26 to 50 of 58 Azure Sentinel Jobs in England

analytic techniques for incident detection Collaborate with an MSP SOC to maintain and tune the detection catalogue Build automated reporting dashboards using Microsoft Sentinel workbooks Support security initiatives including ISO 27001 activities and KQL-based tasks Ensure monitoring coverage across cloud platforms, SaaS apps, and internal systems Contribute … Experience: Previously worked as a Threat Detection Engineer or in a similar role. Strong proficiency in KQL and hands-on experience with Microsoft Sentinel Familiarity with Microsoft Defender tools (Endpoint & O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ...

analytic techniques for incident detection Collaborate with an MSP SOC to maintain and tune the detection catalogue Build automated reporting dashboards using Microsoft Sentinel workbooks Support security initiatives including ISO 27001 activities and KQL-based tasks Ensure monitoring coverage across cloud platforms, SaaS apps, and internal systems Contribute … Experience: Previously worked as a Threat Detection Engineer or in a similar role. Strong proficiency in KQL and hands-on experience with Microsoft Sentinel Familiarity with Microsoft Defender tools (Endpoint & O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ...

/MAM, and Conditional Access Required Skills/Experience: - EDR - platform management, EDR policy configuration, and SIEM tuning - Microsoft Security: Defender (ATP), Azure Security Centre, Entra ID, Intune, Conditional Access - Identity and Access Management: CyberArk, Entra ID, SSO, MFA, and PAM solutions - SIEM tooling: Sentinel, Exabeam ...

implementation and ongoing support. The organisation is investing heavily in its security capabilities and Microsoft technology estate, with several key initiatives planned across Azure and Microsoft 365. The successful candidate will play a pivotal role in helping shape and deliver these programmes while supporting the wider security function. … optimisation, supporting MDM and MAM capabilities. Microsoft Purview and Data Loss Prevention (DLP) implementation and enhancement. Ongoing development of Microsoft 365 and Azure security controls. Improvements to monitoring, detection and response capabilities across the security estate. What We're Looking For We're interested in speaking with candidates ...

dedicated Security Operations Centre (SOC) to support the defence of a major UK CNI organisation. The networks protected are predominantly hosted in Azure and AWS cloud platforms, with many hundred systems within these environments that must be protected. The customer is committed to development of this improved … groups or targeted ransomware attacks). Understand TCP/IP component layers to identify normal and abnormal traffic Understanding of AWS &/or Azure cloud services Experience of Splunk (with ES) &/or Sentinel, content development experience desirable Non-technical Client side consulting, including stakeholder engagement ...

dedicated Security Operations Centre (SOC) to support the defence of a major UK CNI organisation. The networks protected are predominantly hosted in Azure and AWS cloud platforms, with many hundred systems within these environments that must be protected. The customer is committed to development of this improved … groups or targeted ransomware attacks). Understand TCP/IP component layers to identify normal and abnormal traffic Understanding of AWS &/or Azure cloud services Experience of Splunk (with ES) &/or Sentinel, content development experience desirable Non-technical Client side consulting, including stakeholder engagement ...

Cyber Security Specialist/Cyber Security Engineer - CISSP, CEH, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bons +Benefits Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team … cybersecurity posture from an infrastructure perspective and external security rating. Identify, assess and remediate vulnerabilities across hardware, software and infrastructure (Windows Server and Azure Cloud). Monitor emerging threats and lead or support Incident Response investigations and mitigation. Evaluate, test and recommend security enhancements, controls and threat prevention ...

Cyber Security Specialist/Cyber Security Engineer - CISSP, CEH, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bons +Benefits Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team … cybersecurity posture from an infrastructure perspective and external security rating. Identify, assess and remediate vulnerabilities across hardware, software and infrastructure (Windows Server and Azure Cloud). Monitor emerging threats and lead or support Incident Response investigations and mitigation. Evaluate, test and recommend security enhancements, controls and threat prevention ...

processes - enrichment, ticketing, containment - using Python, Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius of an incident Run hypothesis-led threat hunts, not just reactive … equivalent) Practical scripting/automation experience (Python, Logic Apps, REST APIs) or hands-on SOAR platform configuration Working knowledge of several of: Microsoft Sentinel, Defender XDR, CrowdStrike, Microsoft Entra ID/Azure AD, Microsoft 365, AWS security tooling Experience investigating identity and cloud-based compromise, including ...

