1 to 25 of 33 Remote/Hybrid Azure Sentinel Jobs in London

Azure Platform Architect Location: UK Working Pattern: Hybrid/Client-facing Security Clearance: UK Government Security Clearance required We’re looking for an experienced Azure Platform Architect to join a growing cloud and infrastructure practice, taking a leading role in the design and delivery of secure … scalable Azure platforms for enterprise and public-sector customers. This is a hands-on architecture position with significant client exposure. You’ll combine deep Azure platform expertise with strong consulting and leadership skills, helping organisations shape their cloud strategy, modernise infrastructure and deliver large-scale transformation ...

technical teams to understand the customer's vision, challenges, and requirements, and to propose innovative and scalable solutions that leverage Microsoft 365, Azure, and Power Platform capabilities. You will also oversee the implementation and adoption of the solutions, ensuring that they align with the customer's business objectives … architecture for the customer, based on best practices and industry standards. Design and architect modern workplace solutions that leverage Microsoft 365, W365, Azure AVD, and Power Platform features and services, such as Microsoft Teams, SharePoint, OneDrive, exchange, Intune, Azure AD, Azure Sentinel ...

technical teams to understand the customer's vision, challenges, and requirements, and to propose innovative and scalable solutions that leverage Microsoft 365, Azure, and AI capabilities. You will also oversee the implementation and adoption of the solutions, ensuring that they align with the customer's business objectives, security … architecture for the customer, based on best practices and industry standards. Design and architect modern workplace solutions that leverage Microsoft 365, W365, and Azure with features and services, such as Microsoft Teams, SharePoint, OneDrive, Exchange, Intune, Entra ID, Azure Sentinel, Power Apps, Power Automate ...

Define cloud architecture patterns and engineering standards to support enterprise cloud adoption. Design and implement container platforms using Google Kubernetes Engine (GKE) and Azure Kubernetes Service (AKS).Define and enforce cloud governance frameworks covering identity, access management, networking, security and compliance. Design reusable and modular Infrastructure as Code … teams. Ability to provide thought leadership around cloud innovation and best practice. If you are an experienced Cloud Platform Architect with strong GCP, Azure, Kubernetes and Terraform expertise and would like to find out more, please apply with your most up to date CV.Senior Cloud Platform Architect, Cloud ...

implement, and support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling. Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities. Develop automated controls and workflows to enhance governance, compliance, and incident response processes. Skills and Experience Essential … using services such as IAM, Security Hub, GuardDuty, CloudTrail, Config, AWS Organizations, Route 53, and Key Management Service (KMS). Microsoft 365 and Azure Security: Strong experience with Microsoft security technologies including Microsoft Defender XDR, Microsoft Sentinel, Microsoft Purview, Intune, Entra ID, Azure Security ...

custom log parsing. Solid understanding of networking concepts (TCP/IP, firewalls, proxies, VPNs) and security protocols. Familiarity with cloud security principles, Azure, GCP, AWS Working knowledge over a range of operating systems and platforms including: Windows Server, Windows XP, UNIX (Solaris, Linux), Working knowledge of networks … industry certifications (e.g., AZ-500, SC-200, SC-900, CompTIA Security+) or similar Cert with Security Orchestration, Automation, and Response (SOAR) playbooks within Sentinel or other platforms. Scripting skills (PowerShell, Python) for automation and data manipulation. What Mizuho Can Offer You Here at Mizuho, there are fantastic progression ...

MERITUS are recruiting for an Infrastructure & Cloud Engineer to join a large Technology Consultancy, supporting secure hybrid infrastructure and Microsoft Azure environments across UK Government customers. INFRASTRUCTURE & CLOUD ENGINEER - Up to £65,000 - REMOTE (UK) - ACTIVE SC CLEARANCE REQUIRED We're looking for an experienced Infrastructure & Cloud Engineer … with a strong Microsoft background to support and improve enterprise infrastructure across on-premise and Azure environments. This is a hands-on role offering the opportunity to work with modern cloud technologies, automation tools and Microsoft 365 services while supporting business-critical systems within a secure environment. Responsibilities ...

Security Architecture Frameworks Familiarity with: NCSC Cloud Security Principles ISO 27001 NIST Cybersecurity Framework CIS Controls OWASP Technical Experience Cloud Platforms AWS Microsoft Azure Google Cloud Platform (GCP) Security Technologies Microsoft Defender Suite Splunk Microsoft Sentinel CrowdStrike Prisma Cloud Wiz Lacework Tenable Qualys Infrastructure & DevOps Kubernetes … Tooling Scripting & Automation Python PowerShell Bash Preferred Certifications CISSP (Certified Information Systems Security Professional) CCSP (Certified Cloud Security Professional) SABSA TOGAF Microsoft Certified: Azure Security Engineer Associate Google Professional Cloud Security Engineer CRISC CISM Reasonable Adjustments: Respect and equality are core values to us. We are proud ...

