151 to 175 of 189 Azure Sentinel Jobs

facts when evidence is incomplete, coordinate technical teams during live incidents and apply sound incident response methodology even when tooling is degraded. Microsoft Sentinel and Defender XDR will be central to your work, but calm judgement, investigative discipline and clear communication will matter just as much. What … complex security incident investigations from initial assessment through containment, recovery and review. Establish incident scope, business impact and likely root cause using Microsoft Sentinel, Defender XDR and evidence from across the enterprise environment. Direct response actions in partnership with infrastructure, identity, cloud, application and wider IT teams. Maintain ...

facts when evidence is incomplete, coordinate technical teams during live incidents and apply sound incident response methodology even when tooling is degraded. Microsoft Sentinel and Defender XDR will be central to your work, but calm judgement, investigative discipline and clear communication will matter just as much. What … complex security incident investigations from initial assessment through containment, recovery and review. Establish incident scope, business impact and likely root cause using Microsoft Sentinel, Defender XDR and evidence from across the enterprise environment. Direct response actions in partnership with infrastructure, identity, cloud, application and wider IT teams. Maintain ...

facts when evidence is incomplete, coordinate technical teams during live incidents and apply sound incident response methodology even when tooling is degraded. Microsoft Sentinel and Defender XDR will be central to your work, but calm judgement, investigative discipline and clear communication will matter just as much. What … complex security incident investigations from initial assessment through containment, recovery and review. Establish incident scope, business impact and likely root cause using Microsoft Sentinel, Defender XDR and evidence from across the enterprise environment. Direct response actions in partnership with infrastructure, identity, cloud, application and wider IT teams. Maintain ...

regulatory stipulations regarding security incidents on a global scale Experience in operationalizing automation to support process efficiency Experience with SIEM technologies (i.e. Sentinel), cloud-based management and investigation consoles (i.e. Azure), and other Digital Forensics analysis tools Deep understanding of both Windows and Unix/Linux ...

Running workshops, coverage assessments and use case catalogues as customer deliverables What we're looking for Hands-on SIEM engineering experience, ideally Microsoft Sentinel Confident KQL — this is the core of the role SOAR playbook design in Azure Logic Apps, Cortex XSOAR or similar Scripting … Python or PowerShell, and comfort working with APIs Use case design against MITRE ATT&CK Working knowledge of XDR/EDR platforms and Azure telemetry sources Some exposure to NDR tooling such as Vectra AI or Corelight is a bonus Consultancy or customer-facing experience is valuable ...

customer and client security-assurance questionnaires on the business's behalf. Responsibilities Monitor, correlate and triage security alerts and activity across Microsoft 365, Azure, Entra ID, AWS, Databricks, endpoints and network services, using native tools and the central SIEM. Act as the primary internal contact for the managed … Hands-on SecOps experience using SIEM, EDR/XDR and cloud/identity telemetry, ideally with a managed SOC. Practical Microsoft security experience (Sentinel, Defender, Entra ID, Purview) and exposure to AWS; Databricks familiarity a plus. Demonstrable ISO/IEC 27001:2022 experience - collecting and presenting control evidence ...

quality outcomes.Strong written skills for proposals, presentations and technical documentation.Full UK driving licence and willingness to travel.Desirable Experience & SkillsHands-on experience with Microsoft Sentinel and Microsoft Defender.Experience delivering technical demonstrations.Knowledge of SOAR, automation and AI-assisted security operations.Microsoft or other relevant cyber security certifications.Experience positioning managed security services.Exposure … relevant Microsoft security certifications, supported by Nomios through training, study time and lab access.Target certifications include: SC-200 Microsoft Security Operations AnalystAZ-500 Azure Security Engineer AssociateSC-100 Microsoft Cybersecurity ArchitectRelevant Microsoft partner accreditationsJob SpecificsLocation: This is a hybrid role, requiring attendance at our customer sites and Basingstoke ...

skills for proposals, presentations and technical documentation. Full UK driving licence and willingness to travel. Desirable Experience & Skills Hands-on experience with Microsoft Sentinel and Microsoft Defender. Experience delivering technical demonstrations. Knowledge of SOAR, automation and AI-assisted security operations. Microsoft or other relevant cyber security certifications. Experience … security certifications, supported by Nomios through training, study time and lab access. Target certifications include: SC-200 Microsoft Security Operations Analyst AZ-500 Azure Security Engineer Associate SC-100 Microsoft Cybersecurity Architect Relevant Microsoft partner accreditations Job Specifics Location : This is a hybrid role, requiring attendance ...

