26 to 50 of 163 Azure Sentinel Jobs in England

Leap29 is recruiting a Senior Microsoft Security Engineer to join a security engineering function across enterprise Azure environments. You will design, implement and optimise Microsoft security technologies including Microsoft Sentinel, Defender XDR and Microsoft Purview, delivering scalable security solutions and improving detection coverage. The role requires … hands-on experience with Sentinel analytics using KQL, Defender XDR capabilities, Azure security controls and IAM with Entra ID. #J-18808-Ljbffr ...

technical teams to understand the customer's vision, challenges, and requirements, and to propose innovative and scalable solutions that leverage Microsoft 365, Azure, and AI capabilities. You will also oversee the implementation and adoption of the solutions, ensuring that they align with the customer's business objectives, security … architecture for the customer, based on best practices and industry standards. Design and architect modern workplace solutions that leverage Microsoft 365, W365, and Azure with features and services, such as Microsoft Teams, SharePoint, OneDrive, Exchange, Intune, Entra ID, Azure Sentinel, Power Apps, Power Automate ...

protection, risk and responsible AI stakeholders. * Design secure architectures for Microsoft 365 Copilot, Copilot Studio, AI agents, custom AI applications, retrieval-augmented generation, Azure AI services, third-party models and Model Context Protocol integrations. * Own the technical security control catalogue and map control objectives to architecture patterns, technology … security engineering roles. * Demonstrable experience designing and implementing security controls in a complex Microsoft-centric environment, including Microsoft 365, Entra ID, Defender XDR, Sentinel, Azure and Microsoft Purview. * Practical experience securing generative AI, AI agents, data-driven applications or comparable emerging technologies, with a strong understanding ...

role. You will need: Strong experience designing and implementing security controls in a Microsoft-centric environment, including Microsoft 365, Entra ID, Defender XDR, Sentinel, Azure and Microsoft Purview. Strong knowledge of identity security, Zero Trust, cloud security, data security, endpoint security, network security, application security … hunting, vulnerability or exposure management and security automation. Ability to automate security and assurance processes using tools such as Python, PowerShell, Logic Apps, Azure Functions, APIs, infrastructure as code or equivalent platforms. Working knowledge of ISO 27001, Cyber Essentials Plus, NIST CSF and recognised AI security or governance ...

customer's security maturity through the TAM Score framework, build and steer a defensible 12-month technical roadmap, and provide the depth of Microsoft Azure Sentinel/Defender XDR expertise needed to advise credibly on priorities. TAMs translate data into narrative - interpreting scores, surfacing the highest ...

willingness to support occasional out-of-hours requirements is also needed. Desirable Experience Experience with any of the following would be useful: Microsoft Azure, Microsoft 365, Entra ID, Defender or Sentinel. SIEM, endpoint detection and response, secure web gateways, email security or privileged access technologies. Security audits ...

Security Engineering & SOC Lead to build and run the controls our Cyber Security Architect designs, and to lead security operations for our Azure-hosted, multi‐tenant SaaS platform: SOC engineering, detection and monitoring, incident response, and managing a team of three analysts. 60% of the role is engineering … putting Azure guardrails, SOC tooling, pipeline security tooling and platform hardening into production. The rest is running the SOC: keeping security observability controls healthy, improving detections, leading response, and developing the three analysts. You are expected to be a senior hands‐on practitioner in the team ...

framework. Define secure architecture patterns across on-premises, hybrid and multi-cloud environments . Apply security principles and CIS Benchmarks across AWS, Azure and GCP environments. Develop enterprise-wide security policies, standards and procedures aligned to CIS Implementation Groups. Work closely with DevOps, Network Engineering and IT Operations … communicate complex security risks clearly to technical and business audiences. Technical Skills Cloud & Infrastructure Security AWS security, including Control Tower and SCPs Azure security, including Azure Policy GCP security and Organisation Policy Service Terraform, Ansible and/or Bicep GitOps and automated security configuration Identity & Access ...

