26 to 50 of 96 Azure Sentinel Jobs

Cyber Security Engineer - Microsoft 365 & Azure 6-Month Contract | Outside IR35 | £(Apply online only) per day | Remote (UK) | 1-2 Days per Month On-Site (South West London) A leading public sector organisation is looking for a Cyber Security Engineer to support a major cyber security improvement programme. … Working alongside the Cyber Security, Infrastructure and Platform teams, you'll help deliver a range of security enhancements across Microsoft 365, Azure and AWS, strengthening the organisation's overall security posture while improving identity, endpoint, cloud and data protection capabilities. This is a fantastic opportunity for someone ...

Cyber Security Engineer - Microsoft 365 & Azure 6-Month Contract Outside IR35 (Apply online only) per day Remote (UK) 1-2 Days per Month On-Site (South West London) A leading public sector organisation is looking for a Cyber Security Engineer to support a major cyber security improvement programme. … Working alongside the Cyber Security, Infrastructure and Platform teams, you'll help deliver a range of security enhancements across Microsoft 365, Azure and AWS, strengthening the organisation's overall security posture while improving identity, endpoint, cloud and data protection capabilities. This is a fantastic opportunity for someone ...

Cortex XDR. Data Protection & Compliance Support and monitor the company's Data Loss Prevention controls within Microsoft Purview, and data classification through Azure Information Protection labelling. Help maintain the evidence and controls that support the company's accreditations, including ISO/IEC 27001, 27017, and 27018, Cyber Essentials … Request, Change, and Problem management. Understanding of GDPR, data protection, and information governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience with Endpoint Detection ...

responsible for designing, developing, administering, and enhancing enterprise SIEM capabilities while working across modern security technologies including Splunk Enterprise Security, Splunk Cloud, Microsoft Sentinel, and Cribl Stream. This is an exciting opportunity to work within a large-scale enterprise environment, helping improve threat detection, security monitoring, automation … cases and correlation searches. Strong understanding of Splunk Data Models . Hands-on experience with Splunk Cloud . Hands-on experience with Microsoft Sentinel . Experience with Cribl Stream , including log ingestion, data routing, transformation, parsing, and data normalisation. Experience working in enterprise Security Operations environments, including threat ...

threat detection and security operations. Hands-on knowledge of enterprise security technologies including SIEM, EDR/XDR and SOAR platforms. Experience with Microsoft Sentinel, Microsoft Defender XDR, Splunk or similar enterprise security tooling. Strong understanding of security frameworks including ISO 27001, NIST CSF, Cyber Essentials Plus and NIS2. … Clearance. Recently lapsed SC Clearance. CISSP, CISM, GIAC, GCIH, GCIA or equivalent security certifications. Experience managing outsourced SOC or MSSP providers. Exposure to Azure security technologies and cloud security operations. Whats on Offer - You'll be joining an organisation where cyber security is a strategic priority, giving ...

/NIST CSF/CIS CSC v8.1) - design, maturity tracking and assurance across full programme lifecycles Enterprise & Cloud Security Architecture - AWS, Azure, GCP, Oracle Cloud (multi-cloud landing zones, hybrid identity, secure migration patterns) Classified Platform Design - OFFICIAL, OFFICIAL-SENSITIVE, SECRET and ABOVE SECRET environments, ROSA, Garrison, Citadel … Cisco, Juniper, F5, Zscaler, NSX-T, SD-WAN, encrypted WAN, DMZ, NAC ServiceNow & M365 Architecture - ITSM, ITOM, CSM, EAM, SharePoint Online, Purview, Entra, Sentinel, Defender, Power Platform, CoPilot Container & DevSecOps - Kubernetes (EKS, Tanzu), Terraform, Ansible, CI/CD security, image scanning, container hardening Architecture Frameworks - TOGAF, ArchiMate, SABSA ...

groups, prevention policies and detection management Incident response and threat hunting using CrowdStrike Falcon Complete, Falcon Insight or Falcon Prevent Integration with Microsoft Sentinel, Splunk, QRadar or similar SIEM platforms Active Directory integration Enterprise-scale security engineering Desirable Experience Microsoft Defender for Endpoint (MDE) SentinelOne Rapid7 Carbon Black … Microsoft Sentinel XSOAR or other SOAR platforms Azure, AWS or GCP security PowerShell or Python automation Zero Trust or enterprise security architecture ...

office locations globally and stay away from home on occasion. Knowledge and experience of these technologies is a key requirement: Microsoft EntraID/Azure Microsoft Defender 365 (including Microsoft Defender XDR) Microsoft Sentinel Microsoft Active Directory Microsoft Intune VMWare Experience in as many of these technologies ...

Cisco, Fortinet, Rukus; VLANs, VPNs, firewalls. Hardware: Server infrastructure, RAID, SAN/NAS, cabling, wireless tech. Microsoft: Windows Server (2012–2025), Exchange Online, Azure AD, Intune, Office 365, Windows 10/11. Virtualisation: Hyper-V, VMware; cloud platforms (Azure, AWS, GCP). Communication Systems: VoIP … CCTV. Backup & DR: Veeam, replication, failover. Security: Firewalls, endpoint protection, SIEM tools (Splunk, Sentinel); ISO 27001, GDPR compliance. OS & Tools: Linux, PowerShell/Bash/Python scripting, ITSM platforms (ServiceNow, Fresh Service). A great opportunity to further your career with this prominent UK manufacturer. ...

