76 to 100 of 163 Azure Sentinel Jobs in England

customer technical relations across security operations. You will quantify maturity via the TAM Score, shape a defensible 12-month roadmap, and provide Azure Sentinel/Defender XDR expertise to guide prioritised improvements. You’ll translate data into narrative, resolve technical queries, and escalate as needed ...

vulnerability triage workflows that score real risk by exploitability, reachability, and compensating controls rather than raw CVSS. Harden and secure our cloud environment (Azure), partnering with platform engineering on secure configuration, reviewing and remediating vulnerabilities, identity and network controls, posture management, and logging and detection. Strengthen endpoint … control landscape: cloud security, supply‐chain and vulnerability management, endpoint and identity, and detection and response. Are genuinely technical: comfortable in cloud environments (Azure preferred), CI/CD, and at least one scripting language (e.g. Python, Bash, PowerShell), so your controls hold up in engineering reality. Lead with ...

Regulations, GDPR and DB Group security requirements. Manage cyber security operations including threat monitoring, incident response, threat intelligence and vulnerability management. Develop Microsoft Sentinel, Microsoft Defender XDR and associated security monitoring capabilities. Provide governance across Azure, AWS, Microsoft 365, Entra ID and Intune environments. Lead information ...

Regulations, GDPR and DB Group security requirements. Manage cyber security operations including threat monitoring, incident response, threat intelligence and vulnerability management. Develop Microsoft Sentinel, Microsoft Defender XDR and associated security monitoring capabilities. Provide governance across Azure, AWS, Microsoft 365, Entra ID and Intune environments. Lead information ...

control improvements, and reporting outputs against agreed engagement milestones. Contribute to solution architecture and pre-sales deal shaping for cloud security, Microsoft Defender, Sentinel, Entra, Defender for Cloud, and exposure management opportunities while building trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales … engagements. Design, implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies. Understand threat modelling, attack paths, cloud misconfigurations, identity risks, vulnerabilities, and how to prioritise remediation based on exploitability and business ...

security engineers (currently 3) Act as the senior escalation point for security incidents and decision-making Work across a modern Microsoft/Azure environment , driving improvements in M365 security and identity Influence how security is delivered across our sites, combining internal and client-facing services … governance Translate regulatory obligations (FCA, PRA, ISO 27001, Lloyd’s) into practical, measurable controls Hands-On Security Engineering Implement and optimise controls across Azure, M365, and infrastructure environments Lead hardening initiatives across IAM, PAM, AD, and network security Drive security automation and DevSecOps practices Lead real-time response ...

designs and implements automated detection and response capabilities that protect G-Research's diverse and complex estate, spanning high-performance compute (HPC) environments, Azure and Windows corporate infrastructure, and public cloud platforms such as AWS.As part of SAE, you'll play a hands-on role building secure, scalable … environments. Key responsibilities of the role include: Design, build and maintain automated detection and response systems across G-Research's hybrid environments (HPC, Azure, AWS).Develop high-quality, well-tested code primarily in Python, following secure engineering best practices. Implement and maintain infrastructure-as-code and CI/ ...

designs and implements automated detection and response capabilities that protect G-Research’s diverse and complex estate, spanning high-performance compute (HPC) environments, Azure and Windows corporate infrastructure, and public cloud platforms such as AWS. As part of SAE, you’ll play a hands-on role building secure … environments. Key responsibilities of the role include: Design, build and maintain automated detection and response systems across G-Research’s hybrid environments (HPC, Azure, AWS). Develop high-quality, well-tested code primarily in Python, following secure engineering best practices. Implement and maintain infrastructure-as-code ...

mixed-vendor environments, including SaaS platforms and hybrid cloud estates. Deep hands-on expertise across the Microsoft security and compliance ecosystem, including Microsoft Sentinel, Defender XDR, Purview, Entra ID and Defender for Cloud, from solution design through to implementation and optimisation. Experience designing, onboarding and maturing SOC capabilities … CISSP, CISM, CISA or CySA+, alongside relevant Microsoft security certifications including SC-100 (Microsoft Cybersecurity Architect), SC-200 (Security Operations Analyst), AZ-500 (Azure Security Engineer) or alternates aligned the CrowdStrike ecosystem, such as, CrowdStrike Certified Falcon Administrator (CCFA), CrowdStrike Certified SIEM Engineer (CCSE), CrowdStrike Certified Identity Specialist ...

