1 to 25 of 53 Azure Sentinel Jobs in the UK excluding London

Cleared - Platform Engineer – Azure | Azure Arc | XDR | Windows & Linux Location: Hybrid – Milton Keynes Contract: 6 months The Opportunity A highly reputable government backed corporations is hiring a DV cleared Platform Engineer to support and enhance a large-scale hybrid infrastructure across Azure … based in Milton Keynes or London on side 3 days per week. This role is centred around deploying and supporting XDR security agents, Azure Arc, Azure Monitor Agent (AMA), and enterprise monitoring solutions, while ensuring secure, reliable platform services across Windows and Linux server estates.Working closely ...

base of experience and knowledge with traditional Microsoft technologies such as Windows Server, Active Directory, Group Policy and Microsoft 365 and experience managing Azure resources. The successful candidate will then work with the latest Microsoft services, developing expertise in areas such as: Azure Cloud & Virtual Desktops … Microsoft Sentinel Microsoft Defender for Cloud Privileged Identity Management Microsoft Defender for Endpoint This position involves operating in a fast-paced MSP environment to ensure the availability, performance, and security of customers’ cloud workloads. Key Responsibilities: Provide high-quality support for incidents and service requests raised through ...

frameworks (NIST, CIS, PCI-DSS) IT Systems, Networking XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview Azure Sentinel SIEM/SOAR Endpoint security and XDR The contract opportunity for a Cyber Security Specialist will ...

close to the action. Key Responsibilities: Lead the design, implementation, and optimisation of security controls across Microsoft Defender, Intune, Entra ID, Azure, and M365. Own and evolve Conditional Access, identity protection, device compliance, and endpoint hardening strategies. Act as the technical lead for cyber incidents, supporting investigation, containment … Support governance activities including risk assessments, audits, and compliance reviews. Technical Experience: Strong hands-on experience with Microsoft Defender XDR, Intune, Entra ID, Azure security controls, and Microsoft Sentinel. Proven ability to design and implement Conditional Access, identity protection, and device compliance policies. Experience developing detection rules, analytics ...

Infrastructure Support Engineer, Windows, Azure, 1st/2nd Line, Hemel Hempstead, Bucks to £45,000 (Hybrid working) A leading Hardware and technology firm in Hemel Hempstead is requiring an Infrastructure Support Engineer to delivering high-quality technical support across EMEA operations. The Infrastructure Support Engineer will develop broader … infrastructure and cloud engineering skills and gain exposure to infrastructure and cloud technologies, including Microsoft 365, Azure, servers, and endpoint management, while contributing to ongoing improvement initiatives. Key Responsibilities User & Infrastructure Support • Act as a primary point of contact for IT support issues, handling a high volume ...

Management processes Implement identity access control measures and DLP controls Respond to Tier 3 security incidents Monitor threat intelligence Participate in pentests Engineer Microsoft Sentinel detections & SOAR playbooks Senior Cyber Security Engineer: Technical Experience XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office … Azure AD Microsoft Purview Cloud & Endpoint Security Azure Sentinel The permanent opportunity for a Senior Cyber Security Engineer will be based out of the Birmingham offices on a hybrid basis. This is an opportunity to join an industry leader that has grown year ...

risks, escalating issues where required. Technical Skills Strong hands‐on experience with Security Operations tools and capabilities, including SIEM and SOAR platforms (e.g. Sentinel, ServiceNow, Splunk SOAR, Cortex), Endpoint Detection & Response (EDR/XDR). Strong hands‐on experience with Threat Intelligence platforms (e.g. Recorded Future, Doppel, ZeroFox … management tools and processes. Strong awareness of cloud services and supporting security controls and monitoring capabilities. Working knowledge of Microsoft security stack (Defender, Sentinel, Purview), Active Directory and Azure AD, Windows and Linux environments. Experience with data loss prevention and insider risk tooling advantageous. Hands ...

including: Networking Cloud security CI/CD pipelines Infrastructure as Code Virtualisation Experience with SIEM and log management platforms such as: Splunk Microsoft Sentinel Cribl ELK Exposure to AWS, Azure, or GCP security services Scripting or automation experience using: Python Bash PowerShell Experience with vulnerability management ...

