76 to 96 of 96 Azure Sentinel Jobs in London

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, London (Hybrid) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity to join … SIEM/XDR) Strong Security Engineer (SIEM/XDR), security engineering or detection engineering experience Hands-on SIEM and XDR tooling, ideally Microsoft Sentinel and Microsoft Defender for Endpoint Detection engineering, detection-as-code, KQL, security content and alert logic Security telemetry, logging pipelines, data quality and telemetry ...

CISSP, CCSP, CISM, SANS. Microsoft Security and Exposure Management: Build strong knowledge of Microsoft Security tools such as Defender for Cloud, Microsoft Sentinel, Defender XDR, Security Copilot, Entra ID, and Exposure Management capabilities to help clients identify, prioritise, and reduce security risks across cloud and hybrid environments. Cloud … engaged technology professionals to join our Managed Services team delivering continuous value to our client’s businesses. We are seeking a n Azure Cloud Architect with experience in Cloud Resiliency Architect ure who is passionate about improving reliability, continuity, and disaster recovery capabilities of enterprise cloud environments. ...

control improvements, and reporting outputs against agreed engagement milestones.• Contribute to solution architecture and pre-sales deal shaping for cloud security, Microsoft Defender, Sentinel, Entra, Defender for Cloud, and exposure management opportunities.Build trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales engagements.• Design … implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies.• Understand threat modelling, attack paths, cloud misconfigurations, identity risks, vulnerabilities, and how to prioritise remediation based on exploitability and business impact.• Understand ...

Exchange Messaging SME – Exchange, Active Directory & Microsoft Sentinel Job Summary We are looking for an experienced Exchange/Messaging/SME with strong expertise in Microsoft Exchange, Active Directory (AD), and Microsoft Sentinel. The successful candidate will be responsible for supporting, maintaining, troubleshooting, securing, and improving enterprise Microsoft … domain controller issues. Support Active Directory migrations, upgrades, and domain consolidations. Implement security best practices, including privileged access management and least privilege. Microsoft Sentinel Deploy, configure, and manage Microsoft Sentinel. Develop and maintain analytics rules, KQL queries, workbooks, and automation. Investigate security incidents and suspicious activity. Integrate Microsoft ...

supporting the team in achieving objectivesStrong eagerness to learn new technologies and develop cyber security skills, including Microsoft Security tools (e.g. Defender, Entra, Sentinel), cloud platforms (AWS/Azure), and scripting/coding (e.g. Terraform, Python, KQL) — product-specific training providedAwareness of other security tools ...

Cyber Security, a leading UK professional services firm, seeks a Cyber Security Architect & Engineering Lead to own security across Microsoft 365, Azure, Entra ID, Defender XDR, Sentinel, and Purview. This senior, hands-on role blends architecture and engineering to secure cloud, data, endpoints, apps and networks … while enabling AI adoption. You will lead security reviews, threat modelling and automation using Python, PowerShell, and Azure Functions; drive ISO 27001 and Cyber Essentials #J-18808-Ljbffr ...

modernisation, and AI adoption programmes. Support pre‐sales activities, workshops, proof of concepts, and executive presentations. Technology & Innovation Drive capability development across Microsoft Azure, Microsoft 365 Security, Microsoft Defender Suite, Microsoft Sentinel, Microsoft Entra, Microsoft Copilot for Security, Microsoft Purview, AWS Security, Google Cloud Security … Access), Microsoft 365 Defender (Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps), Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Copilot for Security, Microsoft Intune, AWS Security Services, Google Cloud. Technical Expertise Microsoft Entra (Identity, Identity Protection, Identity Governance, Internet Access, Private Access ...