focus on incident response, SOC operations, or cyber defense.Hands-on experience with SIEM, EDR/XDR, and log analysis tools (e.g., Splunk, Sentinel, CrowdStrike).Practical understanding of incident response methodologies and frameworks such as MITRE ATT&CK and NIST.Familiarity with threat hunting, malware analysis, or forensic investigation techniques.Exposure … cloud environments (AWS, Azure, or GCP) and modern enterprise architectures is preferred.Strong analytical and problem-solving skills, with the ability to communicate technical findings clearly.Relevant certifications (e.g., Security+, GCIH, GCIA, or equivalent) are a plus.Job SummaryID: F7B7BD6054Department: Intelligence & Analysis, Intelligence & InvestigationsType: contract time ...

focus on incident response, SOC operations, or cyber defense. Hands-on experience with SIEM, EDR/XDR, and log analysis tools (e.g., Splunk, Sentinel, CrowdStrike).Practical understanding of incident response methodologies and frameworks such as MITRE ATT&CK and NIST.Familiarity with threat hunting, malware analysis, or forensic investigation … techniques. Exposure to cloud environments (AWS, Azure, or GCP) and modern enterprise architectures is preferred. Strong analytical and problem-solving skills, with the ability to communicate technical findings clearly. Relevant certifications (e.g., Security+, GCIH, GCIA, or equivalent) are a plus. Job SummaryID: F7B7BD6054Department: Intelligence & Analysis, Intelligence & InvestigationsType: contract ...

organisation. Manage relationships with external security providers, partners, and auditors. Technology Environment You will work across a modern technology estate including: Microsoft Azure Microsoft Intune Okta Identity & Access Management Zscaler SentinelOne Mimecast Abnormal AI Tenable KnowBe4 SD-WAN Technologies SIEM and Security Monitoring Platforms About … compliance. Experience implementing and supporting security frameworks such as Cyber Essentials, Cyber Essentials Plus, ISO 27001, or similar. Strong knowledge of Microsoft Azure security and cloud governance. Experience working with modern identity, endpoint protection, email security, and security monitoring platforms. Experience managing cyber security incidents and supporting recovery ...

regulatory engagements, including FCA supervisory requests and third-party due diligence. Technical security & architecture: Define and enforce the security architecture across our Azure-native, Kubernetes-based platform. Govern security controls across the full stack: Kafka, .NET/C#, Vue.js, Kong API Gateway, Auth0, and Salesforce. Lead threat modelling … security incident response plan; lead major incident management for cyber events. Operate and improve security monitoring, SIEM, and alerting across the Azure estate. Run the security awareness and training programme for all ~180 staff. Manage relationships with external SOC, MSSP, and specialist security partners. Requirements Demonstrable experience leading ...

operational processes. Key Responsibilities for the Senior Information Security Analyst: Provide secure design, configuration and assurance of Microsoft cloud services, including Microsoft Azure, Microsoft 365 and associated security, identity, compliance and monitoring tooling Use hands-on Microsoft cloud security expertise to assess project designs, define security requirements, validate … delivered solutions Configure MS Sentinel and MS Defender as well as Azure firewalls Provide security and risk assessment consultancy on projects, change initiatives, and other formal workgroups and committees. Assessing security risk and directing the design and implementation of appropriate security controls to effectively manage ...

This role can offer 3 days remote working. Essential Experience: Strong technical expertise in security, network, and infrastructure technologies, including experience with secure Azure/AWS cloud environments, Microsoft Defender for Endpoint, Microsoft Sentinel, and security tooling development. Proven ability to drive security automation and operational ...

vulnerabilities. This role can offer 3 days remote working.Essential Experience:Strong technical expertise in security, network, and infrastructure technologies, including experience with secure Azure/AWS cloud environments, Microsoft Defender for Endpoint, Microsoft Sentinel, and security tooling development.Proven ability to drive security automation and operational improvements ...

production operations, SRE, or DevOps roles, with at least 3+ years in a people management capacity.Proven experience managing cloud-native services on Azure and AWS, including: Azure SQL, Cosmos DB, Application Gateway, Key Vault, Storage, DNS, Load Balancer, Virtual Machines, Azure Machine Learning, SentinelAWS ...

production operations, SRE, or DevOps roles, with at least 3+ years in a people management capacity. Proven experience managing cloud-native services on Azure and AWS, including: Azure SQL, Cosmos DB, Application Gateway, Key Vault, Storage, DNS, Load Balancer, Virtual Machines, Azure Machine Learning ...

