51 to 75 of 121 Azure Sentinel Jobs in the UK

analytical, with excellent written and verbal communication skills. You are familiar with architecture frameworks (TOGAF or equivalent) and Well-Architected reviews (AWS/Azure/GCP) You have proven hands-on experience leading migrations from incumbent tooling to a modern, consolidated delivery platform - including continuous delivery (e.g. … areas listed below, with working knowledge of the rest: CI/CD & pipelines: GitLab CI/CD, GitHub Actions, Jenkins, Azure DevOps, CircleCI, GitOps principles with Argo CD/Workflows, Tekton, Buildkite, Bamboo, TeamCity, AWS CodePipeline. Policy-as-Code & governance: OPA/Rego, HashiCorp Sentinel, Kyverno. ...

Cleared Microsoft Sentinel Detection Engineer - £500/day via Umbrella - Short Term Contract - Remote - Immediate Start - SCC Flex Contract We're looking for an experienced SC Cleared SOC Analyst/Detection Engineer to support the delivery of a prioritised detection engineering backlog across AWS, Azure, Microsoft … Defender XDR, Dynatrace, and ServiceNow environments. Key Responsibilities Own assigned Microsoft Sentinel detection engineering use cases from inception through to production deployment. Design, develop and maintain Microsoft Sentinel Analytics Rules, Scheduled Rules, Near Real Time (NRT) Rules and Fusion detection capabilities. Create, optimise and maintain Kusto ...

company’s cyber services. You will translate security data into actionable narratives, guide a defensible 12-month roadmap, and collaborate with Microsoft Azure Sentinel/Defender XDR expertise to prioritize improvements and drive measurable outcomes. You will maintain relationships with senior stakeholders, deliver proactive and reactive ...

complex cloud transformation, security modernisation, and AI adoption programmes. Support pre-sales activities, workshops, proof of concepts, and executive presentations. Technology & Innovation Microsoft Azure Microsoft 365 Security Microsoft Defender Suite Microsoft Sentinel Microsoft Entra Microsoft Copilot for Security Microsoft Purview AWS Security Google Cloud Security … Access) Microsoft 365 Defender (Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps) Microsoft Defender for Cloud Microsoft Sentinel Microsoft Copilot for Security Microsoft Intune AWS Security Services Google Cloud Platform Security Zero Trust Architectures DevSecOps CNAP platforms (like Wiz and Palo Alto ...

maintain cyber defence use cases, correlation rules, and attack chain detections across disparate systems. Design, implement, and integrate SIEM solutions—particularly Microsoft Sentinel—into Security Operations. Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem. Handle L2-level incidents leveraging Microsoft Sentinel and Microsoft Defender tools. Support incident response, triage, threat modelling, and vulnerability remediation within Azure-hosted environments. Create, run, and troubleshoot Azure Logic Apps, playbooks, and Sentinel automation components. Collaborate with business and security stakeholders to define and enhance security standards ...

responsibilities Build secure architectures for cloud-native systems - applying secure-by-design patterns, zero-trust principles, and least-privilege access across AWS, Azure, or GCP environments. Embed security into CI/CD pipelines , integrating SAST, DAST, SCA, and infrastructure-as-code scanning so vulnerabilities are caught before they … security posture through better engineering, not more process. Skills, knowledge and expertise Essential Strong hands-on experience securing cloud infrastructure in AWS, Azure, or GCP, including IAM design, network security, and secrets management. Experience embedding security tooling into CI/CD pipelines (SAST, DAST, SCA, container/ ...

security engineers (currently 3) Act as the senior escalation point for security incidents and decision‐making Work across a modern Microsoft/Azure environment, driving improvements in M365 security and identity Influence how security is delivered across our sites, combining internal and client‐facing services … governance Translate regulatory obligations ( FCA , PRA , ISO 27001 , Lloyd’s ) into practical, measurable controls Hands‐On Security Engineering Implement and optimise controls across Azure, M365, and infrastructure environments Lead hardening initiatives across IAM, PAM, AD, and network security Drive security automation and DevSecOps practices Incident Response & Threat Detection ...