based insurer, hybrid working, up to £90k base + bonus & benefits package What you'll be doing: Designing, deploying and maintaining secure, scalable Azure infrastructure, using Infrastructure as Code (Terraform, Bicep or ARM) Enabling CI/CD and release automation through Azure DevOps, supporting Development teams … with cloud-native hosting, APIs and containerised workloads Partnering with Data teams on cloud ingestion, storage, analytics and BI infrastructure, including Azure Fabric and/or Databricks Building automation with PowerShell/Python to cut manual operational overhead Implementing monitoring, logging, backup, DR and resilience practices Embedding security ...

production operations, SRE, or DevOps roles, with at least 3+ years in a people management capacity. Proven experience managing cloud‐native services on Azure and AWS, including: Azure SQL, Cosmos DB, Application Gateway, Key Vault, Storage, DNS, Load Balancer, Virtual Machines, Azure Machine Learning … Sentinel; AWS Lambda, ECS, RDS, CloudWatch. Strong understanding of SRE principles (SLOs, SLIs, error budgets, incident response). Hands‐on experience with container orchestration (Kubernetes, Docker). Proficiency in CI/CD pipelines and infrastructure‐as‐code tools (Terraform, GitHub Actions, Jenkins). Familiarity with observability platforms (Datadog ...

scalability, and performance to meet the growth needs of ME+EM. Investigate and diagnose advanced software, hardware, and network problems, utilising expert knowledge of Azure, Google Cloud and Hyper‐V infrastructure to troubleshoot and identify root causes and implement effective solutions. Collaborate with second‐line engineers, vendors, and other … evaluating their potential impact and recommending innovative solutions to address business needs. Skills IT-related degree or equivalent professional experience CCNA or Microsoft Azure Administrator (AZ-104) certified — essential Experience in a third‐line, cloud, or network infrastructure role Proven experience designing and implementing backup & disaster recovery strategies ...

supporting the wider team. · Lead serious incidents, forensic investigations and root cause analysis. · Develop detections, automation and orchestration; conduct proactive threat hunting. · Engineer Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune and Darktrace. · Support Microsoft 365, Azure, AWS, identity and endpoint security. · Maintain documentation, support compliance … mentor colleagues. Experience and qualifications · Substantial SOC, cyber operations or security engineering experience. · Hands-on Sentinel, Defender XDR and CrowdStrike expertise. · Incident response, malware analysis, forensics and threat hunting. · Advanced KQL; PowerShell and/or Python automation. · Entra ID, Conditional Access, Intune and Microsoft 365 security. · Cloud ...

three. About the team Security Engineering is a team of five covering cloud security, detection, and security operations. They work directly in the Azure estate and are close to the infrastructure, not abstracted behind a policy layer. The team runs Microsoft Sentinel, Defender XDR, and Defender … cloud security, detection tooling, and incident response, without being narrowly specialised. You own meaningful parts of the security stack, contribute hands‐on to Azure cloud hardening, and show up reliably when incidents need investigating or pen test cycles need coordinating. You're energised by visible impact, your work ...

structure detections, gaps analysis, and defensive improvements. Experience with security operations in cloud platforms and common tools (e.g., Microsoft Defender, Sentinel, Splunk, CrowdStrike, Palo Alto, AWS/Azure security services) and integrating telemetry across environments. Calm under pressure, able to lead effectively during incidents and make ...

structure detections, gaps analysis, and defensive improvements. Experience with security operations in cloud platforms and common tools (e.g., Microsoft Defender, Sentinel, Splunk, CrowdStrike, Palo Alto, AWS/Azure security services) and integrating telemetry across environments. Calm under pressure , able to lead effectively during incidents and make ...

cases and monitoring Automate manual detection and remediation processes Develop threat intelligence and threat-hunting capabilities Improve security monitoring across AWS, GCP and Azure Work closely with engineering teams to turn security findings into scalable technical improvements Review existing tooling and influence future technology decisions Provide technical leadership … across the security function What we’re looking for: Experience building detections rather than purely responding to SOC alerts Strong SIEM experience – Microsoft Sentinel, Splunk or similar Cloud security experience across AWS, GCP and/or Azure KQL, SPL or similar querying experience Python scripting/ ...

skills. Desirable Experience * Experience designing an AI adoption strategy for a SOC. * Experience with agentic AI or autonomous security workflows. * Experience with Microsoft Sentinel, Splunk or equivalent SIEM platforms. * Experience with cloud security technologies (Azure, GCP or AWS). * Experience with detection engineering and security ...