facts when evidence is incomplete, coordinate technical teams during live incidents and apply sound incident response methodology even when tooling is degraded. Microsoft Sentinel and Defender XDR will be central to your work, but calm judgement, investigative discipline and clear communication will matter just as much.What you will … complex security incident investigations from initial assessment through containment, recovery and review.Establish incident scope, business impact and likely root cause using Microsoft Sentinel, Defender XDR and evidence from across the enterprise environment.Direct response actions in partnership with infrastructure, identity, cloud, application and wider IT teams.Maintain clear investigation records ...

facts when evidence is incomplete, coordinate technical teams during live incidents and apply sound incident response methodology even when tooling is degraded. Microsoft Sentinel and Defender XDR will be central to your work, but calm judgement, investigative discipline and clear communication will matter just as much. What … complex security incident investigations from initial assessment through containment, recovery and review. Establish incident scope, business impact and likely root cause using Microsoft Sentinel, Defender XDR and evidence from across the enterprise environment. Direct response actions in partnership with infrastructure, identity, cloud, application and wider IT teams. Maintain ...

regulatory stipulations regarding security incidents on a global scale Experience in operationalizing automation to support process efficiency Experience with SIEM technologies (i.e. Sentinel), cloud-based management and investigation consoles (i.e. Azure), and other Digital Forensics analysis tools Deep understanding of both Windows and Unix/Linux ...

customer and client security-assurance questionnaires on the business's behalf. Responsibilities Monitor, correlate and triage security alerts and activity across Microsoft 365, Azure, Entra ID, AWS, Databricks, endpoints and network services, using native tools and the central SIEM. Act as the primary internal contact for the managed … Hands-on SecOps experience using SIEM, EDR/XDR and cloud/identity telemetry, ideally with a managed SOC. Practical Microsoft security experience (Sentinel, Defender, Entra ID, Purview) and exposure to AWS; Databricks familiarity a plus. Demonstrable ISO/IEC 27001:2022 experience - collecting and presenting control evidence ...

quality outcomes.Strong written skills for proposals, presentations and technical documentation.Full UK driving licence and willingness to travel.Desirable Experience & SkillsHands-on experience with Microsoft Sentinel and Microsoft Defender.Experience delivering technical demonstrations.Knowledge of SOAR, automation and AI-assisted security operations.Microsoft or other relevant cyber security certifications.Experience positioning managed security services.Exposure … relevant Microsoft security certifications, supported by Nomios through training, study time and lab access.Target certifications include: SC-200 Microsoft Security Operations AnalystAZ-500 Azure Security Engineer AssociateSC-100 Microsoft Cybersecurity ArchitectRelevant Microsoft partner accreditationsJob SpecificsLocation: This is a hybrid role, requiring attendance at our customer sites and Basingstoke ...

focus on incident response, SOC operations, or cyber defense.Hands-on experience with SIEM, EDR/XDR, and log analysis tools (e.g., Splunk, Sentinel, CrowdStrike).Practical understanding of incident response methodologies and frameworks such as MITRE ATT&CK and NIST.Familiarity with threat hunting, malware analysis, or forensic investigation techniques.Exposure … cloud environments (AWS, Azure, or GCP) and modern enterprise architectures is preferred.Strong analytical and problem-solving skills, with the ability to communicate technical findings clearly.Relevant certifications (e.g., Security+, GCIH, GCIA, or equivalent) are a plus.Job SummaryID: F7B7BD6054Department: Intelligence & Analysis, Intelligence & InvestigationsType: contract time ...

focus on incident response, SOC operations, or cyber defense. Hands-on experience with SIEM, EDR/XDR, and log analysis tools (e.g., Splunk, Sentinel, CrowdStrike).Practical understanding of incident response methodologies and frameworks such as MITRE ATT&CK and NIST.Familiarity with threat hunting, malware analysis, or forensic investigation … techniques. Exposure to cloud environments (AWS, Azure, or GCP) and modern enterprise architectures is preferred. Strong analytical and problem-solving skills, with the ability to communicate technical findings clearly. Relevant certifications (e.g., Security+, GCIH, GCIA, or equivalent) are a plus. Job SummaryID: F7B7BD6054Department: Intelligence & Analysis, Intelligence & InvestigationsType: contract ...

