76 to 100 of 192 Azure Sentinel Jobs

Role Lead the design, deployment and tuning of enterprise-grade SIEM platforms (e.g. Splunk, Azure Sentinel etc.) Collaborate with stakeholders to define logging requirements, use cases, detection rules and dashboards Oversee integration of data sources from cloud, on-prem, endpoint, network and application layers Create and … and capacity planning Skills Expertise in SIEM design, deployment and optimisation Hands-on expertise with one or more major SIEM platforms (e.g. Splunk, Sentinel etc.) Deep understanding of log ingestion, parsing, normalisation and enrichment Strong grasp of MITRE ATT&CK framework, threat detection and alert logic Solid scripting …/automation skills (e.g., Python, PowerShell, Bash) Experience with cloud logging and monitoring (AWS CloudTrail, Azure Monitor, GCP etc.) Experience with threat modelling, cloud security or Identity and Access Management is desirable More ❯

in a Work from Office (WFO) role. This role will focus on creating a business strategy, gap analysis and implementation, for securing their Azure-based infrastructure, integrating security automation, ensuring PCI DSS compliance, vulnerability and penetration testing and incident response. This role will focus on developing and maintaining … secure, scalable Azure DevOps pipelines and Infrastructure as Code (IaC) using Terraform. Their ideal candidate will have a strong background in cloud security best practices, automation, and a proactive approach to integrating security across their software delivery lifecycle. A key part of this position will also involve mentoring … an internal engineer, developing structured security policies, and managing Sentinel, Defender and SOAR solutions for automated threat response. Additionally, the role requires liaising with third-party support partners to coordinate security solutions, manage incidents, and enhance overall cybersecurity posture. Responsibilities Infrastructure Security: Architect and secure Azure More ❯

Security policy, compliance, and user awareness in relation to the OT\ SCADA systems Incident investigation and documentation Utilisation of the Microsoft Security Stack – Azure Sentinel, Defender, Purview In order to be suitable you will need the following background: 3+ years’ experience within a technical security role More ❯

Security policy, compliance, and user awareness in relation to the OT\ SCADA systems Incident investigation and documentation Utilisation of the Microsoft Security Stack – Azure Sentinel, Defender, Purview In order to be suitable you will need the following background: 3+ years’ experience within a technical security role More ❯

data technologies (Databricks, Spark). Develop custom security applications, APIs, AI/ML models, and advanced analytic technologies. Experience with threat detection in Azure Sentinel, Databricks, MPP Databases (Snowflake), or Splunk. Expertise in network, endpoint, and cloud security, cryptography, malware analysis, vulnerability assessment, anomaly/intrusion More ❯

data technologies (Databricks, Spark). Develop custom security applications, APIs, AI/ML models, and advanced analytic technologies. Experience with threat detection in Azure Sentinel, Databricks, MPP Databases (Snowflake), or Splunk. Expertise in network, endpoint, and cloud security, cryptography, malware analysis, vulnerability assessment, anomaly/intrusion More ❯

data technologies (Databricks, Spark). Develop custom security applications, APIs, AI/ML models, and advanced analytic technologies. Experience with threat detection in Azure Sentinel, Databricks, MPP Databases (Snowflake), or Splunk. Expertise in network, endpoint, and cloud security, cryptography, malware analysis, vulnerability assessment, anomaly/intrusion More ❯

engineers. Maintain and update IT documentation. Experience The successful candidate will have support experience of:- Windows 10/11, Microsoft 365, Intune, Autopilot, Azure AD, Group Policy, Intune configuration policies and Sentinel. Server technologies. Firewall and VPN's management. LAN/LWAN/WAN, DNS, DHCP. Hands-on More ❯

knowledge of Windows and Linux operating environments, including standard commands, file systems, and user authentication mechanisms. Competence in using SIEM solutions (eg, ArcSight, Azure Sentinel) for monitoring and log analysis; some exposure to additional analysis tools such as basic XDR platforms. Able to demonstrate proficient knowledge More ❯

in accordance with laws, regulations, and industry standards. They will be responsible to leverage and optimise a number of tools including, MS Defender, Sentinel, Azure and our SOC partner to enhance cyber resilience, conduct threat analysis and proactive risk assessments to design effective controls. They will More ❯

remote. Responsibilities include but are not limited to: Provide cybersecurity support and guidance for overall confidentiality, availability, and integrity of capabilities in MS Azure environments, representing the customer in briefings and meetings. Participate in risk assessments during Accreditation and Authorization, design and integrate information assurance architecture, and develop … Security+ CE, CCNA Security, CySA+, GICSP, GSEC, or SSCP) required. IAT Level III preferred (CISSP, CASP CE, CCNP, CISA) 3+ years experience supporting Microsoft Azure in a large-scale environment Understanding of Joint Worldwide Intelligence Communications Systems (JWICS) and enhanced security requirements/accreditation. Experience in DoD impact … DoD HBSS, ACAS, CMRS, JIMS, eMASS, and DHS IACS. Expertise in implementing heightened security controls (AC, PE, IA, AU, PS). Experience with Azure Sentinel, Lighthouse, and Defender ATP. Clearance Requirements: Active TS/SCI or TS and SCI eligible. Physical Requirements: The person in this More ❯

