15 of 15 Jobs in Manchester

Experience: Strong technical expertise in security, network, and infrastructure technologies, including experience with secure Azure/AWS cloud environments, Microsoft Defender for Endpoint, Microsoft Sentinel, and security tooling development. Proven ability to drive security automation and operational improvements using modern DevOps practices such as CI/CD and Infrastructure ...

Experience:Strong technical expertise in security, network, and infrastructure technologies, including experience with secure Azure/AWS cloud environments, Microsoft Defender for Endpoint, Microsoft Sentinel, and security tooling development.Proven ability to drive security automation and operational improvements using modern DevOps practices such as CI/CD and Infrastructure as Code ...

vectors against Windows, macOS, and Linux platforms. Awareness of anti-virus, anti-malware, and endpoint protection concepts. Familiarity with SIEM concepts (Cortex XSIAM, Microsoft Sentinel, or equivalent). Familiarity with cloud services (Microsoft Azure, Microsoft 365, AWS). Awareness of incident management processes. Understanding of adversary motivations in cybercrime ...

Incident, Request, Change, and Problem management. Understanding of GDPR, data protection, and information governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience with Endpoint Detection and Response ...

Python with solid scripting in PowerShell and Bash to drive automation and operational efficiency, combined with strong observability practice (for example Azure Monitor, Sentinel, Application Insights and Log Analytics) using SLIs, SLOs and distributed tracing to sustain and improve system reliability. Autonomy and technical leadership Proven ability to work independently ...

component layers to identify normal and abnormal traffic Understanding of AWS &/or Azure cloud services Experience of Splunk (with ES) &/or Sentinel, content development experience desirable Non-technical Client side consulting, including stakeholder engagement and the ability to communicate insights and concepts to others (including briefing skills ...

adjacent modules), either in a vendor, partner, or customer capacity Experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Experience with enterprise security architectures, including identity infrastructure, cloud environments ...

modules), either in a vendor, partner, or customer capacity Extensive technical experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Experience with enterprise security architectures, including identity infrastructure, cloud environments ...

models like MITRE ATT&CK to prioritize and enhance detective controls. SIEM Expertise: Hands-on experience with SIEM platforms (e.g., Splunk, Google SecOps, Elastic, Sentinel) for rule/query creation and analytics. Threat Hunting: Experience conducting proactive threat hunts, defining hypotheses, and developing hunting methodologies. Cloud Security: Solid knowledge ...

establish facts when evidence is incomplete, coordinate technical teams during live incidents and apply sound incident response methodology even when tooling is degraded. Microsoft Sentinel and Defender XDR will be central to your work, but calm judgement, investigative discipline and clear communication will matter just as much. What You Will … complex security incident investigations from initial assessment through containment, recovery and review. Establish incident scope, business impact and likely root cause using Microsoft Sentinel, Defender XDR and evidence from across the enterprise environment. Direct response actions in partnership with infrastructure, identity, cloud, application and wider IT teams. Maintain clear investigation ...

leadership across identity, security, cloud, infrastructure, networking, data protection and operational security domains, with a particular focus on Microsoft technologies including Entra ID, Defender, Sentinel, Purview, Azure and Microsoft 365.Salary & BenefitsThe budgeted salary for this role is up to 90,000 year, depending on experience.Click here for the list … Active Directory, Identity Governance, PIM, Conditional Access, SSO, Federation, and B2B/B2C identity.Provide architectural ownership across the Microsoft security stack, including Defender, Sentinel, Purview, Intune, Security Copilot, Azure Security, and Microsoft 365 Security & Compliance.Develop reusable security patterns for identity, threat, data protection, monitoring, compliance, and AI security.Design secure architectures ...

leadership across identity, security, cloud, infrastructure, networking, data protection and operational security domains, with a particular focus on Microsoft technologies including Entra ID, Defender, Sentinel, Purview, Azure and Microsoft 365.Salary & BenefitsThe budgeted salary for this role is up to 90,000 year, depending on experience. Click here for the list … Active Directory, Identity Governance, PIM, Conditional Access, SSO, Federation, and B2B/B2C identity. Provide architectural ownership across the Microsoft security stack, including Defender, Sentinel, Purview, Intune, Security Copilot, Azure Security, and Microsoft 365 Security & Compliance. Develop reusable security patterns for identity, threat, data protection, monitoring, compliance, and AI security. ...

years' experience in a SOC or MSSP environment at Tier 2-3 or Lead level Strong hands‐on experience with SIEM platforms (e.g. Microsoft Sentinel, Splunk, Elastic, LogPoint) Experience with EDR tools such as Microsoft Defender, SentinelOne, or Bitdefender Deep understanding of MITRE ATT&CK and modern threat detection methodologies … Certifications such as SC‐200, GCIH, GCIA, Security+, or BTL1 Experience in an MSSP or multi‐customer environment Microsoft security stack experience (Defender XDR, Sentinel, M365 security) Knowledge of cloud security, email security, and vulnerability management Experience with KQL or other query languages Scripting skills (PowerShell, Python) Familiarity with SOAR ...

identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge of DevSecOps practices and integrating security … maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations, threat hunting activities and security improvement ...

identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge of DevSecOps practices and integrating security … maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations, threat hunting activities and security improvement ...