Code (IaC), CI/CD, and DevSecOps practices. What you'll be doing Design, build, and manage complex cloud environments using GCP and Azure, ensuring adherence to architectural guardrails and tagging standards. Develop and maintain secure, multi-region, multi-account cloud landing zones using automation frameworks. Implement advanced … using Terraform, CloudFormation, and Ansible for repeatable, auditable deployments. Integrate IaC pipelines with version control (Git), automated testing, and policy-as-code (e.g., Sentinel, OPA) for compliance enforcement. Champion GitOps and immutable infrastructure patterns. CI/CD & DevOps: Build and optimize CI/CD pipelines (Azure ...

PowerShell and APIs. Manage and optimise security tooling including SIEM, EDR/XDR and monitoring platforms. Support the secure configuration and governance of Azure, AWS and Microsoft 365 environments. Collaborate with IT, Development and Security teams to deliver secure-by-design solutions. Enhance detection, threat monitoring and incident … safeguards. Skills & Experience Essential Good level of experience within Cyber Security, Security Engineering, Cloud Security or Security Operations. Strong cloud security knowledge across Azure, AWS and/or Microsoft 365. Experience with scripting and automation using Python, PowerShell or similar technologies. Hands-on experience managing and configuring security ...

accountabilities Security Platform Operationalisation: Operationalise and tune the deployed security tooling estate, including CrowdStrike Falcon (EDR and Next-Gen SIEM), Wiz CSPM (Azure and AWS), Mimecast and the Microsoft security stack, moving platforms from deployed to fully managed through detection rule tuning, alert configuration, log source onboarding … tuning, host investigation and response actions. Experience operationalising SIEM, EDR/XDR and vulnerability management platforms (for example CrowdStrike Next-Gen SIEM, Microsoft Sentinel or Microsoft Defender), including detection tuning, alert management and vulnerability scanning and reporting. Microsoft security stack experience across Entra ID, Active Directory and Group ...

alignment with internal policies, compliance requirements, and industry standards Skills & Experience Technical Expertise Strong hands-on experience with SIEM platforms (e.g. Splunk, Microsoft Sentinel, QRadar, Elastic, LogRhythm, ArcSight, Exabeam) Knowledge of log formats (JSON, syslog, XML, CEF) and ingestion methods (APIs, agents, Kafka, Event Hubs) Experience in detection … modelling, and attacker behaviour analysis Familiarity with SOAR tools and automation workflows Security Knowledge Understanding of networks, Windows/Linux systems, cloud platforms (Azure, AWS, GCP), identity systems, and endpoint security tools Knowledge of frameworks such as MITRE ATT&CK and threat hunting methodologies Essential Requirements Degree ...

frameworks and standards such as: NIST ISO 27001 CIS Controls Cyber Essentials Regulatory requirements within Financial Services Technical Knowledge Good understanding of: Microsoft Azure AWS Active Directory/Entra ID Security Monitoring Platforms Identity Management Solutions Network and Infrastructure Security Ability to engage effectively with technical architects, engineers … management skills with the ability to engage at Executive and C‐Level. Experience managing third‐party suppliers and system integrators. Experience with: Microsoft Sentinel Splunk SailPoint CyberArk Okta CrowdStrike Microsoft Defender Suite Knowledge of DevSecOps practices. Exposure to cloud migration and security transformation programmes. Experience supporting regulatory remediation ...

mixed-vendor environments, including SaaS platforms and hybrid cloud estates. Deep hands‐on expertise across the Microsoft security and compliance ecosystem, including Microsoft Sentinel, Defender XDR, Purview, Entra ID and Defender for Cloud, from solution design through to implementation and optimisation. Experience designing, onboarding and maturing SOC capabilities … CISSP, CISM, CISA or CySA+, alongside relevant Microsoft security certifications including SC-100 (Microsoft Cybersecurity Architect), SC-200 (Security Operations Analyst), AZ-500 (Azure Security Engineer) or alternates aligned the CrowdStrike ecosystem, such as, CrowdStrike Certified Falcon Administrator (CCFA), CrowdStrike Certified SIEM Engineer (CCSE), CrowdStrike Certified Identity Specialist ...