Inside IR35 Hybrid, travel to various sites around England 3 months, scope to extend Active SC would be advantageous We are seeking a Sentinel SIEM & Cloud Security Engineer to join our clients team and play a critical role in designing, managing, and optimizing Microsoft Sentinel and … cutting-edge security tools and continuously evolve your expertise in cloud security. Key Responsibilities SIEM Architecture & Management: Design, deploy, configure, and maintain Microsoft Sentinel, ensuring optimal performance, scalability, and integration with security tools. Cloud Security Design & Integration: Implement and optimize Microsoft Defender for Cloud to enhance cloud security … posture, detect misconfigurations, and enforce compliance. Log Management & Analysis: Oversee the ingestion, parsing, and normalization of security logs from Azure, AWS, M365, and hybrid environments to improve threat visibility. Security Event Correlation & Automation: Develop advanced correlation rules, alerts, playbooks, and automation workflows using Sentinel, KQL, and More ❯

Inside IR35 Hybrid, travel to various sites around England 3 months, scope to extend Active SC would be advantageous We are seeking a Sentinel SIEM & Cloud Security Engineer to join our clients team and play a critical role in designing, managing, and optimizing Microsoft Sentinel and … cutting-edge security tools and continuously evolve your expertise in cloud security. Key Responsibilities SIEM Architecture & Management: Design, deploy, configure, and maintain Microsoft Sentinel , ensuring optimal performance, scalability, and integration with security tools. Cloud Security Design & Integration: Implement and optimize Microsoft Defender for Cloud to enhance cloud security … posture, detect misconfigurations, and enforce compliance. Log Management & Analysis: Oversee the ingestion, parsing, and normalization of security logs from Azure, AWS, M365, and hybrid environments to improve threat visibility. Security Event Correlation & Automation: Develop advanced correlation rules, alerts, playbooks, and automation workflows using Sentinel, KQL, and More ❯

deploy, and manage Cisco Meraki solutions for network security and monitoring. Implement and manage security controls in cloud environments, with expertise in Microsoft Azure security best practices. Work with Palo Alto Networks or Panorama solutions for enterprise-wide network security and threat management. Leverage Infrastructure as Code (IaC … principles using Terraform to automate security policies and infrastructure deployment. Utilize Security Information and Event Management (SIEM) solutions (preferably Microsoft Sentinel SIEM ) to monitor, detect, and respond to security incidents. Create and maintain runbooks for security incident response, including automating workflows to improve incident response times. Lead threat … DHCP, and routing. Experience with firewalls, VPNs, IDS/IPS systems, and network traffic analysis. Cloud Security: Deep experience securing cloud environments, especially Azure . Familiarity with cloud-native security tools, including Azure Security Center, and identity management solutions like Azure Active Directory. Cisco More ❯

deploy, and manage Cisco Meraki solutions for network security and monitoring. Implement and manage security controls in cloud environments, with expertise in Microsoft Azure security best practices. Work with Palo Alto Networks or Panorama solutions for enterprise-wide network security and threat management. Leverage Infrastructure as Code (IaC … principles using Terraform to automate security policies and infrastructure deployment. Utilize Security Information and Event Management (SIEM) solutions (preferably Microsoft Sentinel SIEM ) to monitor, detect, and respond to security incidents. Create and maintain runbooks for security incident response, including automating workflows to improve incident response times. Lead threat … DHCP, and routing. Experience with firewalls, VPNs, IDS/IPS systems, and network traffic analysis. Cloud Security: Deep experience securing cloud environments, especially Azure . Familiarity with cloud-native security tools, including Azure Security Center, and identity management solutions like Azure Active Directory. Cisco More ❯

Requirements This position requires a current and active TS/SCI with Poly at the time of application. Position Requirements Minimum Requirements: Experience: Sentinel Azure Monitoring Detection and Investigation of Threats (analysis) KQL Knowledge to create reports 8 - 12 Years Experience Can prepare a short- and More ❯

