject matter expert for other members of the team. Providing support to forces for the configuration of Sentinel and log sources. Co-ordination of the testing, implementation and configuration of new data sources. Contribute towards the management of SIEM content such as detections. Line Management responsibilities … security awareness and practical experience. Desirable Relevant cloud certification or equal experience. Previous public sector experience. Experience with Microsoft Power Platform, Azure DevOps, Microsoft Sentinel (or other SIEM's). Experience working with code repositories and CI/CD. Why Join us? Balance is important and we want ...

team of Cyber Security Consultants specialized in Microsoft security technologies. These consultants are assigned to customer projects in the field of Microsoft Sentinel, Microsoft Defender, Microsoft Entra, Microsoft Intune, Microsoft Purview, and broader Microsoft security architecture and engineering. You will guide them through their personal career growth, support their technical … leadership and team building skills; Strong understanding of cybersecurity principles, frameworks, and best practices; Hands on experience with Microsoft security technologies such as Microsoft Sentinel, Microsoft Defender XDR, Microsoft Entra, Intune, Purview, and Azure security services; Experience translating customer requirements into technical architectures and implementation roadmaps; Affinity with service development ...

operational risks, escalating issues where required. Technical Skills: Strong hands-on experience of Security Operations tools and capabilities, including SIEM and SOAR platforms (e.g. Sentinel, ServiceNow, Splunk SOAR, Cortex), Endpoint Detection & Response (EDR/XDR), Strong hands-on experience of Threat Intelligence platforms (e.g. Recorded Future, Doppel, ZeroFox, Google Threat … vulnerability management tools and processes Strong awareness of cloud services and supporting security controls and monitoring capabilities Working knowledge of Microsoft security stack (Defender, Sentinel, Purview), Active Directory and Azure AD, Windows and Linux environments. Experience with data loss prevention and insider risk tooling advantageous Hands-on experience with automation ...

document, covering cloud, network, identity, data, and application layers — reviewed and updated bi‐annually. Cloud security policy‐as‐code library (OPA/Rego, Terraform Sentinel, or cloud‐native equivalents) integrated into deployment pipelines. IAM strategy and RBAC model documentation, including privileged access management implementation and zero‐trust roadmap. Data security … microservices, service mesh, serverless, and event‐driven patterns — and their security implications. Experience designing and implementing security guardrails as code (OPA/Rego, Terraform Sentinel, cloud‐native policy engines, Kubernetes admission controllers). Understanding of cryptographic principles and their practical application in payment systems: tokenisation, format‐preserving encryption, HSM/ ...