point of escalation/subject matter expert for other members of the team. Providing support to forces for the configuration of Sentinel and log sources. Co-ordination of the testing, implementation and configuration of new data sources. Contribute towards the management of SIEM content such as detections. Line … Broad cyber security awareness and practical experience. Desirable Relevant cloud certification or equal experience. Previous public sector experience. Experience with Microsoft Power Platform, Azure DevOps, Microsoft Sentinel (or other SIEM's). Experience working with code repositories and CI/CD. Why Join us? Balance ...

against Windows, macOS, and Linux platforms. Awareness of anti-virus, anti-malware, and endpoint protection concepts. Familiarity with SIEM concepts (Cortex XSIAM, Microsoft Sentinel, or equivalent). Familiarity with cloud services (Microsoft Azure, Microsoft 365, AWS). Awareness of incident management processes. Understanding of adversary motivations ...

Model evaluation AI governance and safety Experience with multiple AI providers is desirable. Cloud & Platform Engineering Experience with cloud-native development, such as Azure or AWS, including: Storage services Authentication and identity Queues or messaging Serverless or container-based workloads Monitoring and observability Secure application development API & Integration … emulation, or penetration testing is beneficial but not required. Desirable Experience Experience with one or more of the following is beneficial: Splunk Microsoft Sentinel CrowdStrike Microsoft Defender ServiceNow SOAR platforms MITRE ATT&CK Detection Engineering Security Operations (SOC) Nice to Have Experience building AI platforms rather than standalone ...

POINTS * £50,000 - £55,000 salary * 9-month fixed-term contract * Hybrid working with UK and occasional EU site travel * Microsoft 365, Azure, Entra ID, Intune, Autopilot, Sentinel & Defender * Lead technical integrations following business acquisitions ABOUT THE CLIENT We're working with a growing technology … networks, identity and security environments before designing practical integration plans. A major part of the role will involve Microsoft technologies including Microsoft 365, Azure, Entra ID, Intune, Autopilot, Sentinel and Defender for Endpoint. You'll also lead system rationalisation, identify duplication and technical gaps, and work ...

Exchange Messaging SME – Exchange, Active Directory & Microsoft Sentinel Job Summary We are looking for an experienced Exchange/Messaging/SME with strong expertise in Microsoft Exchange, Active Directory (AD), and Microsoft Sentinel. The successful candidate will be responsible for supporting, maintaining, troubleshooting, securing, and improving enterprise Microsoft … domain controller issues. Support Active Directory migrations, upgrades, and domain consolidations. Implement security best practices, including privileged access management and least privilege. Microsoft Sentinel Deploy, configure, and manage Microsoft Sentinel. Develop and maintain analytics rules, KQL queries, workbooks, and automation. Investigate security incidents and suspicious activity. Integrate Microsoft ...

background in Cyber Security, Identity & Access Management (IAM), an MSP, MSSP or security consultancy. Desirable Experience Microsoft Defender for Identity. Microsoft Graph API. Azure Automation. Identity Governance. Microsoft Sentinel or Purview. BloodHound, PingCastle or similar identity assessment tools. Microsoft certifications such ...

technologies and infrastructure monitoring Experience working within a structured IT Service Management environment Experience with network, server and endpoint security, including Microsoft Defender, Sentinel and Sophos XDR Active Directory, Group Policy, Intune/SCCM and PowerShell scripting Experience managing Azure, Hyper-V, VLANs, virtual machines … solutions Experience with backup, replication, disaster recovery and business continuity, including Veeam and Azure Backup Experience with server and patch management Experience managing network infrastructure, including FortiGate firewalls and SolarWinds monitoring Microsoft certification (e.g. MCSA) desirable Strong communication and interpersonal skills, with a customer-focused approach Ability ...

cyber security posture . Monitor, investigate, and respond to security threats and vulnerabilities . Administer Identity and Access Management (IAM) across Microsoft , Microsoft Azure , Amazon Web Services (AWS) , and Software as a Service (SaaS) platforms. Implement and maintain Microsoft Defender , Microsoft Sentinel , Microsoft Purview , and other … Requirements 4+ years' experience in a cyber security or information security role. Strong technical expertise in Microsoft Entra ID , Microsoft Defender Suite , Microsoft Sentinel , and Microsoft Purview . Proven experience managing vulnerability scanning and penetration testing programmes. Experience supporting ISO 27001 compliance and coordinating Cyber Essentials and Cyber ...

