1 to 25 of 39 Remote/Hybrid Azure Sentinel Jobs in the UK excluding London

Military Recruitment are currently seeking a Senior Infrastructure Engineer on behalf of one of our clients. We are seeking an Engineer with strong Azure, Windows Server, Linux, networking and endpoint security experience to support enterprise infrastructure platforms across on-premises and cloud environments. The role will focus … deploying and supporting XDR agents, Azure Arc onboarding, Azure Monitor Agent (AMA) installations, infrastructure monitoring and maintaining secure, reliable platform services across Windows and Linux server estates. Our client encourages applications from ex-military personnel however all candidates will be given due consideration. Duties and Responsibilities ...

Military Recruitment are currently seeking a Senior Infrastructure Engineer on behalf of one of our clients. We are seeking an Engineer with strong Azure, Windows Server, Linux, networking and endpoint security experience to support enterprise infrastructure platforms across on-premises and cloud environments. The role will focus … deploying and supporting XDR agents, Azure Arc onboarding, Azure Monitor Agent (AMA) installations, infrastructure monitoring and maintaining secure, reliable platform services across Windows and Linux server estates. Our client encourages applications from ex-military personnel however all candidates will be given due consideration. Duties and Responsibilities ...

Azure Platform Architect Location: UK Working Pattern: Hybrid/Client-facing Security Clearance: UK Government Security Clearance required We’re looking for an experienced Azure Platform Architect to join a growing cloud and infrastructure practice, taking a leading role in the design and delivery of secure … scalable Azure platforms for enterprise and public-sector customers. This is a hands-on architecture position with significant client exposure. You’ll combine deep Azure platform expertise with strong consulting and leadership skills, helping organisations shape their cloud strategy, modernise infrastructure and deliver large-scale transformation ...

Platform Engineer Azure Infrastructure, Monitoring & Endpoint Security 6 month initial contract £575 - £620 per day Hybrid working - 3 days in Milton Keynes Role Overview We are currently recruiting for a hands-on Platform Engineer with strong Azure administration, server infrastructure, monitoring, endpoint security, and automation experience. … will be supporting and improving hybrid infrastructure across Microsoft Azure, on-premises, Windows, and Linux platforms, with a focus on Azure Arc, Azure Monitor Agent, and XDR/EDR deployment. You will work closely with Infrastructure, Operations, and Cyber Security teams, youll automate deployments ...

demonstrable capability in pipeline engineering and Infrastructure as Code, with hands‐on experience designing, implementing and optimising CI/CD pipelines (for example Azure DevOps, GitHub Actions or GitLab CI) and defining reusable, governed infrastructure using Terraform and Azure‐native tooling (ARM or Bicep), setting … engineering standards that others follow. Containerisation and orchestration Extensive experience building and operating scalable, resilient container platforms using Docker and Kubernetes, preferably Azure Kubernetes Service, from design through to production support. Security and DevSecOps Strong, practical application of secure‐by‐design and Zero Trust principles, including managed identities ...

across identity, security, cloud, infrastructure, networking, data protection and operational security domains, with a particular focus on Microsoft technologies including Entra ID, Defender, Sentinel, Purview, Azure and Microsoft 365.Salary & BenefitsThe budgeted salary for this role is up to 90,000 year, depending on experience.Click here … Active Directory, Identity Governance, PIM, Conditional Access, SSO, Federation, and B2B/B2C identity.Provide architectural ownership across the Microsoft security stack, including Defender, Sentinel, Purview, Intune, Security Copilot, Azure Security, and Microsoft 365 Security & Compliance.Develop reusable security patterns for identity, threat, data protection, monitoring, compliance ...

across identity, security, cloud, infrastructure, networking, data protection and operational security domains, with a particular focus on Microsoft technologies including Entra ID, Defender, Sentinel, Purview, Azure and Microsoft 365.Salary & BenefitsThe budgeted salary for this role is up to 90,000 year, depending on experience.Click here … Active Directory, Identity Governance, PIM, Conditional Access, SSO, Federation, and B2B/B2C identity.Provide architectural ownership across the Microsoft security stack, including Defender, Sentinel, Purview, Intune, Security Copilot, Azure Security, and Microsoft 365 Security & Compliance.Develop reusable security patterns for identity, threat, data protection, monitoring, compliance ...

across identity, security, cloud, infrastructure, networking, data protection and operational security domains, with a particular focus on Microsoft technologies including Entra ID, Defender, Sentinel, Purview, Azure and Microsoft 365.Salary & BenefitsThe budgeted salary for this role is up to 90,000 year, depending on experience. Click here … Directory, Identity Governance, PIM, Conditional Access, SSO, Federation, and B2B/B2C identity. Provide architectural ownership across the Microsoft security stack, including Defender, Sentinel, Purview, Intune, Security Copilot, Azure Security, and Microsoft 365 Security & Compliance. Develop reusable security patterns for identity, threat, data protection, monitoring, compliance ...

