126 to 150 of 150 Azure Sentinel Jobs in the UK

facts when evidence is incomplete, coordinate technical teams during live incidents and apply sound incident response methodology even when tooling is degraded. Microsoft Sentinel and Defender XDR will be central to your work, but calm judgement, investigative discipline and clear communication will matter just as much. What … complex security incident investigations from initial assessment through containment, recovery and review. Establish incident scope, business impact and likely root cause using Microsoft Sentinel, Defender XDR and evidence from across the enterprise environment. Direct response actions in partnership with infrastructure, identity, cloud, application and wider IT teams. Maintain ...

regulatory stipulations regarding security incidents on a global scale Experience in operationalizing automation to support process efficiency Experience with SIEM technologies (i.e. Sentinel), cloud-based management and investigation consoles (i.e. Azure), and other Digital Forensics analysis tools Deep understanding of both Windows and Unix/Linux ...

Title: SIEM Engineer (SC Cleared) Location: Reading/Havant Duration:6 months Description: Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries … threats and business use cases Develop Logic Apps and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed ...

Title: SIEM Engineer (SC Cleared) Location: Reading/Havant Duration:6 months Description: Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries … threats and business use cases Develop Logic Apps and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed ...

Title: SIEM Engineer (SC Cleared) Location: Reading/Havant Duration:6 months Description: Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries … threats and business use cases Develop Logic Apps and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed ...

Pipeline & Analytics, who can lead the engineering strategy, architecture, delivery, and operational excellence of Allstate’s enterprise telemetry and analytics platforms, including Cribl, Azure Data Explorer (ADX), and related observability data services, and own the end‐to‐end observability pipeline ecosystem that enables scalable collection, transformation, routing, governance … employment at Allstate. Allstate is not providing sponsorship for this vacancy. A minimum of 3years’ experience with Cribl Stream, Cribl Edge, Azure Data Explorer (ADX), or equivalent large‐scale telemetry platforms. A minimum of 2years experience leading enterprise observability, telemetry, logging, or analytics platform engineering teams. Hands ...

experience within an MSP environment. Heavy server experience, with strong Windows Server and Hyper-V knowledge. Solid Microsoft 365 administration experience (Exchange Online, Azure, SharePoint). Strong networking knowledge - firewalls, routing, VPNs, DNS, IP, topology. Experience with WatchGuard and/or Draytek firewalls highly advantageous. Exposure to SentinelOne … date - please reach out to gianluca (at) circle recruitment (dot) com for a confidential chat. Windows Server, Microsoft, Office 365, Azure, IT Support, It infrastructure, service desk, MSP, IT Managed Services, 2nd line, 3rd line, huddersfield, Bradford, Wakefield, mirfield, Yorkshire Circle Recruitment is acting as an Employment Agency ...

Group Policy and identity services Oversee Microsoft Entra, Conditional Access, MFA, PIM and SSPR Monitor and respond to security incidents using Defender and Sentinel Manage email protection, retention policies, eDiscovery and VPN services Develop PowerShell automation to improve operational efficiency Contribute to platform upgrades, security improvements and cloud … adoption initiatives Essential Skills Strong Microsoft 365 administration experience Hybrid Exchange and Exchange Online expertise Active Directory administration and troubleshooting Microsoft Entra ID (Azure AD) experience Microsoft Defender and/or Sentinel security experience PowerShell scripting and automation Strong understanding of security best practices and identity ...

looking for an experienced Cyber Security Engineer to join them on a 6 month contract in Solihull. Key Skills: XDR, Cortex XDR, Illumio, Sentinel, Purview, Azure Responsibilities Implement and manage security controls, XDR, vulnerability management and PAM click apply for full job details ...

Flagstone is seeking a senior security engineer to own and operate detection and incident response across our Azure cloud security stack. You will work hands-on with Microsoft Sentinel, Defender for Cloud, and XDR tooling, while coordinating remediation with engineering squads. You'll drive security through ...

Nash in the United Kingdom seeks an experienced SEIM Engineer with Active SC clearance to onboard and integrate security log sources into Microsoft Sentinel, delivering reliable telemetry and comprehensive threat visibility. You will develop custom parsers, transformations and KQL queries, and design SIEM detections aligned to evolving threats. …/CD pipelines with Azure DevOps/Git enable controlled deployments. #J-18808-Ljbffr ...

operational processes. Key Responsibilities for the Senior Information Security Analyst: Provide secure design, configuration and assurance of Microsoft cloud services, including Microsoft Azure, Microsoft 365 and associated security, identity, compliance and monitoring tooling Use hands‐on Microsoft cloud security expertise to assess project designs, define security requirements, validate … delivered solutions Configure MS Sentinel and MS Defender as well as Azure firewalls Provide security and risk assessment consultancy on projects, change initiatives, and other formal workgroups and committees. Assessing security risk and directing the design and implementation of appropriate security controls to effectively manage ...

