3 of 3 Remote Log Analytics Jobs in Newcastle upon Tyne

defence, directly contributing to investigations involving nation-state threat actors (including IR, CH, and NK based campaigns) while refining your craft across enterprise-scale log ingestion and customised Sentinel integration engineering that will stretch your skills, give you opportunity to ingest complex logs from a mass of cloud and … data sources and the chance to learn these as you go. The Role You'll own and optimise enterprise-wide log onboarding into Microsoft Sentinel – deploying standard and custom connectors, Function Apps, and parsers to build tailored SIEM solutions that drive real-world threat detection and response. Log ingestion at scale across numerous hybrid and multi-cloud environments Enhance custom Function Apps and ingestion pipelines Parse, normalise, and optimise log telemetry to ensure precision and cost control Partner with IR teams on real attacks – tuning rules against live threat actor activity Sync closely with Microsoft teams More ❯

use of Microsoft Graph and REST APIs. Using and securing Azure services, such as: Azure Logic Apps, Azure Functions, Azure Cosmos DB, Azure AI, Log Analytics/Sentinel. Debugging and troubleshooting Microsoft 365 workloads and custom solutions. Using the following languages: PowerShell/CLI, Kusto Query Language (KQL More ❯

extension through Prisma Access. Deploy and administer GlobalProtect for secure remote access across endpoints and locations. Leverage Cortex Data Lake for threat visibility and log analytics; implement and monitor Data Loss Prevention (DLP) policies. Collaborate with cloud, application, and infrastructure teams to align networking with business services. Implement More ❯