126 to 150 of 189 Azure Sentinel Jobs

skills. * Ability to gather and translate business requirements into technical solutions. * Willingness to travel to client sites as required. * Microsoft Security, Compliance or Azure certifications. * Experience with Microsoft Defender technologies. * Understanding of GDPR, ISO 27001 and other compliance frameworks. * Knowledge of Zero Trust security principles. * Experience delivering Microsoft … Retention Policies, eDiscovery, eDiscovery Premium, Insider Risk Management, Communication Compliance, Microsoft Defender, Defender XDR, Defender for Office 365, Defender for Cloud Apps, Microsoft Sentinel, Microsoft Entra ID, Azure Active Directory, Conditional Access, Identity and Access Management (IAM), Zero Trust, GDPR, ISO 27001, Cyber Essentials, Risk Management ...

positive work-life balance.Main tasks: Monitor security alerts, logs and events across key platforms including SIEM, EDR/XDR, Microsoft Defender, Microsoft Sentinel, email security, cloud security and network monitoring tools.Support timely incident response, containment, remediation, recovery and post-incident review activity with internal teams and third-party … confident supporting incident response, vulnerability management, risk and compliance activities, and security operations.Experience with Microsoft security solutions such as Defender, Sentinel, Purview, Entra, and Azure is desirable. Knowledge of security awareness training, phishing simulations, supplier assurance, and security reporting would be an advantage. ...

POINTS * £50,000 - £55,000 salary * 9-month fixed-term contract * Hybrid working with UK and occasional EU site travel * Microsoft 365, Azure, Entra ID, Intune, Autopilot, Sentinel & Defender * Lead technical integrations following business acquisitions ABOUT THE CLIENT We're working with a growing technology … networks, identity and security environments before designing practical integration plans. A major part of the role will involve Microsoft technologies including Microsoft 365, Azure, Entra ID, Intune, Autopilot, Sentinel and Defender for Endpoint. You'll also lead system rationalisation, identify duplication and technical gaps, and work ...

senior security engineer to bridge cloud security, detection tooling, and incident response. You will own meaningful parts of the security stack, contribute to Azure hardening, and coordinate pen-test cycles. The role is a contract position with day-one impact and independent work expectations. You’ll bring hands … SIEM experience (Microsoft Sentinel preferred), Azure security knowledge, Terraform/Bicep for security tooling, and a proactive approach #J-18808-Ljbffr ...

cloud environments, endpoints, networks, identity platforms and applications. Develop detection rules, SIEM content, investigation playbooks and response procedures. Improve monitoring capabilities across Microsoft Sentinel, Microsoft Defender and other security technologies. Conduct proactive threat hunting using threat intelligence, behavioural analytics and attacker techniques. Mentor Cyber Security Operations Analysts … leading security investigations through identification, containment, eradication and recovery. Experience using SIEM, EDR/XDR, cloud security and email security platforms, including Microsoft Sentinel, Microsoft Defender, Azure or AWS. Strong understanding of attacker tactics, techniques and procedures, including MITRE ATT&CK. Additional role information The role ...

client stakeholders (engineering, security, operations) to validate requirements, manage technical risks, and coordinate delivery plans and change windows. QualificationsRequiredStrong track record delivering production Azure environments, including hands-on experience ofnetworking, IAM, governance, and security controls, ideally through working with external clients Significant hands-on experience implementing and operating … restore, performance, and HA/DR. Strong experience with Infrastructure as Code (Terraform and/or Bicep/ARM) and CI/CD (Azure DevOps, GitHub Actions, GitLab CI or similar). Solid cloud security engineering knowledge: RBAC/IAM, private networking, key/secrets management, encryption, secure ...

client stakeholders (engineering, security, operations) to validate requirements, manage technical risks, and coordinate delivery plans and change windows. QualificationsRequiredStrong track record delivering production Azure environments, including hands-on experience ofnetworking, IAM, governance, and security controls, ideally through working with external clients Significant hands-on experience implementing and operating … restore, performance, and HA/DR. Strong experience with Infrastructure as Code (Terraform and/or Bicep/ARM) and CI/CD (Azure DevOps, GitHub Actions, GitLab CI or similar). Solid cloud security engineering knowledge: RBAC/IAM, private networking, key/secrets management, encryption, secure ...

processes - enrichment, ticketing, containment - using Python, Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius of an incident Run hypothesis-led threat hunts, not just reactive … equivalent) Practical scripting/automation experience (Python, Logic Apps, REST APIs) or hands-on SOAR platform configuration Working knowledge of several of: Microsoft Sentinel, Defender XDR, CrowdStrike, Microsoft Entra ID/Azure AD, Microsoft 365, AWS security tooling Experience investigating identity and cloud-based compromise, including ...