improving vulnerability tooling and providing security advice to operational and project teams. You will work across technologies including Windows, Linux, mainframe, AWS and Azure, while collaborating with infrastructure teams, security colleagues, suppliers and wider stakeholders. Responsibilities Design, implement and improve technical security systems and controls across HMLR … skills Strong experience designing and implementing technical security systems and controls. Advanced knowledge of at least three security technologies, such as SIEM, Defender, Sentinel, EDR/XDR, Active Directory, Nessus, PAM, AWS IAM or Entra. Extensive knowledge of security controls across Windows, Linux, mainframe, AWS or Azure ...

security operations roles. Hands-on SIEM engineering and detection tuning experience. Proven ownership of complex incident response and investigations. Cloud security experience across Azure and AWS. Experience automating SOC workflows and response processes. Threat hunting experience beyond basic log review. Comfortable engaging directly with technical stakeholders. Able … prioritise and operate effectively under pressure. Useful but not essential Microsoft Sentinel experience. Container or Kubernetes environments. CI/CD security tooling exposure. Red or purple team experience. Why this opportunity Senior ownership and autonomy. Modern cloud-first environment. Strong investment in tooling and automation. Opportunity to genuinely ...

Running workshops, coverage assessments and use case catalogues as customer deliverables What we're looking for Hands-on SIEM engineering experience, ideally Microsoft Sentinel Confident KQL — this is the core of the role SOAR playbook design in Azure Logic Apps, Cortex XSOAR or similar Scripting … Python or PowerShell, and comfort working with APIs Use case design against MITRE ATT&CK Working knowledge of XDR/EDR platforms and Azure telemetry sources Some exposure to NDR tooling such as Vectra AI or Corelight is a bonus Consultancy or customer-facing experience is valuable ...

protocols including OAuth 2.0, OpenID Connect, SAML and Kerberos. Experience designing passwordless and phishing-resistant authentication solutions. Strong understanding of Microsoft 365 and Azure security architecture. Experience designing identity controls as part of a Zero Trust security architecture . Ability to assess identity security posture and translate findings … certificates and workload credentials, reducing reliance on long-lived credentials. Ensure identity services integrate effectively with the wider Microsoft security ecosystem, including Defender, Sentinel, Intune, Purview and Azure security services. Conduct identity assessments, identify security and operational improvements, and mitigate risks related to privileged access, credential ...

Engineer ready to step into an architecture role. You'll ideally have experience with: Enterprise Security Architecture SIEM SOAR EDR Microsoft Security Microsoft Sentinel Microsoft Defender SentinelOne Cloud Security Azure Detection Engineering Security Automation Security Governance API integrations Security Platform Design Experience with other leading enterprise ...

join its security operations team. You’ll work primarily within Microsoft’s Unified Security Operations Platform, including Microsoft Defender XDR and Microsoft Sentinel, helping manage incidents, support junior analysts and strengthen security operations for a range of clients. Key responsibilities Monitor priority incidents and ensure SLAs … Support incident response, client communications and incident bridges Maintain runbooks, internal documentation and the KQL library Tune detections and manage improvement requests through Azure DevOps What we’re looking for Strong experience in a security operations or analytical role Hands-on expertise with Microsoft Defender and Microsoft Sentinel ...

experience within an MSP environment. Heavy server experience, with strong Windows Server and Hyper-V knowledge. Solid Microsoft 365 administration experience (Exchange Online, Azure, SharePoint). Strong networking knowledge - firewalls, routing, VPNs, DNS, IP, topology. Experience with WatchGuard and/or Draytek firewalls highly advantageous. Exposure to SentinelOne … date - please reach out to gianluca (at) circle recruitment (dot) com for a confidential chat. Windows Server, Microsoft, Office 365, Azure, IT Support, It infrastructure, service desk, MSP, IT Managed Services, 2nd line, 3rd line, huddersfield, Bradford, Wakefield, mirfield, Yorkshire Circle Recruitment is acting as an Employment Agency ...

Security Architect Microsoft, SIEM, SOAR, EDR, Cloud Security, Azure, Detection Engineering, Threat Hunting, Security Automation, SOC, APIs, Data Models, Integrations, Microsoft, CrowdStrike, SentinelOne, Palo Alto, Azure, Hybrid (London 3d/w then less) This is an exceptional permanent Security Architect opportunity to join a leading tech … architecture and defensive engineering practices Strong stakeholder communication across technical and non-technical teams Desirable skills as Security Architect InfoSec certs Architecture certifications Azure or similar cloud platform experience Certifications relating to SIEM, SOAR, EDR, Microsoft, CrowdStrike, SentinelOne or Palo Alto CI/CD, infrastructure as code, containers ...