Analysts to identify and respond to threats effectively. This is not a generalist cyber security role. Key Responsibilities Administer and optimise Microsoft Sentinel (or equivalent SIEM), including log ingestion, parsing, normalisation, and retention. Develop and maintain SOAR workflows and automation using Azure Logic Apps, Python, PowerShell …/7 operational environment. Familiarity with MITRE ATT&CK, CVEs, and vulnerability management. Exposure to cloud security monitoring across Azure, AWS, or Microsoft 365. Desirable Certifications Microsoft SC-200 CompTIA Security+/CySA+ ISC2 CC or CISSP GIAC GCIA CEH Cisco CyberOps or Fortinet certifications What ...

annum Role Overview The Cyber Security Engineer will help protect and improve security across a hybrid IT environment, spanning Microsoft Azure cloud services, on-prem VMware infrastructure, and the network estate (including Cisco Meraki). The role is hands-on and operational, partnering with IT teams to implement … response through Sophos MDR, and improve cyber resilience by supporting Disaster Recovery (DR) testing and Business Continuity (BC) readiness. Key Responsibilities Cloud Security (Azure) Implement andmaintainAzure security controls across identity, networking,computeand storage. Support governance guardrails (Azure Policy), securebaselinesand logging/monitoring for cloud workloads. Contribute ...

Engineer, where one should have experience with: Minimum Qualification - bachelor's degree Multi-Platform SIEM Expertise: Proven experience with Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions. Security Operations: Strong analytical skills in threat detection, incident response, and security event … translate complex security concepts for diverse audiences. Some other highly valued skills may include: Cloud Security & Modern Infrastructure: Proficiency with AWS/Azure cloud security, containerized environments, and SaaS-based security solutions. Programming & Scripting: Advanced skills in Python, PowerShell, KQL, SPL, and SQL for automation, custom integrations ...

/NIST CSF/CIS CSC v8.1) - design, maturity tracking and assurance across full programme lifecycles Enterprise & Cloud Security Architecture - AWS, Azure, GCP, Oracle Cloud (multi-cloud landing zones, hybrid identity, secure migration patterns) Classified Platform Design - OFFICIAL, OFFICIAL-SENSITIVE, SECRET and ABOVE SECRET environments, ROSA, Garrison, Citadel … Cisco, Juniper, F5, Zscaler, NSX-T, SD-WAN, encrypted WAN, DMZ, NAC ServiceNow & M365 Architecture - ITSM, ITOM, CSM, EAM, SharePoint Online, Purview, Entra, Sentinel, Defender, Power Platform, CoPilot Container & DevSecOps - Kubernetes (EKS, Tanzu), Terraform, Ansible, CI/CD security, image scanning, container hardening Architecture Frameworks - TOGAF, ArchiMate, SABSA ...

groups, prevention policies and detection management Incident response and threat hunting using CrowdStrike Falcon Complete, Falcon Insight or Falcon Prevent Integration with Microsoft Sentinel, Splunk, QRadar or similar SIEM platforms Active Directory integration Enterprise-scale security engineering Desirable Experience Microsoft Defender for Endpoint (MDE) SentinelOne Rapid7 Carbon Black … Microsoft Sentinel XSOAR or other SOAR platforms Azure, AWS or GCP security PowerShell or Python automation Zero Trust or enterprise security architecture ...

Cyber Security Engineer - Microsoft 365 & Azure 6-Month Contract Outside IR35 (Apply online only) per day Remote (UK) 1-2 Days per Month On-Site (South West London) A leading public sector organisation is looking for a Cyber Security Engineer to support a major cyber security improvement programme. … Working alongside the Cyber Security, Infrastructure and Platform teams, you'll help deliver a range of security enhancements across Microsoft 365, Azure and AWS, strengthening the organisation's overall security posture while improving identity, endpoint, cloud and data protection capabilities. This is a fantastic opportunity for someone ...

Cisco, Fortinet, Rukus; VLANs, VPNs, firewalls. Hardware: Server infrastructure, RAID, SAN/NAS, cabling, wireless tech. Microsoft: Windows Server (2012–2025), Exchange Online, Azure AD, Intune, Office 365, Windows 10/11. Virtualisation: Hyper-V, VMware; cloud platforms (Azure, AWS, GCP). Communication Systems: VoIP … CCTV. Backup & DR: Veeam, replication, failover. Security: Firewalls, endpoint protection, SIEM tools (Splunk, Sentinel); ISO 27001, GDPR compliance. OS & Tools: Linux, PowerShell/Bash/Python scripting, ITSM platforms (ServiceNow, Fresh Service). A great opportunity to further your career with this prominent UK manufacturer. ...

Code (IaC), CI/CD, and DevSecOps practices. What you'll be doing Design, build, and manage complex cloud environments using GCP and Azure, ensuring adherence to architectural guardrails and tagging standards. Develop and maintain secure, multi-region, multi-account cloud landing zones using automation frameworks. Implement advanced … using Terraform, CloudFormation, and Ansible for repeatable, auditable deployments. Integrate IaC pipelines with version control (Git), automated testing, and policy-as-code (e.g., Sentinel, OPA) for compliance enforcement. Champion GitOps and immutable infrastructure patterns. CI/CD & DevOps: Build and optimize CI/CD pipelines (Azure ...