Engineer to lead in the design, implementation, and lifecycle management of enterprise-grade PAM solutions across multi-site and multi-cloud environments (AWS, Azure, GCP). You’ll serve as a technical authority for PAM, shaping standards, delivering sophisticated migrations, and ensure privileged access is secure, auditable … OIDC/OAuth).Automation proficiency (PowerShell, Python, REST APIs) and Infrastructure-as-Code (Terraform/CloudFormation) for repeatable deployments.Experience with SIEM (e.g., Splunk, Sentinel, QRadar) and SOAR integrations for session telemetry, alerts, and response.Proven leadership in defining standards, runbooks, and governance; excellent customer engagement and interpersonal skills.## Additional ...

integration. MITRE ATT&CK and threat-informed detection engineering. XDR/EDR technologies including Microsoft Defender, CrowdStrike, Cortex XDR or SentinelOne. Azure security monitoring and cloud telemetry. Log source onboarding, data normalisation and detection coverage analysis. Threat intelligence integration and enrichment. Customer-facing consultancy or professional services environments. ...

risk assessments, threat modelling, and vulnerability management. Ensure compliance with UK GDPR, data protection regulations, and organisational policies. Cloud & Technology Security Hands-on Azure cloud security experience, including implementation and operation of Microsoft Defender security tools (e.g., Defender for Cloud, Defender for Endpoint, Defender for Identity, Defender … access management (IAM), Privileged Identity Management (PIM) encryption, and network security controls. Design and run SIEM/SOAR use-cases in Microsoft Sentinel (data connectors, analytics rules, workbooks, automation playbooks) to support SOC operations, threat detection, and incident response. Support DevSecOps practices and secure software development. Governance & Awareness ...

Microsoft Platform Engineer (Azure & Microsoft 365) Wembley - Fully On-Site 5 DAYS A WEEK £50,000 per annum + Permanent Benefits We're seeking a Senior Microsoft Platform Engineer to join a growing technology team responsible for maintaining and enhancing a complex hybrid estate spanning on-premises infrastructure … Teams, SharePoint Online, OneDrive and Intune Managing identity and access across Active Directory and Entra ID Designing and supporting hybrid cloud infrastructure across Azure and on-premises environments Implementing and maintaining SSO, MFA and Conditional Access policies Supporting Microsoft 365 security, compliance and governance initiatives Managing hybrid connectivity ...

platform that’s quick, secure and resilient for customers, and easy, modern and sustainable for developers. Our core technology focus is on Microsoft Azure and Google Cloud PlatformWe’re looking for an experienced, motivated and innovative Cloud‐focused DevOps Engineer to join our Google Cloud team. ...

support and guidance, helping customers optimize their security defenses and mitigate risks effectively. Microsoft Focus: Utilize your knowledge of Microsoft security products, including Azure, Microsoft Sentinel, KQL, and the Microsoft Defender suite, to offer tailored recommendations and solutions. Relationship Building: Build and nurture strong relationships with … levels of business and providing informal leadership in cyber security matters. Strong understanding of Microsoft security products and technologies, with proficiency in Azure, Microsoft Sentinel, KQL, and the Microsoft Defender suite or related product lines. Deep understanding of attacker tradecraft and security hardening techniques, enabling ...

effective manner. Specifically you will: Support the rest of the security operations team to monitor, triage and investigate alerts and incidents within Sentinel Conduct initial incident triage, liaising with a 3rd party SOC provider, determining scope, urgency and appropriate actions to mitigate threats. Participate in the incident response … appreciation of how new security solutions can impact delivery. Experience with general security technologies and capabilities including Microsoft E5 technologies such as Azure Sentinel and the various Defender products would be a distinct advantage, as would exposure to automation and familiarity with Python to help streamline ...

