18 of 18 Sentinel Jobs in Manchester

technical authority across cloud, device, and identity security. Key Focus Areas Microsoft Security Ecosystem: End-to-end hands-on execution across Defender XDR, Sentinel, Purview, Entra ID (PIM, Conditional Access), and Intune. Cloud & Hybrid Infrastructure: Securing cloud-hosted platforms across Microsoft Azure and AWS environments. Identity & Device Security: Designing ...

remediation actions. Producing clear incident documentation and stakeholder reporting. Supporting the development and mentoring of Tier 1 and Tier 2 analysts. Key Technologies Microsoft Sentinel Microsoft Defender XDR Microsoft Entra ID Protection Endpoint, cloud, identity, and email security telemetry What We're Looking For Strong SOC experience at Tier ...

Experience: Strong technical expertise in security, network, and infrastructure technologies, including experience with secure Azure/AWS cloud environments, Microsoft Defender for Endpoint, Microsoft Sentinel, and security tooling development. Proven ability to drive security automation and operational improvements using modern DevOps practices such as CI/CD and Infrastructure ...

technology teams.Respond to incidents alongside the Head of CyberWork with the existing MSSP across incident response and proactive monitoring and detectionMaintain and optimise Microsoft Sentinel SIEM, XDR/MDR/EDR solutions, and supporting tools.Track deployment and health of all security products across the business.Stay ahead of emerging threats ...

running POC'sCreating recommended architectures for deploymentDelivering training to sales around the Cyber Services offering.What we need from youIn-depth knowledge of Cyber servicesMicrosoft Sentinel knowledgeExperience with Security technologiesExperience working in a busy environment handling multiple work streamsAn appetite to learn, develop and progress in this roleExperience leading customers ...

occasion. Knowledge and experience of these technologies is a key requirement: Microsoft EntraID/Azure Microsoft Defender 365 (including Microsoft Defender XDR) Microsoft Sentinel Microsoft Active Directory Microsoft Intune VMWare Experience in as many of these technologies/areas as possible is highly desirable: Security Frameworks (NIST, CIS etc. ...

responsible for a team/function of Engineers delivering services across the MXDR technology portfolio such as but not limited to Microsoft, Splunk, CrowdStrike, Sentinel One and Carbon Black. The role ensures operational excellence, technical quality and consistent service delivery while driving innovation and engineering maturity. In this role ...

understanding of technical and network security requirements. Ability to proactively identify control weakness and vulnerabilities. Knowledge and use of SIEM tooling i.e., Splunk, Chronicle, Sentinel etc and event log data. Experience in understanding Firewalls and IDS/IPS and Windows Security Event Logs. Strong verbal and written communication skills with ...

vectors against Windows, macOS, and Linux platforms. Awareness of anti-virus, anti-malware, and endpoint protection concepts. Familiarity with SIEM concepts (Cortex XSIAM, Microsoft Sentinel, or equivalent). Familiarity with cloud services (Microsoft Azure, Microsoft 365, AWS). Awareness of incident management processes. Understanding of adversary motivations in cybercrime ...

Incident, Request, Change, and Problem management. Understanding of GDPR, data protection, and information governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience with Endpoint Detection and Response ...

component layers to identify normal and abnormal traffic Understanding of AWS &/or Azure cloud services Experience of Splunk (with ES) &/or Sentinel, content development experience desirable Non-technical Client side consulting, including stakeholder engagement and the ability to communicate insights and concepts to others (including briefing skills ...

leadership across identity, security, cloud, infrastructure, networking, data protection and operational security domains, with a particular focus on Microsoft technologies including Entra ID, Defender, Sentinel, Purview, Azure and Microsoft 365.Salary & BenefitsOur salaries are competitive within the cyber marketClick here for the list of benefits.Hybrid workingWe recognise the benefits that remote ...

adjacent modules), either in a vendor, partner, or customer capacity Experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Experience with enterprise security architectures, including identity infrastructure, cloud environments ...

both SOC analysts and executive stakeholders. Nice to have Google Professional Cloud Security Engineer or Google SecOps certification. Prior SIEM migration experience (Splunk → SecOps, Sentinel → SecOps, etc.). Experience with adjacent tooling: Wiz, CrowdStrike, Splunk, Sentinel, Snyk. Consulting or systems‐integrator background. Contributions to open detection content (Sigma, MITRE, public ...

point of escalation/subject matter expert for other members of the team. Providing support to forces for the configuration of Sentinel and log sources. Co-ordination of the testing, implementation and configuration of new data sources. Contribute towards the management of SIEM content such as detections. Line Management responsibilities … security awareness and practical experience. Desirable Relevant cloud certification or equal experience. Previous public sector experience. Experience with Microsoft Power Platform, Azure DevOps, Microsoft Sentinel (or other SIEM's). Experience working with code repositories and CI/CD. Why Join us? Balance is important and we want ...

identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge of DevSecOps practices and integrating security … maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations, threat hunting activities and security improvement ...

identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge of DevSecOps practices and integrating security … maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations, threat hunting activities and security improvement ...

Required experience: To be successful in this role you will need to have the following experience: Demonstratable experience working with a SIEM tool (Microsoft Sentinel, Splunk, etc), and vulnerability scanners. Ability to explain technical and complex concepts simply to a variety of audiences acting as a bridge between the technical … each of the following: Experience of Incident Management, investigation and response within a cyber role Demonstratable experience working with a SIEM tool (Microsoft Sentinel, Splunk, etc), and vulnerability scanners. Proven experience of managing stakeholders in a complex environment with multiple service providers. Experience in interpreting threat intelligence and building alert ...