troubleshoot and resolve technical issues Strong knowledge of Microsoft cloud and security technologies, including Exchange Online, Entra ID (cloud and hybrid), and Azure Hands‐on experience with Microsoft identity and access security services, including Conditional Access, PIM, RBAC, and identity protection Experience deploying and supporting Microsoft XDR solutions … Protection and Purview (DLP, Data Lifecycle Management) Email security solutions such as Defender for Office 365, Mimecast, or Barracuda SIEM platforms including Microsoft Sentinel, Splunk, or LogRhythm Endpoint protection solutions such as Microsoft Defender, Sophos, or CrowdStrike Certifications Microsoft Certified: Azure Fundamentals – AZ-900 Microsoft Certified ...

protecting critical systems and data, while driving improvements across security operations, threat detection and incident response. You’ll work with technologies including Microsoft Sentinel, Security Copilot and Azure, collaborating with internal IT teams and an outsourced SOC to strengthen security capabilities. You’ll also have … methods. We’re looking for someone with: Experience in Cyber Security Operations, Incident Response or Threat Detection Strong hands-on experience with Microsoft Sentinel (SIEM) Experience with Microsoft Security Copilot or similar AI-assisted security tools Azure cloud security experience Experience working with an outsourced ...

against Windows, macOS, and Linux platforms. Awareness of anti-virus, anti-malware, and endpoint protection concepts. Familiarity with SIEM concepts (Cortex XSIAM, Microsoft Sentinel, or equivalent). Familiarity with cloud services (Microsoft Azure, Microsoft 365, AWS). Awareness of incident management processes. Understanding of adversary motivations ...

dedicated Security Operations Centre (SOC) to support the defence of a major UK CNI organisation. The networks protected are predominantly hosted in Azure and AWS cloud platforms, with many hundred systems within these environments that must be protected. The customer is committed to development of this improved … groups or targeted ransomware attacks). Understand TCP/IP component layers to identify normal and abnormal traffic Understanding of AWS &/or Azure cloud services Experience of Splunk (with ES) &/or Sentinel, content development experience desirable Non-technical Client side consulting, including stakeholder engagement ...

dedicated Security Operations Centre (SOC) to support the defence of a major UK CNI organisation. The networks protected are predominantly hosted in Azure and AWS cloud platforms, with many hundred systems within these environments that must be protected. The customer is committed to development of this improved … groups or targeted ransomware attacks). Understand TCP/IP component layers to identify normal and abnormal traffic Understanding of AWS &/or Azure cloud services Experience of Splunk (with ES) &/or Sentinel, content development experience desirable Non-technical Client side consulting, including stakeholder engagement ...

provide recommendations to strengthen detection outcomesJob Requirements:Strong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferredExperience writing detection logic using KQL or similar query languagesProven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR … sources map to the attack lifecycleExperience with XDR or EDR platforms such as Microsoft Defender, CrowdStrike or CortexUnderstanding of cloud environments, particularly Azure, and associated security telemetryExperience working in customer-facing or consultancy rolesStrong communication skills, with the ability to explain technical concepts clearlyTechnical Competencies:SIEM ...

CISSP, CCSP, CISM, SANS. Microsoft Security and Exposure Management: Build strong knowledge of Microsoft Security tools such as Defender for Cloud, Microsoft Sentinel, Defender XDR, Security Copilot, Entra ID, and Exposure Management capabilities to help clients identify, prioritise, and reduce security risks across cloud and hybrid environments. Cloud … engaged technology professionals to join our Managed Services team delivering continuous value to our client’s businesses. We are seeking a n Azure Cloud Architect with experience in Cloud Resiliency Architect ure who is passionate about improving reliability, continuity, and disaster recovery capabilities of enterprise cloud environments. ...

control improvements, and reporting outputs against agreed engagement milestones.• Contribute to solution architecture and pre-sales deal shaping for cloud security, Microsoft Defender, Sentinel, Entra, Defender for Cloud, and exposure management opportunities.Build trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales engagements.• Design … implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies.• Understand threat modelling, attack paths, cloud misconfigurations, identity risks, vulnerabilities, and how to prioritise remediation based on exploitability and business impact.• Understand ...