ability to prioritise under pressure. Aware of how security decisions impact operations and customer outcomes. Familiarity with ISO 27001, Cyber Essentials, Microsoft Defender, Azure, Fortinet, Mimecast, Sentinel or similar platforms. Ability to meet vetting requirements (BS7858). Certifications Working towards or holding at least ...

platform deployments at scale, not only operating them. Deep, hands-on expertise with at least one major platform (e.g. Dynatrace, Datadog, Elastic, Splunk, Azure Monitor/Grafana) including its correlation/AIOps capabilities - and enough breadth to compare platforms honestly rather than defaulting to the familiar one. Strong … event correlation, topology-based root cause - sufficient to configure, tune, and critically evaluate them. Fluency across the enterprise stack the telemetry describes: cloud (Azure especially), infrastructure, networking, identity, and application architectures Experience integrating with SIEM and ITSM ecosystems - ideally Microsoft Sentinel and ServiceNow - including CMDB-driven ...

cyber defence capability. The role will focus on the operational delivery of services across a range of security platforms, including Microsoft Defender/Sentinel, Palo Alto Networks Cortex XDR/XSIAM, Google SecOps & CrowdStrike Falcon. You will play a key role in ensuring services are efficient, resilient … Manage prioritisation and workload across teams, including leadership of complex client incidents and investigations. Own and optimise the security technology stack (primarily Microsoft Sentinel and Defender), driving effective use of AI and automation in the SOC. Identify opportunities to improve efficiency through automation and work closely with automation ...

month contract, Inside IR35. The role focuses on Identity and Access Management within the Microsoft ecosystem, leveraging Entra ID/Azure AD, Conditional Access, MFA and RBAC, with hands-on work in Microsoft Sentinel. You will monitor security events, investigate incidents, write KQL queries, and collaborate with internal ...

currently going through a significant Microsoft cloud transformation. They are seeking a Senior Information Security Analyst to help shape security across their Azure/M365 estate. This is a great role for someone who enjoys being technically close to Azure security, Conditional Access, Defender/Sentinel … West Malling area) who enjoys operating across cloud security, technical security assurance and risk, and who has the technical knowledge of Microsoft and Azure to challenge designs and support automation across a growing Microsoft cloud estate. Base salary £65-72k (depending on experience). No visa sponsorship ...

individual needs, 24/7/365. Our services support 25,000 users globally and proactively monitor 45,000+ devices in key areas: Azure infrastructure managed service Modern Workplace: Office 365, Microsoft 365, and Azure Virtual Desktop Managed Security and SOC with Microsoft Defender, Sentinel ...

Barclay Simpson is seeking a Senior Information Security Analyst to shape security across an Azure/M365 estate. The role is hands-on with Azure security, CA, Defender/Sentinel, and automation, while also influencing controls, risk and design beyond pure engineering. Working ...

Essential for the role Previous Security Operations/SOC leadership experience. Experience managing or leading security analysts. Strong Microsoft security experience, particularly: Microsoft Sentinel Microsoft Defender Microsoft Entra Conditional Access Azure Security controls Experience managing third-party security vendors and outsourced SOC services. Strong security operations ...

following: Cisco/CCNP-level networking & Nexus switching Cisco ASA/Firepower Fortinet, Check Point or Palo Alto firewalls AWS and/or Azure Windows/Linux servers VMware ESXi/vSAN Load balancing and network monitoring Defender/Sentinel/SIEM HLD/LLD documentation ...

Checkout Ltd is looking for a Cloud Security Engineer in Greater London to enhance their cloud security posture. You will work across AWS, Azure, and GCP, leading security integration projects and partnering with engineering teams to automate compliance. Your focus will include architecting secure environments and implementing monitoring … systems. The role requires strong experience in cloud security, Microsoft Sentinel, and familiarity with AI applications in security. Enjoy a flexible hybrid working model at a company that's shaping the future of fintech. #J-18808-Ljbffr ...

inform investigations, threat hunts and detection improvements. Experience using security data and evidence to assess risk and recommend proportionate actions. Knowledge of Microsoft Azure security environments, including Entra and Microsoft Defender capabilities. Sound judgement when operating with incomplete, conflicting or time-sensitive information. Strong documentation, governance and audit … discipline. Knowledge of responsible AI-assisted security operations, including the need for human oversight and validation. Desirable: Experience with Microsoft Sentinel, including log analysis, analytical rule management and playbook development. Experience with Endpoint Detection and Response technologies, including Microsoft Defender for Endpoint. Experience with Microsoft security technologies such ...

stability, and continuous improvement across detection, response, and automation. You will drive use of AI and automation, manage complex incidents, and coordinate across Azure, Defender, Sentinel and XDR platforms to maintain high service levels and resilient client environments. #J-18808-Ljbffr ...

individual needs, 24/7/365. Our services support 25,000 users globally and proactively monitor 45,000+ devices in key areas: Azure infrastructure managed service Modern Workplace: Office 365, Microsoft 365, and Azure Virtual Desktop Managed Security and SOC with Microsoft Defender, Sentinel ...