across identity, security, cloud, infrastructure, networking, data protection and operational security domains, with a particular focus on Microsoft technologies including Entra ID, Defender, Sentinel, Purview, Azure and Microsoft 365.Salary & BenefitsThe budgeted salary for this role is up to 90,000 year, depending on experience. Click here … Directory, Identity Governance, PIM, Conditional Access, SSO, Federation, and B2B/B2C identity. Provide architectural ownership across the Microsoft security stack, including Defender, Sentinel, Purview, Intune, Security Copilot, Azure Security, and Microsoft 365 Security & Compliance. Develop reusable security patterns for identity, threat, data protection, monitoring, compliance ...

willingness to support occasional out-of-hours requirements is also needed. Desirable Experience Experience with any of the following would be useful: Microsoft Azure, Microsoft 365, Entra ID, Defender or Sentinel. SIEM, endpoint detection and response, secure web gateways, email security or privileged access technologies. Security audits ...

across cloud, identity, endpoint and network platforms, and carry out malware analysis and threat validation. Design, implement and optimise detection content across Microsoft Sentinel, Defender XDR, CrowdStrike and associated platforms, developing advanced KQL queries and analytics rules aligned to MITRE ATT&CK. Act as senior technical owner … security platforms including Microsoft Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune, Darktrace and supporting technologies, managing platform health, onboarding and configuration. Design and maintain automation and orchestration workflows using Logic Apps, Sentinel Playbooks, Power Automate, PowerShell, Python and API integrations to reduce manual operational effort. ...

Depending on the client environment and engagement, you can expect to work across technologies including: SIEM and security analytics platforms, such as Microsoft Sentinel and Splunk. SOAR and security automation technologies used for enrichment, triage and response orchestration. Endpoint Detection and Response (EDR/XDR) platforms, such … Microsoft Defender for Endpoint and CrowdStrike Falcon. Threat intelligence, detection engineering, investigation and incident response technologies. Cloud security monitoring across Microsoft Azure, AWS and GCP environments. What you can expect Work collaboratively across multiple technical teams and stakeholder groups, using your Security Operations expertise to solve complex client ...

Working within our security team, you'll play a key role in designing, improving and managing Microsoft security technologies, including Microsoft Defender, Microsoft Sentinel and Microsoft Purview. This is an opportunity to work on meaningful projects that strengthen our cyber security capabilities, improve data protection and support regulatory … tools, drive automation and help shape the future of security operations at Bupa. Key Responsibilities Lead the configuration and continuous improvement of Microsoft Sentinel as our central security monitoring and response platform Develop and maintain detection rules, dashboards, workbooks and threat-hunting queries using KQL Create and enhance ...

considered for the job. Please see job description attached for full list of responsibilities. Person Specification Knowledge Knowledge of Microsoft Defender, Sentinel, including Kusto Query Language (KQL), threat hunting, analytics rule development, security monitoring, incident investigation and automation capabilities. Education/Qualifications Holds highly developed specialist knowledge … cyber security objectives. Skills/Knowledge Demonstrable hands-on experience securing, supporting, implementing, and improving cyber security controls across enterprises in Microsoft O365, Azure, AWS, and on-premises or cloud environments. Strong technical expertise in network security, cloud security, identity and access management, endpoint security, infrastructure hardening, vulnerability ...

supporting the wider team. Lead serious incidents, forensic investigations and root cause analysis. Develop detections, automation and orchestration; conduct proactive threat hunting. Engineer Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune and Darktrace. Support Microsoft 365, Azure, AWS, identity and endpoint security. Maintain documentation, support compliance … mentor colleagues. Experience and qualifications Substantial SOC, cyber operations or security engineering experience. Hands-on Sentinel, Defender XDR and CrowdStrike expertise. Incident response, malware analysis, forensics and threat hunting. Advanced KQL; PowerShell and/or Python automation. Entra ID, Conditional Access, Intune and Microsoft 365 security. Cloud ...