Microsoft Security Architect Department: Azure Employment Type: Full Time Location: Belfast Description We are seeking a highly skilled and experienced Microsoft Security Architect to join our dynamic team! The ideal candidate will be a subject matter expert in Microsoft's security ecosystem, with a strong focus on Azure … customers to understand their business needs, security challenges, and technical requirements. Solution Design & Architecture: Design comprehensive security solutions utilizing Microsoft technologies such as Azure, Entra ID, Entra Private Access, and the Defender suite (Defender for Endpoint, Defender for Cloud). Proposal Development: Create detailed solution proposals, including technical ...

maintain cyber defence use cases, correlation rules, and attack chain detections across disparate systems. Design, implement, and integrate SIEM solutions—particularly Microsoft Sentinel—into Security Operations. Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem. Handle L2-level incidents leveraging Microsoft Sentinel and Microsoft Defender tools. Support incident response, triage, threat modelling, and vulnerability remediation within Azure-hosted environments. Create, run, and troubleshoot Azure Logic Apps, playbooks, and Sentinel automation components. Collaborate with business and security stakeholders to define and enhance security standards ...

initiatives. Requirements Experience within a SOC environment. Strong knowledge of SIEM, EDR and SOAR platforms. Hands-on experience with platforms such as Microsoft Sentinel, Defender XDR, CrowdStrike, Darktrace or similar security technologies. Experience monitoring and securing Azure and AWS environments. Knowledge of ISO 27001 and Cyber ...

support the design, deployment, configuration and ongoing development of the SOCs security monitoring capability. The role will work across technologies including Splunk, Microsoft Sentinel, SOAR, Microsoft XDR and wider security tooling, with a major focus on SIEM engineering, data onboarding, integrations, detection content and threat-led use cases. … What you need Strong experience designing, building, deploying and operating SIEM and SOAR platforms Hands-on experience with Splunk and/or Microsoft Sentinel, ideally with strong exposure to both Experience with technologies such as Splunk Enterprise Security, Splunk SOAR, UBA, Elastic or Microsoft XDR Proven experience deploying ...

identity telemetry (audit logs, sign in- logs, access data) and translate insights into actionable improvements Extensive hands-on- experience with Microsoft Entra ID (Azure AD), including: Users, Groups (static & dynamic), roles, service principals, app registrations Directories, Tenants, Objects, and Attribute Structures Conditional Access policies, SSO (SAML & OIDC), Access … experience in Privileged Access Management (PAM) such as CyberArk, StrongDM: User and group management, OU design, Group Policy Objects (GPOs) Hybrid identity integration (Azure AD Connect/Cloud Sync) Password rotation policies Different types of service accounts for on-premises and cloud use cases (SVC, gMSA ...

identity telemetry (audit logs, sign in-logs, access data) and translate insights into actionable improvements Extensive hands-on-experience with Microsoft Entra ID (Azure AD), including: Users, Groups (static & dynamic), roles, service principals, app registrations Directories, Tenants, Objects, and Attribute Structures Conditional Access policies, SSO (SAML & OIDC), Access … experience in Privileged Access Management (PAM) such as CyberArk, StrongDM: User and group management, OU design, Group Policy Objects (GPOs) Hybrid identity integration (Azure AD Connect/Cloud Sync) Password rotation policies Different types of service accounts for on-premises and cloud use cases (SVC, gMSA ...

analytical, with excellent written and verbal communication skills. You are familiar with architecture frameworks (TOGAF or equivalent) and Well‐Architected reviews (AWS/Azure/GCP). You have proven hands‐on experience leading migrations from incumbent tooling to a modern, consolidated delivery platform – including continuous delivery (e.g. … areas listed below, with working knowledge of the rest: CI/CD & pipelines: GitLab CI/CD, GitHub Actions, Jenkins, Azure DevOps, CircleCI, GitOps principles with Argo CD/Workflows, Tekton, Buildkite, Bamboo, TeamCity, AWS CodePipeline. Policy‐as‐Code & governance: OPA/Rego, HashiCorp Sentinel, Kyverno. ...

complex cloud transformation, security modernisation, and AI adoption programmes. Support pre-sales activities, workshops, proof of concepts, and executive presentations. Technology & Innovation Microsoft Azure Microsoft 365 Security Microsoft Defender Suite Microsoft Sentinel Microsoft Entra Microsoft Copilot for Security Microsoft Purview AWS Security Google Cloud Security … Access) Microsoft 365 Defender (Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps) Microsoft Defender for Cloud Microsoft Sentinel Microsoft Copilot for Security Microsoft Intune AWS Security Services Google Cloud Platform Security Zero Trust Architectures DevSecOps CNAP platforms (like Wiz and Palo Alto ...

three. About the team Security Engineering is a team of five covering cloud security, detection, and security operations. They work directly in the Azure estate and are close to the infrastructure, not abstracted behind a policy layer. The team runs Microsoft Sentinel, Defender XDR, and Defender … cloud security, detection tooling, and incident response, without being narrowly specialised. You own meaningful parts of the security stack, contribute hands‐on to Azure cloud hardening, and show up reliably when incidents need investigating or pen test cycles need coordinating. You're energised by visible impact, your work ...

vulnerability triage workflows that score real risk by exploitability, reachability, and compensating controls rather than raw CVSS. Harden and secure our cloud environment (Azure), partnering with platform engineering on secure configuration, reviewing and remediating vulnerabilities, identity and network controls, posture management, and logging and detection. Strengthen endpoint … control landscape: cloud security, supply‐chain and vulnerability management, endpoint and identity, and detection and response. Are genuinely technical: comfortable in cloud environments (Azure preferred), CI/CD, and at least one scripting language (e.g. Python, Bash, PowerShell), so your controls hold up in engineering reality. Lead with ...