Managers while acting as the lead security voice with customers. Technical credibility across the Microsoft security ecosystem, including Defender, Entra ID, Microsoft 365, Azure, Sentinel, and Purview, alongside broader cyber security domains. Excellent communication and presentation skills, with the ability to engage senior stakeholders, deliver compelling ...

Required3+ years of experience in Security Operations, Detection Engineering or Security Engineering. Hands-on experience with enterprise SIEM platforms such as Splunk, Microsoft Sentinel, Elastic, Chronicle or QRadar. Experience building and tuning detection rules. Experience developing SOAR playbooks or security automation. Strong scripting skills using Python, PowerShell … similar languages. Experience working within cloud environments (AWS preferred; Azure or GCP experience also valued). Solid understanding of the MITRE ATT&CK framework. Experience supporting security incident response. Comfortable working with Git, APIs and engineering workflows. Excellent communication skills with both Security and Engineering teams. PreferredExperience with ...

exception and risk acceptance process: assess compensating controls, document residual risk, and obtain formal sign-off. Integrate VM tooling with SIEM (Splunk, Microsoft Sentinel), ITSM (ServiceNow VR module), and CMDB for automated ticket creation and asset correlation. Automate vulnerability reporting and remediation tracking using Python, REST APIs (Qualys … Automation and API integration: Python scripting, REST API calls to Qualys/Tenable/Rapid7; ServiceNow VR module configuration. SIEM integration: Splunk, Microsoft Sentinel – correlating vulnerability data with threat events. CMDB-driven asset correlation: ServiceNow CMDB, ensuring VM data reflects accurate asset inventory. Network and infrastructure knowledge sufficient ...

role was designed to take you beyond engineering? You'll join a growing cybersecurity consultancy where you can get hands-on with complex Azure security, identity, PIM and PAM work while sitting directly within the Architecture team. That means challenging projects now, exposure to experienced architects … stability and opportunities of a much larger group. The Opportunity This is a hands-on role with a strong focus on Microsoft Azure, Entra ID, PIM and PAM. You'll secure Azure environments across identity, governance, networking, workload protection and monitoring, working with technologies including Azure ...

Doing You'll take technical ownership across a broad security landscape, including: Designing and implementing security architecture across Microsoft 365, Azure, Entra ID, Defender XDR, Sentinel and Purview Building modern security controls around Zero Trust, secure-by-design and automation Leading architecture reviews and threat modelling … external SOC partners Strengthening vulnerability and exposure management using threat intelligence, exploitability and business risk Automating security processes using Python, PowerShell, Logic Apps, Azure Functions and APIs Supporting technical controls and evidence for ISO 27001 and Cyber Essentials Plus Acting as a senior security SME and helping technology ...

Develop and maintain incident response procedures, playbooks and documentation aligned to industry best practice. Detection Engineering & Security AutomationConfigure, optimise and continuously improve Microsoft Sentinel and Microsoft Defender technologies. Develop and tune detection logic using KQL to identify emerging threats and attacker behaviours. Build and maintain automated SOAR workflows … environments. Maintain high-quality technical documentation for detections, automations and operational workflows. Cloud Security & Secure-by-DesignSupport secure configuration and operational security across Azure and associated cloud services. Collaborate with infrastructure and engineering teams to embed secure-by-design principles. Evaluate configuration changes and ensure alignment with security ...

traditional Active Directory services towards a cloud-first Entra ID architecture Design and manage hybrid identity solutions across Active Directory, Entra ID and Azure Implement and enhance SSO, Conditional Access, MFA and passwordless authentication capabilities Drive identity governance initiatives including RBAC, PIM, access reviews and entitlement management Lead … level presentations Support the retirement of legacy authentication methods and infrastructure services Automate IAM and infrastructure processes using PowerShell, Microsoft Graph API and Azure tooling Provide technical leadership across identity-related projects and mentor colleagues where required Required Experience 5+ years' experience in Identity & Access Management, Infrastructure Engineering ...

structure detections, gaps analysis, and defensive improvements. Experience with security operations in cloud platforms and common tools (e.g., Microsoft Defender, Sentinel, Splunk, CrowdStrike, Palo Alto, AWS/Azure security services) and integrating telemetry across environments. Calm under pressure, able to lead effectively during incidents and make ...

structure detections, gaps analysis, and defensive improvements. Experience with security operations in cloud platforms and common tools (e.g., Microsoft Defender, Sentinel, Splunk, CrowdStrike, Palo Alto, AWS/Azure security services) and integrating telemetry across environments. Calm under pressure , able to lead effectively during incidents and make ...