Cyber Security Analyst - Microsoft Security/IAM 3-Month Contract | Inside IR35 Bristol/Hybrid - Ideally 1-2 days per week onsite Microsoft Sentinel | Entra ID | IAM | Conditional Access | MFA | RBAC We're looking for an experienced Cyber Security Analyst to join a highly innovative organisation in Bristol … Identity & Access Management within the Microsoft ecosystem , so we're looking for somebody with strong hands-on knowledge of Entra ID/Azure AD, Conditional Access, MFA and RBAC , alongside experience working with Microsoft Sentinel . What you'll be doing Supporting and improving Identity & Access ...

implementation and ongoing support. The organisation is investing heavily in its security capabilities and Microsoft technology estate, with several key initiatives planned across Azure and Microsoft 365. The successful candidate will play a pivotal role in helping shape and deliver these programmes while supporting the wider security function. … optimisation, supporting MDM and MAM capabilities. Microsoft Purview and Data Loss Prevention (DLP) implementation and enhancement. Ongoing development of Microsoft 365 and Azure security controls. Improvements to monitoring, detection and response capabilities across the security estate. What We're Looking For We're interested in speaking with candidates ...

provide recommendations to strengthen detection outcomes Job Requirements: Strong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps … attack lifecycle Experience with XDR or EDR platforms such as Microsoft Defender, CrowdStrike or Cortex Understanding of cloud environments, particularly Azure, and associated security telemetry Experience working in customer-facing or consultancy roles Strong communication skills, with the ability to explain technical concepts clearly Technical Competencies: SIEM ...

development using modern DevOps practices to enhance security operations.Understanding of social engineering tactics, phishing attacks, and physical security measures.Experience with secured cloud architectures (Azure, AWS) and tools such as Microsoft Defender for Endpoint and Microsoft Sentinel.Attainment of relevant Microsoft accreditations (e.g. … empower individuals to create sustainable value through innovative technology solutions. As one of Microsoft's leading partners in the UK specializing in Azure, Security, Dynamics 365, and Microsoft 365, we have a proven track record of delivering transformational IT services.Our Selection Process:We are committed to providing ...

modern DevOps practices to enhance security operations. Understanding of social engineering tactics, phishing attacks, and physical security measures. Experience with secured cloud architectures (Azure, AWS) and tools such as Microsoft Defender for Endpoint and Microsoft Sentinel. Attainment of relevant Microsoft accreditations (e.g. … empower individuals to create sustainable value through innovative technology solutions. As one of Microsoft's leading partners in the UK specializing in Azure, Security, Dynamics 365, and Microsoft 365, we have a proven track record of delivering transformational IT services. Our Selection Process: We are committed to providing ...

Analyst (MS Sentinel & Defender, SC Cleared) | Contract Length: 3 month initial contract Location: Harlow Hybrid initially (1 day per week onsite), potential for remote after first week Inside IR35 Clearance Required: SC clearance - candidates must have valid clearance We're looking for an experienced SOC Analyst Consultant … security team within a large enterprise environment. Key Requirements: Demonstrable experience as a SOC Analyst Strong hands-on experience with SIEM, including Microsoft Sentinel Experience monitoring, triaging, and investigating security incidents Knowledge of incident response lifecycle and root cause analysis Experience with Microsoft Defender (essential) KQL knowledge desirable ...

processes - enrichment, ticketing, containment - using Python, Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius of an incident Run hypothesis-led threat hunts, not just reactive … equivalent) Practical scripting/automation experience (Python, Logic Apps, REST APIs) or hands-on SOAR platform configuration Working knowledge of several of: Microsoft Sentinel, Defender XDR, CrowdStrike, Microsoft Entra ID/Azure AD, Microsoft 365, AWS security tooling Experience investigating identity and cloud-based compromise, including ...

endpoint-focused security architecture for user-facing environments Data protection and compliance capabilities through Microsoft Purview Modern SOC enablement leveraging Defender and Sentinel telemetry alongside broader tooling The secure adoption of Microsoft Copilot and AI/LLM-driven capabilities, ensuring appropriate governance, data protection and access controls What … including Conditional Access, MFA and Privileged Identity Management (PIM) Support the modernisation of our clients SOC operating model, leveraging Defender and Sentinel for user and endpoint telemetry, alongside integration of broader infrastructure data sources Conduct security architecture reviews and provide assurance for solutions leveraging Microsoft security technologies, including ...

dedicated Security Operations Centre (SOC) to support the defence of a major UK CNI organisation. The networks protected are predominantly hosted in Azure and AWS cloud platforms, with many hundred systems within these environments that must be protected. The customer is committed to development of this improved … groups or targeted ransomware attacks). Understand TCP/IP component layers to identify normal and abnormal traffic Understanding of AWS &/or Azure cloud services Experience of Splunk (with ES) &/or Sentinel, content development experience desirable Non-technical Client side consulting, including stakeholder engagement ...

dedicated Security Operations Centre (SOC) to support the defence of a major UK CNI organisation. The networks protected are predominantly hosted in Azure and AWS cloud platforms, with many hundred systems within these environments that must be protected. The customer is committed to development of this improved … groups or targeted ransomware attacks). Understand TCP/IP component layers to identify normal and abnormal traffic Understanding of AWS &/or Azure cloud services Experience of Splunk (with ES) &/or Sentinel, content development experience desirable Non-technical Client side consulting, including stakeholder engagement ...