Cortex XDR. Data Protection & Compliance Support and monitor the company's Data Loss Prevention controls within Microsoft Purview, and data classification through Azure Information Protection labelling. Help maintain the evidence and controls that support the company's accreditations, including ISO/IEC 27001, 27017, and 27018, Cyber Essentials … Request, Change, and Problem management. Understanding of GDPR, data protection, and information governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience with Endpoint Detection ...

solutions that provide business, platform, and technology capabilities for customers and colleagues. This role focuses on administering and optimizing Splunk Enterprise Security, Microsoft Sentinel, and supporting modern Security Operations by developing SIEM use cases, managing data pipelines, automating security workflows, and strengthening enterprise cyber defense capabilities. What … Build and maintain Splunk data models to support advanced analytics and security monitoring. Configure and support Splunk Cloud environments. Administer and maintain Microsoft Sentinel security monitoring capabilities. Manage log ingestion, routing, parsing, normalization, and transformation using Splunk Enterprise and Cribl Stream. Develop automation workflows and security playbooks using ...

accountabilities Security Platform Operationalisation: Operationalise and tune the deployed security tooling estate, including CrowdStrike Falcon (EDR and Next-Gen SIEM), Wiz CSPM (Azure and AWS), Mimecast and the Microsoft security stack, moving platforms from deployed to fully managed through detection rule tuning, alert configuration, log source onboarding … tuning, host investigation and response actions. Experience operationalising SIEM, EDR/XDR and vulnerability management platforms (for example CrowdStrike Next-Gen SIEM, Microsoft Sentinel or Microsoft Defender), including detection tuning, alert management and vulnerability scanning and reporting. Microsoft security stack experience across Entra ID, Active Directory and Group ...

Responsibilities Security Platform Operationalisation: Operationalise and tune the deployed security tooling estate, including CrowdStrike Falcon (EDR and Next-Gen SIEM), Wiz CSPM (Azure and AWS), Mimecast and the Microsoft security stack, moving platforms from deployed to fully managed through detection rule tuning, alert configuration, log source onboarding … tuning, host investigation and response actions. Experience operationalising SIEM, EDR/XDR and vulnerability management platforms (for example CrowdStrike Next-Gen SIEM, Microsoft Sentinel or Microsoft Defender), including detection tuning, alert management and vulnerability scanning and reporting. Microsoft security stack experience across Entra ID, Active Directory and Group ...

mixed-vendor environments, including SaaS platforms and hybrid cloud estates. Deep hands‐on expertise across the Microsoft security and compliance ecosystem, including Microsoft Sentinel, Defender XDR, Purview, Entra ID and Defender for Cloud, from solution design through to implementation and optimisation. Experience designing, onboarding and maturing SOC capabilities … CISSP, CISM, CISA or CySA+, alongside relevant Microsoft security certifications including SC-100 (Microsoft Cybersecurity Architect), SC-200 (Security Operations Analyst), AZ-500 (Azure Security Engineer) or alternates aligned the CrowdStrike ecosystem, such as, CrowdStrike Certified Falcon Administrator (CCFA), CrowdStrike Certified SIEM Engineer (CCSE), CrowdStrike Certified Identity Specialist ...

environment. Excellent analytical and problem-solving skills. Desirable Experience: Experience designing an AI adoption strategy for a SOC. Familiarity with Microsoft Sentinel, Splunk, Azure, AWS, or GCP security technologies. Knowledge of detection engineering and automation metrics. What Success Looks Like: Deliver meaningful reductions in manual analyst ...

security services. You will quantify security maturity through the TAM Score, build and steer a 12-month roadmap, and provide the depth of Azure Sentinel/Defender XDR expertise to advise on priorities. You will translate data into narrative, surface gaps, and guide customers toward measurable ...

three. About the team Security Engineering is a team of five covering cloud security, detection, and security operations. They work directly in the Azure estate and are close to the infrastructure, not abstracted behind a policy layer. The team runs Microsoft Sentinel, Defender XDR, and Defender … cloud security, detection tooling, and incident response, without being narrowly specialised. You own meaningful parts of the security stack, contribute hands‐on to Azure cloud hardening, and show up reliably when incidents need investigating or pen test cycles need coordinating. You're energised by visible impact, your work ...

analytic techniques for incident detection Collaborate with an MSP SOC to maintain and tune the detection catalogue Build automated reporting dashboards using Microsoft Sentinel workbooks Support security initiatives including ISO 27001 activities and KQL-based tasks Ensure monitoring coverage across cloud platforms, SaaS apps, and internal systems Contribute … Experience: Previously worked as a Threat Detection Engineer or in a similar role. Strong proficiency in KQL and hands-on experience with Microsoft Sentinel Familiarity with Microsoft Defender tools (Endpoint & O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ...

analytic techniques for incident detection Collaborate with an MSP SOC to maintain and tune the detection catalogue Build automated reporting dashboards using Microsoft Sentinel workbooks Support security initiatives including ISO 27001 activities and KQL-based tasks Ensure monitoring coverage across cloud platforms, SaaS apps, and internal systems Contribute … Experience: Previously worked as a Threat Detection Engineer or in a similar role. Strong proficiency in KQL and hands-on experience with Microsoft Sentinel Familiarity with Microsoft Defender tools (Endpoint & O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ...

tenant architecture, data ingestion, retention design, RBAC, and feed onboarding. Build and maintain parsers, UDM mappings, and data models for Google Cloud, AWS, Azure, endpoint, identity, and network sources. Write, test, and tune YARA‐L detection rules, including single‐event, multi‐event, and composite detections. Design SOAR playbooks … analysts and executive stakeholders. Nice to have Google Professional Cloud Security Engineer or Google SecOps certification. Prior SIEM migration experience (Splunk → SecOps, Sentinel → SecOps, etc.). Experience with adjacent tooling: Wiz, CrowdStrike, Splunk, Sentinel, Snyk. Consulting or systems‐integrator background. Contributions to open detection content (Sigma ...

initiatives. Requirements Experience within a SOC environment. Strong knowledge of SIEM, EDR and SOAR platforms. Hands-on experience with platforms such as Microsoft Sentinel, Defender XDR, CrowdStrike, Darktrace or similar security technologies. Experience monitoring and securing Azure and AWS environments. Knowledge of ISO 27001 and Cyber ...

control improvements, and reporting outputs against agreed engagement milestones. Contribute to solution architecture and pre-sales deal shaping for cloud security, Microsoft Defender, Sentinel, Entra, Defender for Cloud, and exposure management opportunities. Build trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales engagements. … Design, implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies. Understand threat modelling, attack paths, cloud misconfigurations, identity risks, vulnerabilities, and how to prioritise remediation based on exploitability and business impact. ...

designs and implements automated detection and response capabilities that protect G-Research’s diverse and complex estate, spanning high-performance compute (HPC) environments, Azure and Windows corporate infrastructure, and public cloud platforms such as AWS. As part of SAE, you’ll play a hands‐on role building secure … environments. Key responsibilities of the role include: Design, build and maintain automated detection and response systems across G-Research’s hybrid environments (HPC, Azure, AWS). Develop high-quality, well-tested code primarily in Python, following secure engineering best practices. Implement and maintain infrastructure-as-code ...

support the design, deployment, configuration and ongoing development of the SOCs security monitoring capability. The role will work across technologies including Splunk, Microsoft Sentinel, SOAR, Microsoft XDR and wider security tooling, with a major focus on SIEM engineering, data onboarding, integrations, detection content and threat-led use cases. … What you need Strong experience designing, building, deploying and operating SIEM and SOAR platforms Hands-on experience with Splunk and/or Microsoft Sentinel, ideally with strong exposure to both Experience with technologies such as Splunk Enterprise Security, Splunk SOAR, UBA, Elastic or Microsoft XDR Proven experience deploying ...

experience both on-prem and cloud Infrastructure, preferably Azure. You will be responsible for building, designing, implementing, maintaining and supporting the organisation's Azure cloud infrastructure and network estate. You will be experienced in supporting and maintaining Azure environments. You will have knowledge of implementing … supporting VM,SQL serverless, web apps, function & logic apps. You will have experience of using Azure Dev Ops, building CI/CD pipelines and building resources using IaC. You will have experience of using Github, terraform, Bicep and Powershell scripting. You will be certified in Azure ...

including developing custom automation and integrations via API with proficiency in at least one scripting language (preferably Python or GO). Preferred vendors: Azure, AWS, GCP Expert Knowledge of SIEM Architecture and Design – Including familiarity in SIEM deployment and architecture of at least one cloud environment … Azure, IBM). Preferred vendors: Microsoft Sentinel, Google SecOps, XSIAM Expert Knowledge of EDR/XDR – including configuration and deployment/maintenance. Preferred vendors: CrowdStrike, Microsoft Defender, Palo Alto XDR, SentinelOne Intermediate Knowledge of VM – including deployment, automation of reporting. Preferred vendors: Rapid 7, Tennable Intermediate ...

vulnerability triage workflows that score real risk by exploitability, reachability, and compensating controls rather than raw CVSS. Harden and secure our cloud environment (Azure), partnering with platform engineering on secure configuration, reviewing and remediating vulnerabilities, identity and network controls, posture management, and logging and detection. Strengthen endpoint … control landscape: cloud security, supply‐chain and vulnerability management, endpoint and identity, and detection and response. Are genuinely technical: comfortable in cloud environments (Azure preferred), CI/CD, and at least one scripting language (e.g. Python, Bash, PowerShell), so your controls hold up in engineering reality. Lead with ...