responsible for designing, developing, administering, and enhancing enterprise SIEM capabilities while working across modern security technologies including Splunk Enterprise Security, Splunk Cloud, Microsoft Sentinel, and Cribl Stream. This is an exciting opportunity to work within a large-scale enterprise environment, helping improve threat detection, security monitoring, automation … cases and correlation searches. Strong understanding of Splunk Data Models . Hands-on experience with Splunk Cloud . Hands-on experience with Microsoft Sentinel . Experience with Cribl Stream , including log ingestion, data routing, transformation, parsing, and data normalisation. Experience working in enterprise Security Operations environments, including threat ...

office locations globally and stay away from home on occasion. Knowledge and experience of these technologies is a key requirement: Microsoft EntraID/Azure Microsoft Defender 365 (including Microsoft Defender XDR) Microsoft Sentinel Microsoft Active Directory Microsoft Intune VMWare Experience in as many of these technologies ...

Cortex XDR. Data Protection & Compliance Support and monitor the company's Data Loss Prevention controls within Microsoft Purview, and data classification through Azure Information Protection labelling. Help maintain the evidence and controls that support the company's accreditations, including ISO/IEC 27001, 27017, and 27018, Cyber Essentials … Request, Change, and Problem management. Understanding of GDPR, data protection, and information governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience with Endpoint Detection ...

PowerShell and APIs. Manage and optimise security tooling including SIEM, EDR/XDR and monitoring platforms. Support the secure configuration and governance of Azure, AWS and Microsoft 365 environments. Collaborate with IT, Development and Security teams to deliver secure-by-design solutions. Enhance detection, threat monitoring and incident … safeguards. Skills & Experience Essential Good level of experience within Cyber Security, Security Engineering, Cloud Security or Security Operations. Strong cloud security knowledge across Azure, AWS and/or Microsoft 365. Experience with scripting and automation using Python, PowerShell or similar technologies. Hands-on experience managing and configuring security ...

accountabilities Security Platform Operationalisation: Operationalise and tune the deployed security tooling estate, including CrowdStrike Falcon (EDR and Next-Gen SIEM), Wiz CSPM (Azure and AWS), Mimecast and the Microsoft security stack, moving platforms from deployed to fully managed through detection rule tuning, alert configuration, log source onboarding … tuning, host investigation and response actions. Experience operationalising SIEM, EDR/XDR and vulnerability management platforms (for example CrowdStrike Next-Gen SIEM, Microsoft Sentinel or Microsoft Defender), including detection tuning, alert management and vulnerability scanning and reporting. Microsoft security stack experience across Entra ID, Active Directory and Group ...

mixed-vendor environments, including SaaS platforms and hybrid cloud estates. Deep hands‐on expertise across the Microsoft security and compliance ecosystem, including Microsoft Sentinel, Defender XDR, Purview, Entra ID and Defender for Cloud, from solution design through to implementation and optimisation. Experience designing, onboarding and maturing SOC capabilities … CISSP, CISM, CISA or CySA+, alongside relevant Microsoft security certifications including SC-100 (Microsoft Cybersecurity Architect), SC-200 (Security Operations Analyst), AZ-500 (Azure Security Engineer) or alternates aligned the CrowdStrike ecosystem, such as, CrowdStrike Certified Falcon Administrator (CCFA), CrowdStrike Certified SIEM Engineer (CCSE), CrowdStrike Certified Identity Specialist ...

Microsoft Security Architect Department: Azure Employment Type: Full Time Location: Belfast Description We are seeking a highly skilled and experienced Microsoft Security Architect to join our dynamic team! The ideal candidate will be a subject matter expert in Microsoft's security ecosystem, with a strong focus on Azure … customers to understand their business needs, security challenges, and technical requirements. Solution Design & Architecture: Design comprehensive security solutions utilizing Microsoft technologies such as Azure, Entra ID, Entra Private Access, and the Defender suite (Defender for Endpoint, Defender for Cloud). Proposal Development: Create detailed solution proposals, including technical ...

initiatives. Requirements Experience within a SOC environment. Strong knowledge of SIEM, EDR and SOAR platforms. Hands-on experience with platforms such as Microsoft Sentinel, Defender XDR, CrowdStrike, Darktrace or similar security technologies. Experience monitoring and securing Azure and AWS environments. Knowledge of ISO 27001 and Cyber ...

Looking For Essential Experience Extensive hands-on experience with Microsoft 365 administration, architecture, and security. Deep technical expertise across: Microsoft Entra ID (Azure AD) Microsoft Intune & Windows Autopilot Microsoft Defender Suite Exchange Online SharePoint Online Microsoft Teams Conditional Access & Identity Security Strong understanding of endpoint management, identity governance … technical standards, governance, and engineering improvements. Certifications (Desirable) MS-102: Microsoft 365 Administrator MD-102: Endpoint Administrator SC-Series Security Certifications AZ-Series Azure Certifications Why Join Us? This is an opportunity to become the Microsoft technical authority within a highly respected technology business. You'll work with ...