into the Global Security Operations Centre. Review and validate detection logic, thresholds, alert conditions and expected behaviours across SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight, Exabeam, and LogRhythm . Ensure accurate mapping of detection content to recognised threat frameworks, including MITRE ATT&CK . Identify detection … teams. Create investigation workflows, triage processes and escalation procedures for security incidents across Microsoft Defender, CrowdStrike, Cortex XDR, SentinelOne, Carbon Black, Azure, AWS, and GCP environments . Define required enrichment data, threat intelligence inputs and decision‐making criteria. Ensure procedures are practical, repeatable and aligned with global security ...

information security, cyber security, security operations or related disciplines. Experience investigating security incidents and managing security alerts. Good understanding of Microsoft 365, Azure/Entra ID and cloud security principles. Experience working with vulnerability management programmes. Knowledge of security frameworks and standards including: ISO/IEC 27001 Cyber … financial services firm or other highly regulated environment. Experience responding to client security questionnaires and audits. Knowledge of Microsoft Security technologies including Defender, Sentinel, Purview and Entra ID. What's In It For You We provide comprehensive support for our colleagues' health and wellbeing, including private medical cover ...

for5+ years of hands-on experience in a Security Operations, SOC, or equivalent operational security rolePractical experience operating modern security tooling SIEM (e.g. Sentinel), Data Loss Prevention (DLP) tools, EDR, and vulnerability management platformsSolid understanding of security operations workflows: alert triage, incident handling, and vulnerability/finding remediation … Python, KQL)Experience coordinating remediation across multiple engineering or platform teams, and keeping work moving to closureWorking knowledge of cloud environments (e.g. AWS, Azure and GCP) and how security operations apply across cloud and SaaSFamiliarity with common frameworks and standards such as PCI DSS, NIST ...

have the opportunity to work on impactful projects across multiple regions and technologies. You'll be; Configuring, maintaining and supporting the Azure estate, including Microsoft Azure cloud services, servers and storage, cloud networking, DNS and email security systems. Administering Entra ID, including Conditional Access, Privileged Identity … Management and hybrid identity components. Designing, deploying and managing cloud‐based infrastructure and services utilising infrastructure‐as‐code, adhering to Azure Policy where configured. Applying security‐first principles in proportion to Jellycat's risk. Ensuring adherence to IT security standards and policies, including patch management, MFA, least‐privilege ...

Cyber Security Analyst – Microsoft Security/IAM 3-Month Contract | Inside IR35 Bristol/Hybrid – Ideally 1-2 days per week onsite Microsoft Sentinel | Entra ID | IAM | Conditional Access | MFA | RBAC We’re looking for an experienced Cyber Security Analyst to join a highly innovative organisation in Bristol … Identity andamp; Access Management within the Microsoft ecosystem , so we’re looking for somebody with strong hands‐on knowledge of Entra ID/Azure AD, Conditional Access, MFA and RBAC , alongside experience working with Microsoft Sentinel . What you’ll be doing Supporting and improving Identity ...

client stakeholders (engineering, security, operations) to validate requirements, manage technical risks, and coordinate delivery plans and change windows. QualificationsRequiredStrong track record delivering production Azure environments, including hands-on experience ofnetworking, IAM, governance, and security controls, ideally through working with external clients Significant hands-on experience implementing and operating … restore, performance, and HA/DR. Strong experience with Infrastructure as Code (Terraform and/or Bicep/ARM) and CI/CD (Azure DevOps, GitHub Actions, GitLab CI or similar). Solid cloud security engineering knowledge: RBAC/IAM, private networking, key/secrets management, encryption, secure ...

implementatie en het beheer van specifieke security-oplossingen. Je bent de kartrekker voor onder andere het opzetten van ons nieuwe SOC, Microsoft Sentinel (SIEM) voor actieve threat detection en het beheren van Microsoft Defender for Cloud voor vulnerability management. Je analyseert en volgt security-incidenten op, en bent … ontmoeten! HBO werk- en denkniveau, aangevuld met security-certificeringen (bijv. AZ-500, SC-200); Diepgaande, specialistische kennis van de Azure security-stack; Hands-on ervaring met Microsoft Sentinel voor het opzetten van detectieregels, incident response (SOAR) en threat hunting; Ervaring met Microsoft Defender for Cloud voor ...