15 of 15 Azure Sentinel Jobs in the South East

Cleared - Platform Engineer – Azure | Azure Arc | XDR | Windows & Linux Location: Hybrid – Milton Keynes Contract: 6 months The Opportunity A highly reputable government backed corporations is hiring a DV cleared Platform Engineer to support and enhance a large-scale hybrid infrastructure across Azure … based in Milton Keynes or London on side 3 days per week. This role is centred around deploying and supporting XDR security agents, Azure Arc, Azure Monitor Agent (AMA), and enterprise monitoring solutions, while ensuring secure, reliable platform services across Windows and Linux server estates.Working closely ...

close to the action. Key Responsibilities: Lead the design, implementation, and optimisation of security controls across Microsoft Defender, Intune, Entra ID, Azure, and M365. Own and evolve Conditional Access, identity protection, device compliance, and endpoint hardening strategies. Act as the technical lead for cyber incidents, supporting investigation, containment … Support governance activities including risk assessments, audits, and compliance reviews. Technical Experience: Strong hands-on experience with Microsoft Defender XDR, Intune, Entra ID, Azure security controls, and Microsoft Sentinel. Proven ability to design and implement Conditional Access, identity protection, and device compliance policies. Experience developing detection rules, analytics ...

Analysts to identify and respond to threats effectively. This is not a generalist cyber security role. Key Responsibilities Administer and optimise Microsoft Sentinel (or equivalent SIEM), including log ingestion, parsing, normalisation, and retention. Develop and maintain SOAR workflows and automation using Azure Logic Apps, Python, PowerShell …/7 operational environment. Familiarity with MITRE ATT&CK, CVEs, and vulnerability management. Exposure to cloud security monitoring across Azure, AWS, or Microsoft 365. Desirable Certifications Microsoft SC-200 CompTIA Security+/CySA+ ISC2 CC or CISSP GIAC GCIA CEH Cisco CyberOps or Fortinet certifications What ...

annum Role Overview The Cyber Security Engineer will help protect and improve security across a hybrid IT environment, spanning Microsoft Azure cloud services, on-prem VMware infrastructure, and the network estate (including Cisco Meraki). The role is hands-on and operational, partnering with IT teams to implement … response through Sophos MDR, and improve cyber resilience by supporting Disaster Recovery (DR) testing and Business Continuity (BC) readiness. Key Responsibilities Cloud Security (Azure) Implement andmaintainAzure security controls across identity, networking,computeand storage. Support governance guardrails (Azure Policy), securebaselinesand logging/monitoring for cloud workloads. Contribute ...

accountabilities Security Platform Operationalisation: Operationalise and tune the deployed security tooling estate, including CrowdStrike Falcon (EDR and Next-Gen SIEM), Wiz CSPM (Azure and AWS), Mimecast and the Microsoft security stack, moving platforms from deployed to fully managed through detection rule tuning, alert configuration, log source onboarding … tuning, host investigation and response actions. Experience operationalising SIEM, EDR/XDR and vulnerability management platforms (for example CrowdStrike Next-Gen SIEM, Microsoft Sentinel or Microsoft Defender), including detection tuning, alert management and vulnerability scanning and reporting. Microsoft security stack experience across Entra ID, Active Directory and Group ...

initiatives. Requirements Experience within a SOC environment. Strong knowledge of SIEM, EDR and SOAR platforms. Hands-on experience with platforms such as Microsoft Sentinel, Defender XDR, CrowdStrike, Darktrace or similar security technologies. Experience monitoring and securing Azure and AWS environments. Knowledge of ISO 27001 and Cyber ...

analytic techniques for incident detection Collaborate with an MSP SOC to maintain and tune the detection catalogue Build automated reporting dashboards using Microsoft Sentinel workbooks Support security initiatives including ISO 27001 activities and KQL-based tasks Ensure monitoring coverage across cloud platforms, SaaS apps, and internal systems Contribute … Experience: Previously worked as a Threat Detection Engineer or in a similar role. Strong proficiency in KQL and hands-on experience with Microsoft Sentinel Familiarity with Microsoft Defender tools (Endpoint & O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ...

skills. Exposure to AI-powered security platforms, automation technologies or security orchestration tools would be highly desirable. Desirable technologies SIEM & SOAR platforms Microsoft Sentinel, Splunk or QRadar Microsoft Defender, CrowdStrike or other EDR solutions Azure, AWS or Google Cloud APIs, REST integrations and automation Identity & Access ...

Experience managing multiple concurrent customer projects Strong stakeholder and customer management skills Agile project delivery experience Knowledge of PRINCE2 principles Microsoft Project and Azure DevOps experience Excellent communication and organisational skills Eligible to obtain SC Clearance Nice to Have Security Operations Centre (SOC) project experience Microsoft Sentinel ...

improving vulnerability tooling and providing security advice to operational and project teams. You will work across technologies including Windows, Linux, mainframe, AWS and Azure, while collaborating with infrastructure teams, security colleagues, suppliers and wider stakeholders. Responsibilities Design, implement and improve technical security systems and controls across HMLR … skills Strong experience designing and implementing technical security systems and controls. Advanced knowledge of at least three security technologies, such as SIEM, Defender, Sentinel, EDR/XDR, Active Directory, Nessus, PAM, AWS IAM or Entra. Extensive knowledge of security controls across Windows, Linux, mainframe, AWS or Azure ...

cases aligned to MITRE ATT&CK, develop response playbooks, and implement Detection-as-Code best practices. Key Requirements Experience with SIEM platforms (Microsoft Sentinel preferred) Strong KQL and detection engineering skills SOAR automation and playbook development experience Python and/or PowerShell scripting XDR/EDR experience Knowledge … MITRE ATT&CK and threat detection methodologies Azure security and cloud telemetry exposure Previous consultancy or customer-facing experience What's on Offer £65,000 base salary Annual Bonus Predominantly remote working No on-call requirement Exposure to enterprise-scale cyber security projects Strong development and progression opportunities ...

real interest in making other engineers faster. Key Responsibilities Design, provision and operate cloud infrastructure across AWS, GCP and/or Azure Build and maintain CI/CD pipelines that let teams ship safely and frequently Own infrastructure-as-code (Terraform, Pulumi, CloudFormation or equivalent) and the workflows … engineers, lead architecture decisions What You'll Bring Technical Expertise: Hands-on production experience with at least one major cloud platform (AWS, GCP, Azure)—multi-cloud welcome Strong infrastructure-as-code skills (Terraform, Pulumi, CloudFormation or equivalent) Kubernetes in production—deployment, scaling, networking, troubleshooting CI/CD platforms ...

What you'll be doing You'll lead the design and delivery of cloud architecture solutions across Google Cloud Platform, while also leveraging Azure where required. You'll be responsible for designing enterprise Landing Zones, developing Infrastructure as Code solutions, establishing cloud governance standards, and supporting the adoption … looking for We're looking for someone with proven experience designing enterprise cloud solutions on Google Cloud Platform (GCP) , alongside strong Azure knowledge. You'll have hands-on experience with Kubernetes , particularly Google Kubernetes Engine (GKE) and Azure Kubernetes Service (AKS) , and be confident designing scalable ...

Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance ...

Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance ...