51 to 75 of 96 Azure Sentinel Jobs in London

MITRE ATT&CK to structure detections, gaps analysis, and defensive improvements.Experience with security operations in cloud platforms and common tools (e.g., Microsoft Defender, Sentinel, Splunk, CrowdStrike, Palo Alto, AWS/Azure security services) and integrating telemetry across environments.Calm under pressure, able to lead effectively during incidents ...

structure detections, gaps analysis, and defensive improvements. Experience with security operations in cloud platforms and common tools (e.g., Microsoft Defender, Sentinel, Splunk, CrowdStrike, Palo Alto, AWS/Azure security services) and integrating telemetry across environments. Calm under pressure, able to lead effectively during incidents and make ...

structure detections, gaps analysis, and defensive improvements. Experience with security operations in cloud platforms and common tools (e.g., Microsoft Defender, Sentinel, Splunk, CrowdStrike, Palo Alto, AWS/Azure security services) and integrating telemetry across environments. Calm under pressure , able to lead effectively during incidents and make ...

vulnerability triage workflows that score real risk by exploitability, reachability, and compensating controls rather than raw CVSS. Harden and secure our cloud environment (Azure), partnering with platform engineering on secure configuration, reviewing and remediating vulnerabilities, identity and network controls, posture management, and logging and detection. Strengthen endpoint … control landscape: cloud security, supply‐chain and vulnerability management, endpoint and identity, and detection and response. Are genuinely technical: comfortable in cloud environments (Azure preferred), CI/CD, and at least one scripting language (e.g. Python, Bash, PowerShell), so your controls hold up in engineering reality. Lead with ...

cases and monitoring Automate manual detection and remediation processes Develop threat intelligence and threat-hunting capabilities Improve security monitoring across AWS, GCP and Azure Work closely with engineering teams to turn security findings into scalable technical improvements Review existing tooling and influence future technology decisions Provide technical leadership … across the security function What we’re looking for: Experience building detections rather than purely responding to SOC alerts Strong SIEM experience – Microsoft Sentinel, Splunk or similar Cloud security experience across AWS, GCP and/or Azure KQL, SPL or similar querying experience Python scripting/ ...

CK. Experience designing remote and local access models including PAM and ZTNA with identity integration. Familiarity with Microsoft cloud security stack including Microsoft Sentinel, Microsoft Entra ID, Microsoft Defender for Cloud and secure connectivity on Azure Advanced certifications such as CISSP, TOGAF or SABSA, Cloud Security ...

CK. Experience designing remote and local access models including PAM and ZTNA with identity integration. Familiarity with Microsoft cloud security stack including Microsoft Sentinel, Microsoft Entra ID, Microsoft Defender for Cloud and secure connectivity on Azure Advanced certifications such as CISSP, TOGAF or SABSA, Cloud Security ...

designs and implements automated detection and response capabilities that protect G-Research’s diverse and complex estate, spanning high-performance compute (HPC) environments, Azure and Windows corporate infrastructure, and public cloud platforms such as AWS.As part of SAE, you’ll play a hands-on role building secure, scalable … computing environments.Key responsibilities of the role include:Design, build and maintain automated detection and response systems across G-Research’s hybrid environments (HPC, Azure, AWS).Develop high-quality, well-tested code primarily in Python, following secure engineering best practices.Implement and maintain infrastructure-as-code and CI/ ...

designs and implements automated detection and response capabilities that protect G-Research's diverse and complex estate, spanning high-performance compute (HPC) environments, Azure and Windows corporate infrastructure, and public cloud platforms such as AWS.As part of SAE, you'll play a hands-on role building secure, scalable … environments. Key responsibilities of the role include: Design, build and maintain automated detection and response systems across G-Research's hybrid environments (HPC, Azure, AWS).Develop high-quality, well-tested code primarily in Python, following secure engineering best practices. Implement and maintain infrastructure-as-code and CI/ ...