/ML concepts and their application to identity and security data. Familiarity with Microsoft security and analytics tools such as Entra ID logs, Azure Monitor, Log Analytics and Sentinel. Exposure to Privileged Access Management (PAM) and role‐based privileged access. Understanding of data governance, responsible AI and information ...

across cloud, identity, endpoint and network platforms, and carry out malware analysis and threat validation. Design, implement and optimise detection content across Microsoft Sentinel, Defender XDR, CrowdStrike and associated platforms, developing advanced KQL queries and analytics rules aligned to MITRE ATT&CK. Act as senior technical owner … security platforms including Microsoft Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune, Darktrace and supporting technologies, managing platform health, onboarding and configuration. Design and maintain automation and orchestration workflows using Logic Apps, Sentinel Playbooks, Power Automate, PowerShell, Python and API integrations to reduce manual operational effort. ...

across cloud, identity, endpoint and network platforms, and carry out malware analysis and threat validation. Design, implement and optimise detection content across Microsoft Sentinel, Defender XDR, CrowdStrike and associated platforms, developing advanced KQL queries and analytics rules aligned to MITRE ATT&CK. Act as senior technical owner … security platforms including Microsoft Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune, Darktrace and supporting technologies, managing platform health, onboarding and configuration. Design and maintain automation and orchestration workflows using Logic Apps, Sentinel Playbooks, Power Automate, PowerShell, Python and API integrations to reduce manual operational effort. ...

across the Club, promoting practical security behaviours and helping teams understand and manage information security risks. Work with Microsoft security technologies, including Defender, Sentinel, Entra ID, Intune and Purview, supporting monitoring, investigation, configuration review and control improvement activity. Support supplier and third‐party security assurance activities, including security … Experience of investigating security alerts, vulnerabilities, incidents or control weaknesses in a business environment. Knowledge of Microsoft 365 security technologies, ideally including Defender, Sentinel, Entra ID, Intune and Purview. Understanding of cyber security frameworks and standards such as ISO 27001, Cyber Essentials, PCI DSS and NIST. Experience working ...

Required3+ years of experience in Security Operations, Detection Engineering or Security Engineering. Hands-on experience with enterprise SIEM platforms such as Splunk, Microsoft Sentinel, Elastic, Chronicle or QRadar. Experience building and tuning detection rules. Experience developing SOAR playbooks or security automation. Strong scripting skills using Python, PowerShell … similar languages. Experience working within cloud environments (AWS preferred; Azure or GCP experience also valued). Solid understanding of the MITRE ATT&CK framework. Experience supporting security incident response. Comfortable working with Git, APIs and engineering workflows. Excellent communication skills with both Security and Engineering teams. PreferredExperience with ...

operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment. While Microsoft technologies (Microsoft 365, Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi layered networking, security, data management … zero-trust security principles to enhance protection across cloud platforms. Manage identity and access management (IAM) in a cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft ...

operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment. While Microsoft technologies (Microsoft 365, Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi layered networking, security, data management … zero‐trust security principles to enhance protection across cloud platforms. Manage identity and access management (IAM) in a cloud‐first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud‐native security solutions such as Microsoft ...

high-risk integrations. Own security initiatives from problem identification and business case through to implementation and validation. Provide technical leadership across Microsoft Sentinel, Defender and wider SecOps , including configuration, tuning, detection engineering and monitoring. Provide oversight across incident response, threat hunting, vulnerability/exposure management and security recovery. … assurance processes. What We're Looking For Hands-on security engineering and architecture experience within a Microsoft-centric environment . Strong Microsoft Sentinel experience, including setup, configuration, tuning, detection and SecOps. Strong knowledge of Microsoft Defender, Entra ID, Azure, Microsoft 365 and related security tooling. Identity ...

This hands‐on engineering role is responsible for the administration and continuous improvement of Microsoft Entra ID, Active Directory, Windows infrastructure, Intune and Azure services. The role will help strengthen identity security, improve operational reliability and support Space NK’s transition towards a cloud-native, Entra ID-centric … least‐privilege access controls. Support identity lifecycle activities, including joiner, mover and leaver processes and access reviews. Administer and troubleshoot Entra Connect, Azure AD Connect and Cloud Sync. Support application onboarding to Entra ID using SAML, OAuth 2.0 and OpenID Connect. Investigate authentication, authorisation and account‐related issues ...

Managers while acting as the lead security voice with customers. Technical credibility across the Microsoft security ecosystem, including Defender, Entra ID, Microsoft 365, Azure, Sentinel, and Purview, alongside broader cyber security domains. Excellent communication and presentation skills, with the ability to engage senior stakeholders, deliver compelling ...