26 to 50 of 151 Azure Sentinel Jobs in the UK

Engineer to lead in the design, implementation, and lifecycle management of enterprise-grade PAM solutions across multi-site and multi-cloud environments (AWS, Azure, GCP). You’ll serve as a technical authority for PAM, shaping standards, delivering sophisticated migrations, and ensure privileged access is secure, auditable … OIDC/OAuth).Automation proficiency (PowerShell, Python, REST APIs) and Infrastructure-as-Code (Terraform/CloudFormation) for repeatable deployments.Experience with SIEM (e.g., Splunk, Sentinel, QRadar) and SOAR integrations for session telemetry, alerts, and response.Proven leadership in defining standards, runbooks, and governance; excellent customer engagement and interpersonal skills.## Additional ...

MERITUS are recruiting for an Infrastructure & Cloud Engineer to join a large Technology Consultancy, supporting secure hybrid infrastructure and Microsoft Azure environments across UK Government customers. INFRASTRUCTURE & CLOUD ENGINEER - Up to £65,000 - REMOTE (UK) - ACTIVE SC CLEARANCE REQUIRED We're looking for an experienced Infrastructure & Cloud Engineer … with a strong Microsoft background to support and improve enterprise infrastructure across on-premise and Azure environments. This is a hands-on role offering the opportunity to work with modern cloud technologies, automation tools and Microsoft 365 services while supporting business-critical systems within a secure environment. Responsibilities ...

custom log parsing. Solid understanding of networking concepts (TCP/IP, firewalls, proxies, VPNs) and security protocols. Familiarity with cloud security principles, Azure, GCP, AWS Working knowledge over a range of operating systems and platforms including: Windows Server, Windows XP, UNIX (Solaris, Linux), Working knowledge of networks … industry certifications (e.g., AZ-500, SC-200, SC-900, CompTIA Security+) or similar Cert with Security Orchestration, Automation, and Response (SOAR) playbooks within Sentinel or other platforms. Scripting skills (PowerShell, Python) for automation and data manipulation. What Mizuho Can Offer You Here at Mizuho, there are fantastic progression ...

Microsoft Platform Engineer (Azure & Microsoft 365) Wembley - Fully On-Site 5 DAYS A WEEK £50,000 per annum + Permanent Benefits We're seeking a Senior Microsoft Platform Engineer to join a growing technology team responsible for maintaining and enhancing a complex hybrid estate spanning on-premises infrastructure … Teams, SharePoint Online, OneDrive and Intune Managing identity and access across Active Directory and Entra ID Designing and supporting hybrid cloud infrastructure across Azure and on-premises environments Implementing and maintaining SSO, MFA and Conditional Access policies Supporting Microsoft 365 security, compliance and governance initiatives Managing hybrid connectivity ...

platform that’s quick, secure and resilient for customers, and easy, modern and sustainable for developers. Our core technology focus is on Microsoft Azure and Google Cloud PlatformWe’re looking for an experienced, motivated and innovative Cloud‐focused DevOps Engineer to join our Google Cloud team. ...

Security Architecture Frameworks Familiarity with: NCSC Cloud Security Principles ISO 27001 NIST Cybersecurity Framework CIS Controls OWASP Technical Experience Cloud Platforms AWS Microsoft Azure Google Cloud Platform (GCP) Security Technologies Microsoft Defender Suite Splunk Microsoft Sentinel CrowdStrike Prisma Cloud Wiz Lacework Tenable Qualys Infrastructure & DevOps Kubernetes … Tooling Scripting & Automation Python PowerShell Bash Preferred Certifications CISSP (Certified Information Systems Security Professional) CCSP (Certified Cloud Security Professional) SABSA TOGAF Microsoft Certified: Azure Security Engineer Associate Google Professional Cloud Security Engineer CRISC CISM Reasonable Adjustments: Respect and equality are core values to us. We are proud ...

support and guidance, helping customers optimize their security defenses and mitigate risks effectively. Microsoft Focus: Utilize your knowledge of Microsoft security products, including Azure, Microsoft Sentinel, KQL, and the Microsoft Defender suite, to offer tailored recommendations and solutions. Relationship Building: Build and nurture strong relationships with … levels of business and providing informal leadership in cyber security matters. Strong understanding of Microsoft security products and technologies, with proficiency in Azure, Microsoft Sentinel, KQL, and the Microsoft Defender suite or related product lines. Deep understanding of attacker tradecraft and security hardening techniques, enabling ...

operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment. While Microsoft technologies (Microsoft 365, Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi layered networking, security, data management … zero‐trust security principles to enhance protection across cloud platforms. Manage identity and access management (IAM) in a cloud‐first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud‐native security solutions such as Microsoft ...

risk assessments, threat modelling, and vulnerability management. Ensure compliance with UK GDPR, data protection regulations, and organisational policies. Cloud & Technology Security Hands-on Azure cloud security experience, including implementation and operation of Microsoft Defender security tools (e.g., Defender for Cloud, Defender for Endpoint, Defender for Identity, Defender … access management (IAM), Privileged Identity Management (PIM) encryption, and network security controls. Design and run SIEM/SOAR use-cases in Microsoft Sentinel (data connectors, analytics rules, workbooks, automation playbooks) to support SOC operations, threat detection, and incident response. Support DevSecOps practices and secure software development. Governance & Awareness ...

threat detection, while helping improve the organisation’s overall cyber resilience. What you’ll be doing: Managing and improving Microsoft Defender and Sentinel capabilities Securing Azure environments and implementing effective security controls Managing Entra ID security, including Conditional Access, Identity Protection and privileged access Supporting vulnerability … security SME to technical and non‐technical stakeholders What we’re looking for: Proven Security Engineer experience Strong Microsoft Defender and Sentinel knowledge Good Azure and Entra ID security experience Hands‐on vulnerability management experience Understanding of security frameworks and technical controls Strong communication and stakeholder ...

/ML concepts and their application to identity and security data. Familiarity with Microsoft security and analytics tools such as Entra ID logs, Azure Monitor, Log Analytics and Sentinel. Exposure to Privileged Access Management (PAM) and role‐based privileged access. Understanding of data governance, responsible AI and information ...

knowledge of Windows and Linux operating environments, including standard commands, file systems, and user authentication mechanisms. Competence in using SIEM solutions (e.g., ArcSight, Azure Sentinel) for monitoring and log analysis; some exposure to additional analysis tools such as basic XDR platforms. Able to demonstrate proficient knowledge ...

operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment. While Microsoft technologies (Microsoft 365, Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi layered networking, security, data management … zero‐trust security principles to enhance protection across cloud platforms. Manage identity and access management (IAM) in a cloud‐first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud‐native security solutions such as Microsoft ...

SIEM Engineer (SC Cleared) for a Reading/Havant based 6-month contract. The role focuses on onboarding log sources into Microsoft Sentinel, developing parsers, and creating automated detection and response workflows. Responsibilities include tuning KQL queries, building analytic rules, and deploying SIEM content via CI/ ...

SIEM Engineer (SC Cleared) for a Reading/Havant based 6-month contract. The role focuses on onboarding log sources into Microsoft Sentinel, developing parsers, and creating automated detection and response workflows. Responsibilities include tuning KQL queries, building analytic rules, and deploying SIEM content via CI/ ...

Managers while acting as the lead security voice with customers. Technical credibility across the Microsoft security ecosystem, including Defender, Entra ID, Microsoft 365, Azure, Sentinel, and Purview, alongside broader cyber security domains. Excellent communication and presentation skills, with the ability to engage senior stakeholders, deliver compelling ...

experience troubleshooting containerized environments (Kubernetes, OpenShift) - including networking, namespace segmentation, and service-level debugging in complex enterprise deployments. Experience with cloud platforms (AWS, Azure, GCP) and enterprise software deployments Excellent communication skills with ability to explain complex technical concepts to various audiences Willingness to travel across EMEA region ...

wide | Business Area: Digital | Salary Details: Competitive basic salary based on experience You will provide strategic and technical leadership across large-scale Azure deployments, focusing on architecture, governance, security, automation, and migration. The role bridges technical delivery with stakeholder advisory, ensuring Azure solutions are secure, scalable … enterprise cloud strategy. a great place to work, a great place to be a customer Key Responsibilities: Lead design and implementation of Azure landing zones, subscription governance, and management group hierarchy. Define and enforce Azure Policies, RBAC, and identity models (including Entra ID design, PIM, Conditional ...