outputsCreate novel analytic techniques for incident detectionCollaborate with an MSP SOC to maintain and tune the detection catalogueBuild automated reporting dashboards using Microsoft Sentinel workbooksSupport security initiatives including ISO 27001 activities and KQL-based tasksEnsure monitoring coverage across cloud platforms, SaaS apps, and internal systemsContribute to documentation … similar role.Strong proficiency in KQL and hands-on experience with Microsoft SentinelFamiliarity with Microsoft Defender tools (Endpoint & O365)Exposure to Azure cloud logging and Kubernetes environmentsKnowledge of attacker TTPs and MITRE ATT&CK frameworksProactive, collaborative, and innovative mindsetDesirable/Nice-to-Have:Experience with Python, Terraform ...

adjacent modules), either in a vendor, partner, or customer capacity Experiencewith at least two of the following: SIEM platforms (Splunk,QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Experiencewith enterprise security architectures, including identity infrastructure, cloud environments … Azure, GCP), OT/ICS environments, or hybrid data center Bachelor's degree or equivalent work experience. Bonus points if you have Active CrowdStrike certification(s): CCFA, CCSE, or CrowdStrike Champions Professional/Expert Direct experience with CrowdStrike NG-SIEM: migration delivery, parser development, CQL, orLogScaleadministration Experience delivering ...

information security, cyber security, security operations or related disciplines. Experience investigating security incidents and managing security alerts. Good understanding of Microsoft 365, Azure/Entra ID and cloud security principles. Experience working with vulnerability management programmes. Knowledge of security frameworks and standards including: ISO/IEC 27001 Cyber … financial services firm or other highly regulated environment. Experience responding to client security questionnaires and audits. Knowledge of Microsoft Security technologies including Defender, Sentinel, Purview and Entra ID. What's In It For You We provide comprehensive support for our colleagues' health and wellbeing, including private medical cover ...

adjacent modules), either in a vendor, partner, or customer capacity Experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Experience with enterprise security architectures, including identity infrastructure, cloud … environments (AWS, Azure, GCP), OT/ICS environments, or hybrid data center Bachelor's degree or equivalent work experience.Bonus points if you haveActive CrowdStrike certification(s): CCFA, CCSE, or CrowdStrike Champions Professional/Expert Direct experience with CrowdStrike NG-SIEM: migration delivery, parser development, CQL, or LogScale administration ...

based insurer, hybrid working, up to £90k base + bonus & benefits package What you'll be doing: Designing, deploying and maintaining secure, scalable Azure infrastructure, using Infrastructure as Code (Terraform, Bicep or ARM) Enabling CI/CD and release automation through Azure DevOps, supporting Development teams … with cloud-native hosting, APIs and containerised workloads Partnering with Data teams on cloud ingestion, storage, analytics and BI infrastructure, including Azure Fabric and/or Databricks Building automation with PowerShell/Python to cut manual operational overhead Implementing monitoring, logging, backup, DR and resilience practices Embedding security ...

zero-trust security principles to enhance protection across cloud platforms. Manage identity and access management (IAM) in a cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft … Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Technology:Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge, Microsoft AD (Entra), Server and SQL experience, O365 ...

Cyber Security Specialist/Cyber Security Engineer - CISSP, CEH, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bons +Benefits Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team … cybersecurity posture from an infrastructure perspective and external security rating. Identify, assess and remediate vulnerabilities across hardware, software and infrastructure (Windows Server and Azure Cloud). Monitor emerging threats and lead or support Incident Response investigations and mitigation. Evaluate, test and recommend security enhancements, controls and threat prevention ...

Cyber Security Specialist/Cyber Security Engineer - CISSP, CEH, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bons +Benefits Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team … cybersecurity posture from an infrastructure perspective and external security rating. Identify, assess and remediate vulnerabilities across hardware, software and infrastructure (Windows Server and Azure Cloud). Monitor emerging threats and lead or support Incident Response investigations and mitigation. Evaluate, test and recommend security enhancements, controls and threat prevention ...

implementation and ongoing support. The organisation is investing heavily in its security capabilities and Microsoft technology estate, with several key initiatives planned across Azure and Microsoft 365. The successful candidate will play a pivotal role in helping shape and deliver these programmes while supporting the wider security function. … optimisation, supporting MDM and MAM capabilities. Microsoft Purview and Data Loss Prevention (DLP) implementation and enhancement. Ongoing development of Microsoft 365 and Azure security controls. Improvements to monitoring, detection and response capabilities across the security estate. What We're Looking For We're interested in speaking with candidates ...

implementation and ongoing support. The organisation is investing heavily in its security capabilities and Microsoft technology estate, with several key initiatives planned across Azure and Microsoft 365. The successful candidate will play a pivotal role in helping shape and deliver these programmes while supporting the wider security function. … optimisation, supporting MDM and MAM capabilities. Microsoft Purview and Data Loss Prevention (DLP) implementation and enhancement. Ongoing development of Microsoft 365 and Azure security controls. Improvements to monitoring, detection and response capabilities across the security estate. What We're Looking For We're interested in speaking with candidates ...

