3 of 3 Remote Log Analytics Jobs in Watford

defence, directly contributing to investigations involving nation-state threat actors (including IR, CH, and NK based campaigns) while refining your craft across enterprise-scale log ingestion and customised Sentinel integration engineering that will stretch your skills, give you opportunity to ingest complex logs from a mass of cloud and … data sources and the chance to learn these as you go. The Role You'll own and optimise enterprise-wide log onboarding into Microsoft Sentinel – deploying standard and custom connectors, Function Apps, and parsers to build tailored SIEM solutions that drive real-world threat detection and response. Log ingestion at scale across numerous hybrid and multi-cloud environments Enhance custom Function Apps and ingestion pipelines Parse, normalise, and optimise log telemetry to ensure precision and cost control Partner with IR teams on real attacks – tuning rules against live threat actor activity Sync closely with Microsoft teams More ❯

and external engagements Skills and Experience IaaS (Windows/Linux) Azure networking (private endpoints, Azure firewalls, VPNs, IP Groups etc) Monitoring/Alerting/log Analytics Azure AD (Entra)/Local AD Windows Server, Active Directory, Hyper-V and high availability failover clustering PowerShell scripting and automation SD More ❯

extension through Prisma Access. Deploy and administer GlobalProtect for secure remote access across endpoints and locations. Leverage Cortex Data Lake for threat visibility and log analytics; implement and monitor Data Loss Prevention (DLP) policies. Collaborate with cloud, application, and infrastructure teams to align networking with business services. Implement More ❯