modernisation, and AI adoption programmes. Support pre-sales activities, workshops, proof of concepts, and executive presentations. Technology & Innovation Drive capability development across: Microsoft Azure Microsoft 365 Security Microsoft Defender Suite Microsoft Sentinel Microsoft Entra Microsoft Copilot for Security Microsoft Purview AWS Security Google Cloud Security … Access) Microsoft 365 Defender (Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps) Microsoft Defender for Cloud Microsoft Sentinel Microsoft Copilot for Security Microsoft Intune AWS Security Services Google Cloud Platform Security Zero Trust Architectures DevSecOps CNAP platforms (like Wiz and Palo Alto ...

vulnerability triage workflows that score real risk by exploitability, reachability, and compensating controls rather than raw CVSS. Harden and secure our cloud environment (Azure), partnering with platform engineering on secure configuration, reviewing and remediating vulnerabilities, identity and network controls, posture management, and logging and detection. Strengthen endpoint … control landscape: cloud security, supply‐chain and vulnerability management, endpoint and identity, and detection and response. Are genuinely technical: comfortable in cloud environments (Azure preferred), CI/CD, and at least one scripting language (e.g. Python, Bash, PowerShell), so your controls hold up in engineering reality. Lead with ...

outputsCreate novel analytic techniques for incident detectionCollaborate with an MSP SOC to maintain and tune the detection catalogueBuild automated reporting dashboards using Microsoft Sentinel workbooksSupport security initiatives including ISO 27001 activities and KQL-based tasksEnsure monitoring coverage across cloud platforms, SaaS apps, and internal systemsContribute to documentation … similar role. Strong proficiency in KQL and hands-on experience with Microsoft SentinelFamiliarity with Microsoft Defender tools (Endpoint & O365)Exposure to Azure cloud logging and Kubernetes environmentsKnowledge of attacker TTPs and MITRE ATT&CK frameworksProactive, collaborative, and innovative mindsetDesirable/Nice-to-Have: Experience with Python, Terraform ...

based insurer, hybrid working, up to £90k base + bonus & benefits package What you'll be doing: Designing, deploying and maintaining secure, scalable Azure infrastructure, using Infrastructure as Code (Terraform, Bicep or ARM) Enabling CI/CD and release automation through Azure DevOps, supporting Development teams … with cloud-native hosting, APIs and containerised workloads Partnering with Data teams on cloud ingestion, storage, analytics and BI infrastructure, including Azure Fabric and/or Databricks Building automation with PowerShell/Python to cut manual operational overhead Implementing monitoring, logging, backup, DR and resilience practices Embedding security ...

troubleshooting and problem-solving skills. Preferred Skills CyberArk Defender or Sentry certification . Experience with CyberArk Conjur/Secrets Management . Experience with Azure or AWS . Experience with Splunk, Microsoft Sentinel, or other SIEM tools . Experience with PowerShell, Python, or REST APIs . Experience ...

implementation and ongoing support. The organisation is investing heavily in its security capabilities and Microsoft technology estate, with several key initiatives planned across Azure and Microsoft 365. The successful candidate will play a pivotal role in helping shape and deliver these programmes while supporting the wider security function. … optimisation, supporting MDM and MAM capabilities. Microsoft Purview and Data Loss Prevention (DLP) implementation and enhancement. Ongoing development of Microsoft 365 and Azure security controls. Improvements to monitoring, detection and response capabilities across the security estate. What We're Looking For We're interested in speaking with candidates ...

implementation and ongoing support. The organisation is investing heavily in its security capabilities and Microsoft technology estate, with several key initiatives planned across Azure and Microsoft 365. The successful candidate will play a pivotal role in helping shape and deliver these programmes while supporting the wider security function. … optimisation, supporting MDM and MAM capabilities. Microsoft Purview and Data Loss Prevention (DLP) implementation and enhancement. Ongoing development of Microsoft 365 and Azure security controls. Improvements to monitoring, detection and response capabilities across the security estate. What We're Looking For We're interested in speaking with candidates ...

Previously worked as a Threat Detection Engineer or in a similar role. Must have strong expertise in KQL.Hands-on experience with Microsoft Sentinel and Defender (Endpoint, Office 365).Familiarity with Microsoft Entra ID, including Identity Governance. Experience with Microsoft Purview, particularly DLP and data protection tools. Exposure … cloud-native logging in Azure and Kubernetes environments. Understanding of "detection as code" or "everything as code" approaches, including CI/CD pipelines. Experience working with or alongside MSP SOC teams. Awareness of Agile methodologies and ways of working. Knowledge of attacker TTPs, threat modelling, and cyber security ...