20 of 20 Azure Sentinel Jobs in the South East

DevSecOps Engineer - Azure/Application Security We're working with an established organisation looking to appoint an experienced DevSecOps Engineer to strengthen its Azure deployment and application security capabilities. This is a hands-on position combining Azure DevOps, cloud infrastructure and application security. … embed secure practices throughout the software delivery lifecycle. The Role You'll be responsible for: Designing and maintaining CI/CD pipelines within Azure DevOps Deploying Azure applications and infrastructure using Terraform Supporting Azure services including App Services, AKS, Azure SQL, Storage ...

Define cloud architecture patterns and engineering standards to support enterprise cloud adoption. Design and implement container platforms using Google Kubernetes Engine (GKE) and Azure Kubernetes Service (AKS). Define and enforce cloud governance frameworks covering identity, access management, networking, security and compliance. Design reusable and modular Infrastructure … teams. Ability to provide thought leadership around cloud innovation and best practice. If you are an experienced Cloud Platform Architect with strong GCP, Azure, Kubernetes and Terraform expertise and would like to find out more, please apply with your most up to date CV. Senior Cloud Platform Architect ...

across cloud, identity, endpoint and network platforms, and carry out malware analysis and threat validation. Design, implement and optimise detection content across Microsoft Sentinel, Defender XDR, CrowdStrike and associated platforms, developing advanced KQL queries and analytics rules aligned to MITRE ATT&CK. Act as senior technical owner … security platforms including Microsoft Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune, Darktrace and supporting technologies, managing platform health, onboarding and configuration. Design and maintain automation and orchestration workflows using Logic Apps, Sentinel Playbooks, Power Automate, PowerShell, Python and API integrations to reduce manual operational effort. ...

Respond/Recover), NIST SP 800-61r3, MITRE ATT&CK, and D3FEND. Set roadmap and strategy for SOAR platforms (Splunk SOAR, Microsoft Sentinel SOAR/Logic Apps), case management, evidence collection, and response orchestration. Define and oversee SOAR playbook automation builds, documentation, and execution Define … across the full IR lifecycle: triage, scoping, containment, eradication, recovery, evidence handling, post-incident review. Strong DFIR background covering endpoint, network, cloud (AWS, Azure, GCP), identity, and SaaS forensics. Working proficiency in Python and PowerShell. Comfort reviewing and directing code without being the primary developer. Experience with ...

including developing custom automation and integrations via API with proficiency in at least one scripting language (preferably Python or GO). Preferred vendors: Azure, AWS, GCPExpert Knowledge of SIEM Architecture and Design – Including familiarity in SIEM deployment and architecture of at least one cloud environment (GCP, AWS, Azure, IBM). Preferred vendors: Microsoft Sentinel, Google SecOps, XSIAMExpert Knowledge of EDR/XDR – including configuration and deployment/maintenance. Preferred vendors: CrowdStrike, Microsoft Defender, Palo Alto XDR, SentinelOneIntermediate Knowledge of VM – including deployment, automation of reporting. Preferred vendors: Rapid 7, TennableIntermediate Knowledge of CTI – including ...

Cyber Security Specialist/Cyber Security Engineer - CISSP, CEH, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bons +Benefits Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team … cybersecurity posture from an infrastructure perspective and external security rating. Identify, assess and remediate vulnerabilities across hardware, software and infrastructure (Windows Server and Azure Cloud). Monitor emerging threats and lead or support Incident Response investigations and mitigation. Evaluate, test and recommend security enhancements, controls and threat prevention ...

implementation and ongoing support. The organisation is investing heavily in its security capabilities and Microsoft technology estate, with several key initiatives planned across Azure and Microsoft 365. The successful candidate will play a pivotal role in helping shape and deliver these programmes while supporting the wider security function. … optimisation, supporting MDM and MAM capabilities. Microsoft Purview and Data Loss Prevention (DLP) implementation and enhancement. Ongoing development of Microsoft 365 and Azure security controls. Improvements to monitoring, detection and response capabilities across the security estate. What We're Looking For We're interested in speaking with candidates ...

provide recommendations to strengthen detection outcomes Job Requirements: Strong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps … attack lifecycle Experience with XDR or EDR platforms such as Microsoft Defender, CrowdStrike or Cortex Understanding of cloud environments, particularly Azure, and associated security telemetry Experience working in customer-facing or consultancy roles Strong communication skills, with the ability to explain technical concepts clearly Technical Competencies: SIEM ...