enterprise clients: SOC onboardings, SIEM and EDR rollouts, vulnerability management programmes and incident response service deployments, most of them built on Microsoft Sentinel, Defender and Azure. You'll own each engagement from scoping to handover, sitting between the client, the SOC and the engineers making it happen. … managing the trade-offs between them Confident with clients, and able to coordinate technical teams across departments Experience delivering projects on Microsoft Azure and the Microsoft cloud ecosystem, including transformation, migration or modernisation work Nice to have: PMP, PRINCE2 or an equivalent project management certification Experience working ...

development using modern DevOps practices to enhance security operations.Understanding of social engineering tactics, phishing attacks, and physical security measures.Experience with secured cloud architectures (Azure, AWS) and tools such as Microsoft Defender for Endpoint and Microsoft Sentinel.Attainment of relevant Microsoft accreditations (e.g. … empower individuals to create sustainable value through innovative technology solutions. As one of Microsoft's leading partners in the UK specializing in Azure, Security, Dynamics 365, and Microsoft 365, we have a proven track record of delivering transformational IT services.Our Selection Process:We are committed to providing ...

client environment In-depth knowledge of Windows Server and Active Directory Strong Microsoft 365 administration and troubleshooting experience Experience with Microsoft Intune and Azure cloud infrastructure Strong networking knowledge including DNS, DHCP, VPNs and firewalls Excellent troubleshooting and problem-solving skills A structured approach to technical documentation Excellent … Scoping, planning and delivering infrastructure projects Managing on-premise to cloud migrations and hardware refreshes Standardising and securing client environments using Microsoft Intune, Azure/Entra ID and Microsoft 365 Supporting and maintaining physical servers, Hyper-V/VMware environments and network infrastructure Delivering advanced troubleshooting and resolving ...

Defender (essential) KQL knowledge desirable Ability to work independently and manage complex cyber investigations Technical Exposure: IBM QRadar Microsoft Defender/EDR Microsoft Sentinel (desirable) Microsoft Entra ID/Azure AD Email threat response Incident Experience: Phishing & Business Email Compromise Malware & Ransomware Account Compromise Privilege Escalation ...

scripts and engineering workflows. Drive AI-assisted engineering practices and help shape responsible AI adoption. Build and maintain CI/CD pipelines using Azure DevOps and Git-based workflows. Develop dashboards, reporting solutions and operational insights using Power BI and other tooling. Work with Azure services … reporting or operational improvement roles. Scripting and development expertise using PowerShell, Python or similar languages. Experience building automation workflows and repeatable technical processes. Azure DevOps experience including repositories, pipelines, version control and release processes. Strong understanding of CI/CD, Git and software engineering best practices. Experience creating ...

cyber security posture . Detect, investigate, and respond to cyber threats and security incidents . Administer Identity & Access Management (IAM) across Microsoft , Azure , AWS , and SaaS platforms. Deploy and optimise Microsoft Defender , Microsoft Sentinel , and Microsoft Purview . Drive vulnerability management and penetration testing programmes. Secure … Requirements 4+ years' experience in a cyber security or information security role. Strong technical expertise in Microsoft Entra ID , Microsoft Defender Suite , Microsoft Sentinel , and Microsoft Purview . Proven experience managing vulnerability scanning and penetration testing programmes. Experience supporting ISO 27001 compliance and coordinating Cyber Essentials and Cyber ...

background in Cyber Security, Identity & Access Management (IAM), an MSP, MSSP or security consultancy. Desirable Experience Microsoft Defender for Identity. Microsoft Graph API. Azure Automation. Identity Governance. Microsoft Sentinel or Purview. BloodHound, PingCastle or similar identity assessment tools. Microsoft certifications such ...

modernisation, and AI adoption programmes. Support pre‐sales activities, workshops, proof of concepts, and executive presentations. Technology & Innovation Drive capability development across Microsoft Azure, Microsoft 365 Security, Microsoft Defender Suite, Microsoft Sentinel, Microsoft Entra, Microsoft Copilot for Security, Microsoft Purview, AWS Security, Google Cloud Security … Access), Microsoft 365 Defender (Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps), Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Copilot for Security, Microsoft Intune, AWS Security Services, Google Cloud. Technical Expertise Microsoft Entra (Identity, Identity Protection, Identity Governance, Internet Access, Private Access ...

facts when evidence is incomplete, coordinate technical teams during live incidents and apply sound incident response methodology even when tooling is degraded. Microsoft Sentinel and Defender XDR will be central to your work, but calm judgement, investigative discipline and clear communication will matter just as much.What you will … complex security incident investigations from initial assessment through containment, recovery and review.Establish incident scope, business impact and likely root cause using Microsoft Sentinel, Defender XDR and evidence from across the enterprise environment.Direct response actions in partnership with infrastructure, identity, cloud, application and wider IT teams.Maintain clear investigation records ...