51 to 75 of 247 Azure Sentinel Jobs

Managers while acting as the lead security voice with customers. Technical credibility across the Microsoft security ecosystem, including Defender, Entra ID, Microsoft 365, Azure, Sentinel, and Purview, alongside broader cyber security domains. Excellent communication and presentation skills, with the ability to engage senior stakeholders, deliver compelling ...

experience troubleshooting containerized environments (Kubernetes, OpenShift) - including networking, namespace segmentation, and service-level debugging in complex enterprise deployments. Experience with cloud platforms (AWS, Azure, GCP) and enterprise software deployments Excellent communication skills with ability to explain complex technical concepts to various audiences Willingness to travel across EMEA region ...

years in a Security Operations Center (SOC) or incident response role Advanced proficiency with Microsoft Defender XDR and expert-level knowledge of Microsoft Sentinel, including KQL query writing and analytics rule development Strong hands-on experience with Microsoft Defender for Endpoint, including policy configuration and threat investigation Demonstrable … experience responding to cyber threats and working in an Azure-focused cloud environment Proven experience with the Cyber Kill Chain, MITRE ATT&CK, and other security defence and intelligence frameworks Experience in stakeholder management and engagement at C-Suite level Experience working for Critical National Infrastructure (CNI) organizations ...

independently, and moves effectively between operational incidents, control reviews, stakeholder requests, and security improvement initiatives.Key ResponsibilitiesInvestigate and respond to security alerts from Microsoft Sentinel, Microsoft Defender XDR, endpoint security tools, and other monitoring platforms; gather evidence, review logs, coordinate containment, and document findings through resolution.Manage security incidents, approvals … analysis, phishing-submission review, policy tuning, and investigation of SPF, DKIM, and DMARC failures.Administer assigned Microsoft security platforms, including Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra ID, and Microsoft Purview, using least-privilege and formal change-management practices.Support the secure adoption and operation of approved artificial intelligence ...

moves effectively between operational incidents, control reviews, stakeholder requests, and security improvement initiatives. Key Responsibilities Investigate and respond to security alerts from Microsoft Sentinel, Microsoft Defender XDR, endpoint security tools, and other monitoring platforms; gather evidence, review logs, coordinate containment, and document findings through resolution. Manage security incidents … phishing‐submission review, policy tuning, and investigation of SPF, DKIM, and DMARC failures. Administer assigned Microsoft security platforms, including Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra ID, and Microsoft Purview, using least‐privilege and formal change‐management practices. Support the secure adoption and operation of approved artificial intelligence ...

Required3+ years of experience in Security Operations, Detection Engineering or Security Engineering. Hands-on experience with enterprise SIEM platforms such as Splunk, Microsoft Sentinel, Elastic, Chronicle or QRadar. Experience building and tuning detection rules. Experience developing SOAR playbooks or security automation. Strong scripting skills using Python, PowerShell … similar languages. Experience working within cloud environments (AWS preferred; Azure or GCP experience also valued). Solid understanding of the MITRE ATT&CK framework. Experience supporting security incident response. Comfortable working with Git, APIs and engineering workflows. Excellent communication skills with both Security and Engineering teams.PreferredExperience with Detection ...

exception and risk acceptance process: assess compensating controls, document residual risk, and obtain formal sign-off. • Integrate VM tooling with SIEM (Splunk, Microsoft Sentinel), ITSM (ServiceNow VR module), and CMDB for automated ticket creation and asset correlation. • Automate vulnerability reporting and remediation tracking using Python, REST APIs (Qualys … Automation and API integration: Python scripting, REST API calls to Qualys/Tenable/Rapid7; ServiceNow VR module configuration. • SIEM integration: Splunk, Microsoft Sentinel – correlating vulnerability data with threat events. • CMDB-driven asset correlation: ServiceNow CMDB, ensuring VM data reflects accurate asset inventory. • Network and infrastructure knowledge sufficient ...

workdays. Your tasks Join our new Security team in the Lisbon IT Hub and help us build secure, scalable cloud environments across AWS, Azure and GCP. Your responsibilities: Design and implement secure cloud architectures (AWS & Azure) Operate and optimize our SIEM platform (Microsoft Sentinel … Maintain clear and structured technical documentation Your profile Must-have: 3+ years of experience in Cloud Engineering and IT Security Strong knowledge of Azure and/or AWS Hands-on experience with scripting/automation (Python, Bash or PowerShell) Good understanding of DevSecOps principles Solid communication skills ...

writing and presenting solutions for new opportunities; scoping technical effort accurately; and giving prospects the confidence to choose us. Behind that sits genuine Azure depth, enough to design the solution yourself, guide the engineers who build it, and step in as the senior technical authority when a complex … proposals and signed engagements. Own the architecture. Produce high-level and low-level designs for secure, scalable, resilient cloud solutions primarily on Microsoft Azure and hand them into delivery with clarity and confidence. Act as senior technical authority. Be the escalation point our delivery and support teams call ...

writing and presenting solutions for new opportunities; scoping technical effort accurately; and giving prospects the confidence to choose us. Behind that sits genuine Azure depth, enough to design the solution yourself, guide the engineers who build it, and step in as the senior technical authority when a complex … proposals and signed engagements. • Own the architecture. Produce high-level and low-level designs for secure, scalable, resilient cloud solutions — primarily on Microsoft Azure — and hand them into delivery with clarity and confidence. • Act as senior technical authority. Be the escalation point our delivery and support teams call ...