Shape the Future of Microsoft Sentinel Detection Engineering. Are you passionate about Microsoft Sentinel, KQL and building high-quality detections that help a SOC identify threats effectively? We're looking for a Senior Detection Engineer to join our growing Aerospace, Defence & Security business. You'll play … role in designing, developing, testing and improving detection content in Microsoft Sentinel, translating threat behaviours and security requirements into reliable analytics. This is an opportunity to join the Detection Engineering team and help strengthen detection coverage, reduce false positives and ensure detection content remains accurate, performant and operationally ...

processes - enrichment, ticketing, containment - using Python, Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius of an incident Run hypothesis-led threat hunts, not just reactive … equivalent) Practical scripting/automation experience (Python, Logic Apps, REST APIs) or hands-on SOAR platform configuration Working knowledge of several of: Microsoft Sentinel, Defender XDR, CrowdStrike, Microsoft Entra ID/Azure AD, Microsoft 365, AWS security tooling Experience investigating identity and cloud-based compromise, including ...

scripts and engineering workflows. Drive AI-assisted engineering practices and help shape responsible AI adoption. Build and maintain CI/CD pipelines using Azure DevOps and Git-based workflows. Develop dashboards, reporting solutions and operational insights using Power BI and other tooling. Work with Azure services … reporting or operational improvement roles. Scripting and development expertise using PowerShell, Python or similar languages. Experience building automation workflows and repeatable technical processes. Azure DevOps experience including repositories, pipelines, version control and release processes. Strong understanding of CI/CD, Git and software engineering best practices. Experience creating ...

background in Cyber Security, Identity & Access Management (IAM), an MSP, MSSP or security consultancy. Desirable Experience Microsoft Defender for Identity. Microsoft Graph API. Azure Automation. Identity Governance. Microsoft Sentinel or Purview. BloodHound, PingCastle or similar identity assessment tools. Microsoft certifications such ...

Running workshops, coverage assessments and use case catalogues as customer deliverables What we're looking for Hands-on SIEM engineering experience, ideally Microsoft Sentinel Confident KQL — this is the core of the role SOAR playbook design in Azure Logic Apps, Cortex XSOAR or similar Scripting … Python or PowerShell, and comfort working with APIs Use case design against MITRE ATT&CK Working knowledge of XDR/EDR platforms and Azure telemetry sources Some exposure to NDR tooling such as Vectra AI or Corelight is a bonus Consultancy or customer-facing experience is valuable ...

skills for proposals, presentations and technical documentation. Full UK driving licence and willingness to travel. Desirable Experience & Skills Hands-on experience with Microsoft Sentinel and Microsoft Defender. Experience delivering technical demonstrations. Knowledge of SOAR, automation and AI-assisted security operations. Microsoft or other relevant cyber security certifications. Experience … security certifications, supported by Nomios through training, study time and lab access. Target certifications include: SC-200 Microsoft Security Operations Analyst AZ-500 Azure Security Engineer Associate SC-100 Microsoft Cybersecurity Architect Relevant Microsoft partner accreditations Job Specifics Location: This is a hybrid role, requiring attendance ...

organisation. Manage relationships with external security providers, partners, and auditors. Technology Environment You will work across a modern technology estate including: Microsoft Azure Microsoft Intune Okta Identity & Access Management Zscaler SentinelOne Mimecast Abnormal AI Tenable KnowBe4 SD-WAN Technologies SIEM and Security Monitoring Platforms About … compliance. Experience implementing and supporting security frameworks such as Cyber Essentials, Cyber Essentials Plus, ISO 27001, or similar. Strong knowledge of Microsoft Azure security and cloud governance. Experience working with modern identity, endpoint protection, email security, and security monitoring platforms. Experience managing cyber security incidents and supporting recovery ...

operational processes. Key Responsibilities for the Senior Information Security Analyst: Provide secure design, configuration and assurance of Microsoft cloud services, including Microsoft Azure, Microsoft 365 and associated security, identity, compliance and monitoring tooling Use hands-on Microsoft cloud security expertise to assess project designs, define security requirements, validate … delivered solutions Configure MS Sentinel and MS Defender as well as Azure firewalls Provide security and risk assessment consultancy on projects, change initiatives, and other formal workgroups and committees. Assessing security risk and directing the design and implementation of appropriate security controls to effectively manage ...

currently going through a significant Microsoft cloud transformation. They are seeking a Senior Information Security Analyst to help shape security across their Azure/M365 estate. This is a great role for someone who enjoys being technically close to Azure security, Conditional Access, Defender/Sentinel … West Malling area) who enjoys operating across cloud security, technical security assurance and risk, and who has the technical knowledge of Microsoft and Azure to challenge designs and support automation across a growing Microsoft cloud estate. Base salary 65-72k (depending on experience).No visa sponsorship available. ...

platform deployments at scale, not only operating them. Deep, hands-on expertise with at least one major platform (e.g. Dynatrace, Datadog, Elastic, Splunk, Azure Monitor/Grafana) including its correlation/AIOps capabilities - and enough breadth to compare platforms honestly rather than defaulting to the familiar one. Strong … event correlation, topology-based root cause - sufficient to configure, tune, and critically evaluate them. Fluency across the enterprise stack the telemetry describes: cloud (Azure especially), infrastructure, networking, identity, and application architectures Experience integrating with SIEM and ITSM ecosystems - ideally Microsoft Sentinel and ServiceNow - including CMDB-driven ...

Title: SIEM Engineer (SC Cleared) Location: Reading/Havant Duration: 6 months Description: Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries … threats and business use cases Develop Logic Apps and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed ...

Title: SIEM Engineer (SC Cleared) Location: Reading/Havant Duration:6 months Description: Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries … threats and business use cases Develop Logic Apps and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed ...