51 to 75 of 77 Remote/Hybrid Azure Sentinel Jobs

skills. * Ability to gather and translate business requirements into technical solutions. * Willingness to travel to client sites as required. * Microsoft Security, Compliance or Azure certifications. * Experience with Microsoft Defender technologies. * Understanding of GDPR, ISO 27001 and other compliance frameworks. * Knowledge of Zero Trust security principles. * Experience delivering Microsoft … Retention Policies, eDiscovery, eDiscovery Premium, Insider Risk Management, Communication Compliance, Microsoft Defender, Defender XDR, Defender for Office 365, Defender for Cloud Apps, Microsoft Sentinel, Microsoft Entra ID, Azure Active Directory, Conditional Access, Identity and Access Management (IAM), Zero Trust, GDPR, ISO 27001, Cyber Essentials, Risk Management ...

POINTS * £50,000 - £55,000 salary * 9-month fixed-term contract * Hybrid working with UK and occasional EU site travel * Microsoft 365, Azure, Entra ID, Intune, Autopilot, Sentinel & Defender * Lead technical integrations following business acquisitions ABOUT THE CLIENT We're working with a growing technology … networks, identity and security environments before designing practical integration plans. A major part of the role will involve Microsoft technologies including Microsoft 365, Azure, Entra ID, Intune, Autopilot, Sentinel and Defender for Endpoint. You'll also lead system rationalisation, identify duplication and technical gaps, and work ...

cloud environments, endpoints, networks, identity platforms and applications. Develop detection rules, SIEM content, investigation playbooks and response procedures. Improve monitoring capabilities across Microsoft Sentinel, Microsoft Defender and other security technologies. Conduct proactive threat hunting using threat intelligence, behavioural analytics and attacker techniques. Mentor Cyber Security Operations Analysts … leading security investigations through identification, containment, eradication and recovery. Experience using SIEM, EDR/XDR, cloud security and email security platforms, including Microsoft Sentinel, Microsoft Defender, Azure or AWS. Strong understanding of attacker tactics, techniques and procedures, including MITRE ATT&CK. Additional role information The role ...

processes - enrichment, ticketing, containment - using Python, Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius of an incident Run hypothesis-led threat hunts, not just reactive … equivalent) Practical scripting/automation experience (Python, Logic Apps, REST APIs) or hands-on SOAR platform configuration Working knowledge of several of: Microsoft Sentinel, Defender XDR, CrowdStrike, Microsoft Entra ID/Azure AD, Microsoft 365, AWS security tooling Experience investigating identity and cloud-based compromise, including ...

troubleshoot and resolve technical issues Strong knowledge of Microsoft cloud and security technologies, including Exchange Online, Entra ID (cloud and hybrid), and Azure Hands‐on experience with Microsoft identity and access security services, including Conditional Access, PIM, RBAC, and identity protection Experience deploying and supporting Microsoft XDR solutions … Protection and Purview (DLP, Data Lifecycle Management) Email security solutions such as Defender for Office 365, Mimecast, or Barracuda SIEM platforms including Microsoft Sentinel, Splunk, or LogRhythm Endpoint protection solutions such as Microsoft Defender, Sophos, or CrowdStrike Certifications Microsoft Certified: Azure Fundamentals – AZ-900 Microsoft Certified ...

protecting critical systems and data, while driving improvements across security operations, threat detection and incident response. You’ll work with technologies including Microsoft Sentinel, Security Copilot and Azure, collaborating with internal IT teams and an outsourced SOC to strengthen security capabilities. You’ll also have … methods. We’re looking for someone with: Experience in Cyber Security Operations, Incident Response or Threat Detection Strong hands-on experience with Microsoft Sentinel (SIEM) Experience with Microsoft Security Copilot or similar AI-assisted security tools Azure cloud security experience Experience working with an outsourced ...

dedicated Security Operations Centre (SOC) to support the defence of a major UK CNI organisation. The networks protected are predominantly hosted in Azure and AWS cloud platforms, with many hundred systems within these environments that must be protected. The customer is committed to development of this improved … groups or targeted ransomware attacks). Understand TCP/IP component layers to identify normal and abnormal traffic Understanding of AWS &/or Azure cloud services Experience of Splunk (with ES) &/or Sentinel, content development experience desirable Non-technical Client side consulting, including stakeholder engagement ...

dedicated Security Operations Centre (SOC) to support the defence of a major UK CNI organisation. The networks protected are predominantly hosted in Azure and AWS cloud platforms, with many hundred systems within these environments that must be protected. The customer is committed to development of this improved … groups or targeted ransomware attacks). Understand TCP/IP component layers to identify normal and abnormal traffic Understanding of AWS &/or Azure cloud services Experience of Splunk (with ES) &/or Sentinel, content development experience desirable Non-technical Client side consulting, including stakeholder engagement ...

provide recommendations to strengthen detection outcomesJob Requirements:Strong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferredExperience writing detection logic using KQL or similar query languagesProven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR … sources map to the attack lifecycleExperience with XDR or EDR platforms such as Microsoft Defender, CrowdStrike or CortexUnderstanding of cloud environments, particularly Azure, and associated security telemetryExperience working in customer-facing or consultancy rolesStrong communication skills, with the ability to explain technical concepts clearlyTechnical Competencies:SIEM ...

enterprise clients: SOC onboardings, SIEM and EDR rollouts, vulnerability management programmes and incident response service deployments, most of them built on Microsoft Sentinel, Defender and Azure. You'll own each engagement from scoping to handover, sitting between the client, the SOC and the engineers making it happen. … managing the trade-offs between them Confident with clients, and able to coordinate technical teams across departments Experience delivering projects on Microsoft Azure and the Microsoft cloud ecosystem, including transformation, migration or modernisation work Nice to have: PMP, PRINCE2 or an equivalent project management certification Experience working ...

development using modern DevOps practices to enhance security operations.Understanding of social engineering tactics, phishing attacks, and physical security measures.Experience with secured cloud architectures (Azure, AWS) and tools such as Microsoft Defender for Endpoint and Microsoft Sentinel.Attainment of relevant Microsoft accreditations (e.g. … empower individuals to create sustainable value through innovative technology solutions. As one of Microsoft's leading partners in the UK specializing in Azure, Security, Dynamics 365, and Microsoft 365, we have a proven track record of delivering transformational IT services.Our Selection Process:We are committed to providing ...

Defender (essential) KQL knowledge desirable Ability to work independently and manage complex cyber investigations Technical Exposure: IBM QRadar Microsoft Defender/EDR Microsoft Sentinel (desirable) Microsoft Entra ID/Azure AD Email threat response Incident Experience: Phishing & Business Email Compromise Malware & Ransomware Account Compromise Privilege Escalation ...

scripts and engineering workflows. Drive AI-assisted engineering practices and help shape responsible AI adoption. Build and maintain CI/CD pipelines using Azure DevOps and Git-based workflows. Develop dashboards, reporting solutions and operational insights using Power BI and other tooling. Work with Azure services … reporting or operational improvement roles. Scripting and development expertise using PowerShell, Python or similar languages. Experience building automation workflows and repeatable technical processes. Azure DevOps experience including repositories, pipelines, version control and release processes. Strong understanding of CI/CD, Git and software engineering best practices. Experience creating ...

cyber security posture . Detect, investigate, and respond to cyber threats and security incidents . Administer Identity & Access Management (IAM) across Microsoft , Azure , AWS , and SaaS platforms. Deploy and optimise Microsoft Defender , Microsoft Sentinel , and Microsoft Purview . Drive vulnerability management and penetration testing programmes. Secure … Requirements 4+ years' experience in a cyber security or information security role. Strong technical expertise in Microsoft Entra ID , Microsoft Defender Suite , Microsoft Sentinel , and Microsoft Purview . Proven experience managing vulnerability scanning and penetration testing programmes. Experience supporting ISO 27001 compliance and coordinating Cyber Essentials and Cyber ...

background in Cyber Security, Identity & Access Management (IAM), an MSP, MSSP or security consultancy. Desirable Experience Microsoft Defender for Identity. Microsoft Graph API. Azure Automation. Identity Governance. Microsoft Sentinel or Purview. BloodHound, PingCastle or similar identity assessment tools. Microsoft certifications such ...

regulatory stipulations regarding security incidents on a global scale Experience in operationalizing automation to support process efficiency Experience with SIEM technologies (i.e. Sentinel), cloud-based management and investigation consoles (i.e. Azure), and other Digital Forensics analysis tools Deep understanding of both Windows and Unix/Linux ...

Running workshops, coverage assessments and use case catalogues as customer deliverables What we're looking for Hands-on SIEM engineering experience, ideally Microsoft Sentinel Confident KQL — this is the core of the role SOAR playbook design in Azure Logic Apps, Cortex XSOAR or similar Scripting … Python or PowerShell, and comfort working with APIs Use case design against MITRE ATT&CK Working knowledge of XDR/EDR platforms and Azure telemetry sources Some exposure to NDR tooling such as Vectra AI or Corelight is a bonus Consultancy or customer-facing experience is valuable ...

skills for proposals, presentations and technical documentation. Full UK driving licence and willingness to travel. Desirable Experience & Skills Hands-on experience with Microsoft Sentinel and Microsoft Defender. Experience delivering technical demonstrations. Knowledge of SOAR, automation and AI-assisted security operations. Microsoft or other relevant cyber security certifications. Experience … security certifications, supported by Nomios through training, study time and lab access. Target certifications include: SC-200 Microsoft Security Operations Analyst AZ-500 Azure Security Engineer Associate SC-100 Microsoft Cybersecurity Architect Relevant Microsoft partner accreditations Job Specifics Location : This is a hybrid role, requiring attendance ...

organisation. Manage relationships with external security providers, partners, and auditors. Technology Environment You will work across a modern technology estate including: Microsoft Azure Microsoft Intune Okta Identity & Access Management Zscaler SentinelOne Mimecast Abnormal AI Tenable KnowBe4 SD-WAN Technologies SIEM and Security Monitoring Platforms About … compliance. Experience implementing and supporting security frameworks such as Cyber Essentials, Cyber Essentials Plus, ISO 27001, or similar. Strong knowledge of Microsoft Azure security and cloud governance. Experience working with modern identity, endpoint protection, email security, and security monitoring platforms. Experience managing cyber security incidents and supporting recovery ...

regulatory engagements, including FCA supervisory requests and third-party due diligence. Technical security & architecture: Define and enforce the security architecture across our Azure-native, Kubernetes-based platform. Govern security controls across the full stack: Kafka, .NET/C#, Vue.js, Kong API Gateway, Auth0, and Salesforce. Lead threat modelling … security incident response plan; lead major incident management for cyber events. Operate and improve security monitoring, SIEM, and alerting across the Azure estate. Run the security awareness and training programme for all ~180 staff. Manage relationships with external SOC, MSSP, and specialist security partners. Requirements Demonstrable experience leading ...

This role can offer 3 days remote working. Essential Experience: Strong technical expertise in security, network, and infrastructure technologies, including experience with secure Azure/AWS cloud environments, Microsoft Defender for Endpoint, Microsoft Sentinel, and security tooling development. Proven ability to drive security automation and operational ...

vulnerabilities. This role can offer 3 days remote working.Essential Experience:Strong technical expertise in security, network, and infrastructure technologies, including experience with secure Azure/AWS cloud environments, Microsoft Defender for Endpoint, Microsoft Sentinel, and security tooling development.Proven ability to drive security automation and operational improvements ...

Pipeline & Analytics, who can lead the engineering strategy, architecture, delivery, and operational excellence of Allstate’s enterprise telemetry and analytics platforms, including Cribl, Azure Data Explorer (ADX), and related observability data services, and own the end‐to‐end observability pipeline ecosystem that enables scalable collection, transformation, routing, governance … employment at Allstate. Allstate is not providing sponsorship for this vacancy. A minimum of 3years’ experience with Cribl Stream, Cribl Edge, Azure Data Explorer (ADX), or equivalent large‐scale telemetry platforms. A minimum of 2years experience leading enterprise observability, telemetry, logging, or analytics platform engineering teams. Hands ...

Group Policy and identity services Oversee Microsoft Entra, Conditional Access, MFA, PIM and SSPR Monitor and respond to security incidents using Defender and Sentinel Manage email protection, retention policies, eDiscovery and VPN services Develop PowerShell automation to improve operational efficiency Contribute to platform upgrades, security improvements and cloud … adoption initiatives Essential Skills Strong Microsoft 365 administration experience Hybrid Exchange and Exchange Online expertise Active Directory administration and troubleshooting Microsoft Entra ID (Azure AD) experience Microsoft Defender and/or Sentinel security experience PowerShell scripting and automation Strong understanding of security best practices and identity ...

cyber security. It’s a hands-on, varied role where you’ll help design, maintain, and secure a mix of on-premise and Azure environments.You’ll work across servers, networks, storage, and security tools, contributing to infrastructure projects as well as cyber initiatives such as vulnerability management, incident … date.Key skills we’re looking for:Strong background across servers, networks, and SAN/NAS storageExperience designing and maintaining secure hybrid infrastructure (Azure ideal)Hands-on experience with security tools (Defender, Sentinel, Tenable, Zscaler etc.)Palo Alto deployment/configuration experience is a mustGood understanding ...