Requirements This position requires a current and active TS/SCI with Poly at the time of application. Position Requirements Minimum Requirements: Experience: Sentinel Azure Monitoring Detection and Investigation of Threats (analysis) KQL Knowledge to create reports 8 - 12 Years Experience Can scope out a complex More ❯

MPO). We are seeking a large number of professionals from junior (2+ years) through senior levels (12+ years) with the following experience: • Sentinel • Azure Monitoring • Detection and Investigation of Threats (analysis) • KQL Knowledge to create reports Additional Skills (Nice to Have): • Enhanced Security features Benefits More ❯

timeframe. We are seeking a large number of professionals from junior (2+ years) through senior levels (12+ years) with the following experience: • Sentinel • Azure Monitoring • Detection and Investigation of Threats (analysis) • KQL Knowledge to create reports Additional Skills (Nice to Have): • Enhanced Security features For W2 More ❯

Requirements This position requires a current and active TS/SCI with Poly at the time of application. Position Requirements Minimum Requirements: Experience: Sentinel Azure Monitoring Detection and Investigation of Threats (analysis) KQL Knowledge to create reports 5 - 8 Years Experience Can scope out a simple More ❯

concepts and the latest technology security requirements. Detailed knowledge of system architectures. Experience working with common security technologies including the M365 security stack, Sentinel & Azure. A track record delivering security solutions and technologies from design to operation. Deep technical knowledge, able to operate at the highest levels of More ❯

years of experience in Network and Security Engineering, with a focus on enterprise-scale infrastructure. In-depth expertise with Microsoft security platforms including Azure AD Conditional Access, Microsoft Defender for Endpoint/Cloud, Microsoft Sentinel, and Microsoft Purview. Strong understanding of Zero Trust principles and cloud … security best practices across hybrid environments. Hands-on experience designing, implementing, and supporting network architectures in both traditional on-prem and Azure-based infrastructures, including virtual networks, network security groups (NSGs), subnets, ExpressRoute, and VPNs. 3+ years of experience with secure deployment, management, and migration of cloud and … multi-factor authentication (MFA) and protocols such as SAML, OAuth2, and Kerberos. Working knowledge of authentication platforms and directory services (e.g., Active Directory, Azure AD). Familiarity with industry regulations and frameworks such as SOC 2, ISO/IEC 27001/27002, HIPAA, and HITRUST. Strong cross-platform More ❯

Posted: 28.04.2025 Expiry Date: 12.06.2025 col-wide Job Description: Role Lead the design, deployment and tuning of enterprise-grade SIEM platforms (e.g. Splunk, Azure Sentinel etc.) Collaborate with stakeholders to define logging requirements, use cases, detection rules and dashboards Oversee integration of data sources from cloud … and capacity planning Skills Expertise in SIEM design, deployment and optimisation Hands-on expertise with one or more major SIEM platforms (e.g. Splunk, Sentinel etc.) Deep understanding of log ingestion, parsing, normalisation and enrichment Strong grasp of MITRE ATT&CK framework, threat detection and alert logic Experience with … cloud logging and monitoring (AWS CloudTrail, Azure Monitor, GCP etc.) Experience with threat modelling, cloud security or Identity and Access Management is desirable #J-18808-Ljbffr More ❯

Description Are you looking to take the next steps in your career as an Azure Consultant? Let's chat and see if we are a good match! Opportunity: Virtual Service Operations is actively seeking a talented individual with an active TS/SCI CI Poly clearance to join … our team as an Azure Consultant. In this role, you will work closely with the Account Delivery Executive and/or the Project Manager as the advocate and sole or shared technical lead. Responsibilities: Analyses technical requirements and develop effective technical solutions Assist in conceiving architectural designs Assist … in one or more of the following areas: Microsoft Solutions Framework, product futures, and relevant Certified Training associated with Microsoft's products.Skills Required: Azure Skills: Identity planning, design, implementation Azure deployments (identity and Sync, possibly some networking) Azure security - Sentinel and Defender More ❯

Past experience with any of the following cloud provider environments is beneficial but not required: Amazon Web Services, Google Cloud Platform, IBM Cloud, Microsoft Azure, Oracle Cloud Infrastructure Past experience with the following items is beneficial but not required: Juniper QFX Series Router; Juniper Apstra; Forcepoint NextGen Firewall … Forcepoint Transfer Guard stack; Red Hat Ansible; RADIUS Server; Aruba Clearpass; Dynatrace; Azure Sentinel; Zscaler System configuration based on security guidelines such as DISA STIGs CompTIA Security+ or similar for IAT Level II DoD 8570 certification GDIT IS YOUR PLACE: 401K with company match Comprehensive health More ❯