Cyber Security Specialist/Cyber Security Engineer - CISSP, CEH, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bons +Benefits Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team … cybersecurity posture from an infrastructure perspective and external security rating. Identify, assess and remediate vulnerabilities across hardware, software and infrastructure (Windows Server and Azure Cloud). Monitor emerging threats and lead or support Incident Response investigations and mitigation. Evaluate, test and recommend security enhancements, controls and threat prevention ...

looking for:Previously worked as a Threat Detection Engineer or in a similar role.Must have strong expertise in KQL.Hands-on experience with Microsoft Sentinel and Defender (Endpoint, Office 365).Familiarity with Microsoft Entra ID, including Identity Governance.Experience with Microsoft Purview, particularly DLP and data protection tools.Exposure to cloud … native logging in Azure and Kubernetes environments.Understanding of “detection as code” or “everything as code” approaches, including CI/CD pipelines.Experience working with or alongside MSP SOC teams.Awareness of Agile methodologies and ways of working.Knowledge of attacker TTPs, threat modelling, and cyber security frameworks.Understanding of statistics, data science ...

guidance and technical authority across security operations and incident response activities. Have proven experience working with SIEM and EDR technologies such as Microsoft Sentinel, Splunk, Microsoft Defender and Trend Micro. Demonstrate strong cyber investigation skills, applying evidence-led analysis, Digital Forensics and Incident Response methodologies to identify, contain … Have experience managing cyber incidents through detection, investigation, containment, remediation and post-incident review activities. Demonstrate knowledge of cloud and hybrid environments, including Azure, AWS, networking, identity management and enterprise security controls. Have experience developing and improving incident response playbooks, detection use cases and cyber security operational procedures. ...

skills. * Ability to gather and translate business requirements into technical solutions. * Willingness to travel to client sites as required. * Microsoft Security, Compliance or Azure certifications. * Experience with Microsoft Defender technologies. * Understanding of GDPR, ISO 27001 and other compliance frameworks. * Knowledge of Zero Trust security principles. * Experience delivering Microsoft … Retention Policies, eDiscovery, eDiscovery Premium, Insider Risk Management, Communication Compliance, Microsoft Defender, Defender XDR, Defender for Office 365, Defender for Cloud Apps, Microsoft Sentinel, Microsoft Entra ID, Azure Active Directory, Conditional Access, Identity and Access Management (IAM), Zero Trust, GDPR, ISO 27001, Cyber Essentials, Risk Management ...

skills.* Ability to gather and translate business requirements into technical solutions.* Willingness to travel to client sites as required.* Microsoft Security, Compliance or Azure certifications.* Experience with Microsoft Defender technologies.* Understanding of GDPR, ISO 27001 and other compliance frameworks.* Knowledge of Zero Trust security principles.* Experience delivering Microsoft … Retention Policies, eDiscovery, eDiscovery Premium, Insider Risk Management, Communication Compliance, Microsoft Defender, Defender XDR, Defender for Office 365, Defender for Cloud Apps, Microsoft Sentinel, Microsoft Entra ID, Azure Active Directory, Conditional Access, Identity and Access Management (IAM), Zero Trust, GDPR, ISO 27001, Cyber Essentials, Risk Management ...

senior security engineer to bridge cloud security, detection tooling, and incident response. You will own meaningful parts of the security stack, contribute to Azure hardening, and coordinate pen-test cycles. The role is a contract position with day-one impact and independent work expectations. You’ll bring hands … SIEM experience (Microsoft Sentinel preferred), Azure security knowledge, Terraform/Bicep for security tooling, and a proactive approach #J-18808-Ljbffr ...