Pipeline & Analytics, who can lead the engineering strategy, architecture, delivery, and operational excellence of Allstate’s enterprise telemetry and analytics platforms, including Cribl, Azure Data Explorer (ADX), and related observability data services, and own the end‐to‐end observability pipeline ecosystem that enables scalable collection, transformation, routing, governance … employment at Allstate. Allstate is not providing sponsorship for this vacancy. A minimum of 3years’ experience with Cribl Stream, Cribl Edge, Azure Data Explorer (ADX), or equivalent large‐scale telemetry platforms. A minimum of 2years experience leading enterprise observability, telemetry, logging, or analytics platform engineering teams. Hands ...

experience within an MSP environment. Heavy server experience, with strong Windows Server and Hyper-V knowledge. Solid Microsoft 365 administration experience (Exchange Online, Azure, SharePoint). Strong networking knowledge - firewalls, routing, VPNs, DNS, IP, topology. Experience with WatchGuard and/or Draytek firewalls highly advantageous. Exposure to SentinelOne … date - please reach out to gianluca (at) circle recruitment (dot) com for a confidential chat. Windows Server, Microsoft, Office 365, Azure, IT Support, It infrastructure, service desk, MSP, IT Managed Services, 2nd line, 3rd line, huddersfield, Bradford, Wakefield, mirfield, Yorkshire Circle Recruitment is acting as an Employment Agency ...

currently going through a significant Microsoft cloud transformation. They are seeking a Senior Information Security Analyst to help shape security across their Azure/M365 estate. This is a great role for someone who enjoys being technically close to Azure security, Conditional Access, Defender/Sentinel … West Malling area) who enjoys operating across cloud security, technical security assurance and risk, and who has the technical knowledge of Microsoft and Azure to challenge designs and support automation across a growing Microsoft cloud estate.Base salary 65-72k (depending on experience).No visa sponsorship available. ...

Group Policy and identity services Oversee Microsoft Entra, Conditional Access, MFA, PIM and SSPR Monitor and respond to security incidents using Defender and Sentinel Manage email protection, retention policies, eDiscovery and VPN services Develop PowerShell automation to improve operational efficiency Contribute to platform upgrades, security improvements and cloud … adoption initiatives Essential Skills Strong Microsoft 365 administration experience Hybrid Exchange and Exchange Online expertise Active Directory administration and troubleshooting Microsoft Entra ID (Azure AD) experience Microsoft Defender and/or Sentinel security experience PowerShell scripting and automation Strong understanding of security best practices and identity ...

looking for an experienced Cyber Security Engineer to join them on a 6 month contract in Solihull. Key Skills: XDR, Cortex XDR, Illumio, Sentinel, Purview, Azure Responsibilities Implement and manage security controls, XDR, vulnerability management and PAM click apply for full job details ...

Flagstone is seeking a senior security engineer to own and operate detection and incident response across our Azure cloud security stack. You will work hands-on with Microsoft Sentinel, Defender for Cloud, and XDR tooling, while coordinating remediation with engineering squads. You'll drive security through ...

cyber security. It’s a hands-on, varied role where you’ll help design, maintain, and secure a mix of on-premise and Azure environments.You’ll work across servers, networks, storage, and security tools, contributing to infrastructure projects as well as cyber initiatives such as vulnerability management, incident … date.Key skills we’re looking for:Strong background across servers, networks, and SAN/NAS storageExperience designing and maintaining secure hybrid infrastructure (Azure ideal)Hands-on experience with security tools (Defender, Sentinel, Tenable, Zscaler etc.)Palo Alto deployment/configuration experience is a mustGood understanding ...

platform deployments at scale, not only operating them. Deep, hands-on expertise with at least one major platform (e.g. Dynatrace, Datadog, Elastic, Splunk, Azure Monitor/Grafana) including its correlation/AIOps capabilities - and enough breadth to compare platforms honestly rather than defaulting to the familiar one. Strong … event correlation, topology-based root cause - sufficient to configure, tune, and critically evaluate them. Fluency across the enterprise stack the telemetry describes: cloud (Azure especially), infrastructure, networking, identity, and application architectures Experience integrating with SIEM and ITSM ecosystems - ideally Microsoft Sentinel and ServiceNow - including CMDB-driven ...