across cloud, identity, endpoint and network platforms, and carry out malware analysis and threat validation. Design, implement and optimise detection content across Microsoft Sentinel, Defender XDR, CrowdStrike and associated platforms, developing advanced KQL queries and analytics rules aligned to MITRE ATT&CK. Act as senior technical owner … security platforms including Microsoft Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune, Darktrace and supporting technologies, managing platform health, onboarding and configuration. Design and maintain automation and orchestration workflows using Logic Apps, Sentinel Playbooks, Power Automate, PowerShell, Python and API integrations to reduce manual operational effort. ...

across the Club, promoting practical security behaviours and helping teams understand and manage information security risks. Work with Microsoft security technologies, including Defender, Sentinel, Entra ID, Intune and Purview, supporting monitoring, investigation, configuration review and control improvement activity. Support supplier and third‐party security assurance activities, including security … Experience of investigating security alerts, vulnerabilities, incidents or control weaknesses in a business environment. Knowledge of Microsoft 365 security technologies, ideally including Defender, Sentinel, Entra ID, Intune and Purview. Understanding of cyber security frameworks and standards such as ISO 27001, Cyber Essentials, PCI DSS and NIST. Experience working ...

here to architect secure cloud environments, build and enhance detection logic at scale, and drive measurable improvements to our security baseline across AWS, Azure, and GCP. You will partner closely with Engineering, GRC, Technology Risk and Security Operations - defining standards, fine tuning the SIEM, and progressively taking … detection engineering challenges across the organisation. What you’ll be responsible for Cloud Security Secure and continuously improve our multi-cloud estate (AWS, Azure, GCP) using cloud native tooling to keep our cloud infrastructure hardened and compliant Partner with Engineering and Security Operation team to make security ...

Microsoft Intune, Windows Autopilot, endpoint security, device compliance and configuration management. Manage application deployment, MDM/MAM, device lifecycle, patching and operational compliance. Azure Infrastructure & Cloud Services Design, deploy and support Azure environments, including virtual machines, storage, networking, backup and recovery. Support hybrid cloud, migration, automation … resilient, available and well-optimised. Troubleshoot complex infrastructure, network and virtualisation issues. Cyber Security & Compliance Lead cyber security initiatives and administer Microsoft Defender, Sentinel and Purview services. Monitor alerts, investigate incidents, manage vulnerabilities, conduct risk reviews and maintain security baselines. Support compliance, audits, business continuity and disaster recovery ...

Doing You'll take technical ownership across a broad security landscape, including: Designing and implementing security architecture across Microsoft 365, Azure, Entra ID, Defender XDR, Sentinel and Purview Building modern security controls around Zero Trust, secure-by-design and automation Leading architecture reviews and threat modelling … external SOC partners Strengthening vulnerability and exposure management using threat intelligence, exploitability and business risk Automating security processes using Python, PowerShell, Logic Apps, Azure Functions and APIs Supporting technical controls and evidence for ISO 27001 and Cyber Essentials Plus Acting as a senior security SME and helping technology ...

Cortex XDR. Data Protection & Compliance Support and monitor the company's Data Loss Prevention controls within Microsoft Purview, and data classification through Azure Information Protection labelling. Help maintain the evidence and controls that support the company's accreditations, including ISO/IEC 27001, 27017, and 27018, Cyber Essentials … Request, Change, and Problem management. Understanding of GDPR, data protection, and information governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience with Endpoint Detection ...

moves effectively between operational incidents, control reviews, stakeholder requests, and security improvement initiatives. Key Responsibilities Investigate and respond to security alerts from Microsoft Sentinel, Microsoft Defender XDR, endpoint security tools, and other monitoring platforms; gather evidence, review logs, coordinate containment, and document findings through resolution. Manage security incidents … phishing‐submission review, policy tuning, and investigation of SPF, DKIM, and DMARC failures. Administer assigned Microsoft security platforms, including Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra ID, and Microsoft Purview, using least‐privilege and formal change‐management practices. Support the secure adoption and operation of approved artificial intelligence ...