Microsoft Intune, Windows Autopilot, endpoint security, device compliance and configuration management. Manage application deployment, MDM/MAM, device lifecycle, patching and operational compliance. Azure Infrastructure & Cloud Services Design, deploy and support Azure environments, including virtual machines, storage, networking, backup and recovery. Support hybrid cloud, migration, automation … resilient, available and well-optimised. Troubleshoot complex infrastructure, network and virtualisation issues. Cyber Security & Compliance Lead cyber security initiatives and administer Microsoft Defender, Sentinel and Purview services. Monitor alerts, investigate incidents, manage vulnerabilities, conduct risk reviews and maintain security baselines. Support compliance, audits, business continuity and disaster recovery ...

analytics in our SIEM and other security platforms.Proactive Threat Hunting - Formulate hypotheses and hunt for undetected attacker TTPs across our cloud (AWS, GCP, Azure), SaaS, and endpoint environments.Purple Team - Collaborate with our Adversarial Simulation team in Purple Team exercises to test, validate, and improve detection logic and response.Incident … models like MITRE ATT&CK to prioritize and enhance detective controls.SIEM Expertise: Hands-on experience with SIEM platforms (e.g., Splunk, Google SecOps, Elastic, Sentinel) for rule/query creation and analytics.Threat Hunting: Experience conducting proactive threat hunts, defining hypotheses, and developing hunting methodologies.Cloud Security: Solid knowledge of security ...

sensitivity labeling policies across the estate. Perform second-line investigations of alerts escalated by the MDR provider across Defender XDR and Sentinel, conducting proactive threat hunting via KQL queries and Sentinel workbooks. Oversee the outsourced vulnerability scanning service, driving findings through to remediation within SLA limits … documentation directly from tooling rather than assembling it by hand. Hands-on experience configuring, tuning, and investigating alerts across Microsoft Defender XDR, Microsoft Sentinel, and Microsoft Defender for Cloud. Strong technical grasp of Entra ID governance, including Conditional Access, PIM, and managing workload identity risks (service principals ...

controls.Develop and maintain incident response procedures, playbooks and documentation aligned to industry best practice.Detection Engineering & Security AutomationConfigure, optimise and continuously improve Microsoft Sentinel and Microsoft Defender technologies.Develop and tune detection logic using KQL to identify emerging threats and attacker behaviours.Build and maintain automated SOAR workflows using Logic Apps … premise environments.Maintain high-quality technical documentation for detections, automations and operational workflows.Cloud Security & Secure-by-DesignSupport secure configuration and operational security across Azure and associated cloud services.Collaborate with infrastructure and engineering teams to embed secure-by-design principles.Evaluate configuration changes and ensure alignment with security standards and controls.Support ...

Strong knowledge of attacker techniques (MITRE ATT&CK), malware behaviour, phishing, identity compromise and lateral movement. Hands-on experience with SIEM (e.g., Splunk, Sentinel, QRadar) and EDR/XDR platforms. Understanding of networking (TCP/IP, DNS, HTTP/S), Windows and Linux security, and logging/telemetry. … Experience with cloud security monitoring (Azure/AWS) and identity platforms (e.g., Azure AD/Entra). Ability to manage incidents end-to-end, including stakeholder management, prioritisation and crisis coordination. Familiarity with security standards and best practice (e.g., ISO 27001, NIST) and working in regulated ...

across a global footprint. You will work on managing cyber incidents, threat hunting, vulnerability management and policy compliance using the Microsoft Security Stack (Azure Sentinel, Defender, Purview). #J-18808-Ljbffr ...

DigiCert PKI Certifications Venafi Professional Certification Microsoft Security Certifications Preferred Technical Tools & Platforms HSM Platforms Thales Luna HSM Entrust nShield HSM AWS CloudHSM Azure Dedicated HSM PKI & Certificate Management Microsoft Active Directory Certificate Services (ADCS) DigiCert Entrust PKI Venafi Keyfactor AppViewX Key Management Technologies HashiCorp Vault … Azure Key Vault Google Cloud KMS Thales CipherTrust Manager Operating Systems Linux (RHEL, CentOS, Ubuntu) Windows Server Security & Monitoring Splunk Microsoft Sentinel QRadar Dynatrace Datadog Infrastructure & Automation PowerShell Python Bash/Shell Scripting Ansible Terraform Git All profiles will be reviewed against the required skills ...

Cortex XDR. Data Protection & Compliance Support and monitor the company's Data Loss Prevention controls within Microsoft Purview, and data classification through Azure Information Protection labelling. Help maintain the evidence and controls that support the company's accreditations, including ISO/IEC 27001, 27017, and 27018, Cyber Essentials … Request, Change, and Problem management. Understanding of GDPR, data protection, and information governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience with Endpoint Detection ...

capacity. Broad technical knowledge across cloud, infrastructure, Microsoft 365, identity, digital workplace, cyber security, resilience and managed services. Strong working knowledge of Microsoft Azure, Microsoft 365 and Microsoft Entra ID/Active Directory. Strong understanding of security and compliance principles, technologies and frameworks, including Zero Trust, Microsoft Defender …/Sentinel, NCSC, NIST and ISO 27001. Experience engaging with senior customer stakeholders and acting as a trusted technical advisor. Strong understanding of ITIL‐aligned service management and managed service environments. Excellent leadership, stakeholder management and communication skills, with the ability to communicate effectively at both technical ...

Authority standards, regulations, and principles Требования: Experience managing EDR platforms, configuring EDR policies, and tuning SIEM Experience with Microsoft Security, including Defender ATP, Azure Security Centre, Entra ID, Intune, and Conditional Access Experience configuring and managing next-generation firewalls, preferably Palo Alto Prisma or similar Experience with email … equivalent Experience with Identity and Access Management, including CyberArk, Entra ID, SSO, MFA, and PAM solutions Experience with SIEM tools such as Sentinel, Exabeam, Splunk, or equivalent Experience with vulnerability management using Tenable or equivalent enterprise toolsets Experience with scripting and automation, preferably PowerShell, and KQL or similar ...

SIEM and other security platforms. Proactive Threat Hunting - Formulate hypotheses and hunt for undetected attacker TTPs across our cloud (AWS, GCP, Azure), SaaS, and endpoint environments. Purple Team - Collaborate with our Adversarial Simulation team in Purple Team exercises to test, validate, and improve detection logic and response. Incident … like MITRE ATT&CK to prioritize and enhance detective controls. SIEM Expertise: Hands-on experience with SIEM platforms (e.g., Splunk, Google SecOps, Elastic, Sentinel) for rule/query creation and analytics. Threat Hunting: Experience conducting proactive threat hunts, defining hypotheses, and developing hunting methodologies. Cloud Security: Solid knowledge ...

SIEM and other security platforms. Proactive Threat Hunting - Formulate hypotheses and hunt for undetected attacker TTPs across our cloud (AWS, GCP, Azure), SaaS, and endpoint environments. Purple Team - Collaborate with our Adversarial Simulation team in Purple Team exercises to test, validate, and improve detection logic and response. Incident … like MITRE ATT&CK to prioritize and enhance detective controls. SIEM Expertise: Hands-on experience with SIEM platforms (e.g., Splunk, Google SecOps, Elastic, Sentinel) for rule/query creation and analytics. Threat Hunting: Experience conducting proactive threat hunts, defining hypotheses, and developing hunting methodologies. Cloud Security: Solid knowledge ...

SIEM and other security platforms. Proactive Threat Hunting - Formulate hypotheses and hunt for undetected attacker TTPs across our cloud (AWS, GCP, Azure), SaaS, and endpoint environments. Purple Team - Collaborate with our Adversarial Simulation team in Purple Team exercises to test, validate, and improve detection logic and response. Incident … like MITRE ATT&CK to prioritize and enhance detective controls. SIEM Expertise: Hands-on experience with SIEM platforms (e.g., Splunk, Google SecOps, Elastic, Sentinel) for rule/query creation and analytics. Threat Hunting: Experience conducting proactive threat hunts, defining hypotheses, and developing hunting methodologies. Cloud Security: Solid knowledge ...

identity telemetry (audit logs, sign in- logs, access data) and translate insights into actionable improvements Extensive hands-on- experience with Microsoft Entra ID (Azure AD), including: Users, Groups (static & dynamic), roles, service principals, app registrations Directories, Tenants, Objects, and Attribute Structures Conditional Access policies, SSO (SAML & OIDC), Access … experience in Privileged Access Management (PAM) such as CyberArk, StrongDM: User and group management, OU design, Group Policy Objects (GPOs) Hybrid identity integration (Azure AD Connect/Cloud Sync) Password rotation policies Different types of service accounts for on-premises and cloud use cases (SVC, gMSA ...

company’s cyber services. You will translate security data into actionable narratives, guide a defensible 12-month roadmap, and collaborate with Microsoft Azure Sentinel/Defender XDR expertise to prioritize improvements and drive measurable outcomes. You will maintain relationships with senior stakeholders, deliver proactive and reactive ...