regulatory engagements, including FCA supervisory requests and third-party due diligence. Technical security & architecture: Define and enforce the security architecture across our Azure-native, Kubernetes-based platform. Govern security controls across the full stack: Kafka, .NET/C#, Vue.js, Kong API Gateway, Auth0, and Salesforce. Lead threat modelling … security incident response plan; lead major incident management for cyber events. Operate and improve security monitoring, SIEM, and alerting across the Azure estate. Run the security awareness and training programme for all ~180 staff. Manage relationships with external SOC, MSSP, and specialist security partners. Requirements Demonstrable experience leading ...

2.0) and protect information assets (Confidentiality, Integrity, Availability). Lead threat modelling, risk assessments, and secure coding initiatives (especially in Python and Azure environments) across the chatbot lifecycle and broader IT systems, mitigating vulnerabilities and ensuring compliance with data protection laws (e.g., GDPR). Establish, implement, and maintain … security policies, standards, and operational controls; support audits, incident response, vulnerability remediation, and ensure effective use of security tooling (eg., Sentinel, Defender for Cloud, SIEM). Work closely with Operational Risk, DevOps, and Information Security teams to embed best practices into Agile delivery pipelines, balance stakeholder priorities ...

Group Policy and identity services Oversee Microsoft Entra, Conditional Access, MFA, PIM and SSPR Monitor and respond to security incidents using Defender and Sentinel Manage email protection, retention policies, eDiscovery and VPN services Develop PowerShell automation to improve operational efficiency Contribute to platform upgrades, security improvements and cloud … adoption initiatives Essential Skills Strong Microsoft 365 administration experience Hybrid Exchange and Exchange Online expertise Active Directory administration and troubleshooting Microsoft Entra ID (Azure AD) experience Microsoft Defender and/or Sentinel security experience PowerShell scripting and automation Strong understanding of security best practices and identity ...

Flagstone is seeking a senior security engineer to own and operate detection and incident response across our Azure cloud security stack. You will work hands-on with Microsoft Sentinel, Defender for Cloud, and XDR tooling, while coordinating remediation with engineering squads. You'll drive security through ...

platform deployments at scale, not only operating them. Deep, hands-on expertise with at least one major platform (e.g. Dynatrace, Datadog, Elastic, Splunk, Azure Monitor/Grafana) including its correlation/AIOps capabilities - and enough breadth to compare platforms honestly rather than defaulting to the familiar one. Strong … event correlation, topology-based root cause - sufficient to configure, tune, and critically evaluate them. Fluency across the enterprise stack the telemetry describes: cloud (Azure especially), infrastructure, networking, identity, and application architectures Experience integrating with SIEM and ITSM ecosystems - ideally Microsoft Sentinel and ServiceNow - including CMDB-driven ...

Teams call to address queries around incidents, detection coverage and service issues. Security Monitoring & Incident Response Monitor security alerts generated by Microsoft Sentinel, Microsoft Defender, Datadog and Elastic. Assess severity and impact of alerts, triage and investigate incidents independently. Execute containment and remediation actions using defined runbooks … internal and client use. Maintain accurate incident records in JIRA Service Management. Detection Engineering Develop and implement new detection rules in Microsoft Sentinel aligned to the MITRE ATT&CK framework. Draft and optimise KQL queries for detection and threat hunting. Refine existing detection logic based on false positive ...

Checkout Ltd is looking for a Cloud Security Engineer in Greater London to enhance their cloud security posture. You will work across AWS, Azure, and GCP, leading security integration projects and partnering with engineering teams to automate compliance. Your focus will include architecting secure environments and implementing monitoring … systems. The role requires strong experience in cloud security, Microsoft Sentinel, and familiarity with AI applications in security. Enjoy a flexible hybrid working model at a company that's shaping the future of fintech. #J-18808-Ljbffr ...