101 to 125 of 128 Remote/Hybrid Digital & IT Jobs

across SASE/SSE, vulnerability management, and EDR, working independently across a modern security stack including Zscaler/Netskope, Microsoft Purview/Defender/Sentinel, and Rapid7, while engaging directly with customers and stakeholders with minimal onboarding. Responsibilities: Act as a senior technical point of contact for customers, engaging confidently … remediation guidance Provide input and guidance on DLP strategy and controls where relevant Support and advise across the Microsoft security stack (Purview, Defender, Sentinel) where applicable Contribute to incident response and exposure management activity, drawing on real-world operational experience (Rapid7 exposure welcomed) Act as a mentor and technical escalation ...

Lead Cloud Detection & Threat Modelling Engineer AWS, Azure, Sentinel, Elastic Stack, SOAR platforms 6 Month Fixed-Term Contract £110k-£120k pro rata 100% remote Build Detection Engineering, Threat Modelling & Security Automation Across Azure and AWS We're looking for a hands-on Senior Cloud Detection Engineer to help mature … through to detection development, automated response orchestration, tuning and continuous improvement. What You'll Be Doing: Design, build and optimise detections across both Microsoft Sentinel and Elastic Stack Develop and maintain advanced detection content using KQL and EQL Lead end-to-end threat modelling exercises across Azure, AWS , applications, identities ...

CyberOne is a pure-play Microsoft security partner dedicated to helping enterprises realise the full value of the Microsoft Security portfolio—across Defender XDR, Sentinel, Entra, Purview, Intune, Copilot for Security and more. We combine deep technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection … detections, secure integrations, and continuous improvement of the Proactive Security monitoring capability. Main Duties and Responsibilities Act as a Subject Matter Expert for Microsoft Sentinel, detection engineering, security monitoring architecture, and associated security platforms. Design, develop, test, deploy, and tune analytics rules, correlation logic, threat-hunting queries, and reusable detection ...

CyberOne is a pure-play Microsoft security partner dedicated to helping enterprises realise the full value of the Microsoft Security portfolio—across Defender XDR, Sentinel, Entra, Purview, Intune, Copilot for Security and more. We combine deep technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection … detections, secure integrations, and continuous improvement of the Proactive Security monitoring capability. Main Duties and Responsibilities Act as a Subject Matter Expert for Microsoft Sentinel, detection engineering, security monitoring architecture, and associated security platforms. Design, develop, test, deploy, and tune analytics rules, correlation logic, threat-hunting queries, and reusable detection ...

estate, identify security gaps and help ensure systems and applications are appropriately hardened Work with Microsoft security technologies including Defender/XDR, EDR and Sentinel Support Identity & Access Management across Entra ID, including PIM, MFA and SSO Investigate and respond to security incidents, vulnerabilities and emerging threats Review existing security … looking for: Around 2-3+ years of commercial cyber security experience Hands on experience within Microsoft security environments Experience with Microsoft Sentinel or other SIEM/SOC technologies Knowledge of XDR/EDR, vulnerability management and incident response Good understanding of Identity & Access Management, ideally including Entra ...

open for a Microsoft Security Engineer to join the Microsoft Cyber Engineering Team, implementing and supporting security technology for enterprise clients across Defender XDR, Sentinel, Entra, Purview, Intune, and Copilot for Security. The ideal candidate will work alongside SOC analysts and delivery engineers to accelerate secure cloud adoption, modernise threat … capability. The role is hybrid, with one day per month in the London office. Responsibilities: Implement and support Microsoft security products, primarily Defender, Microsoft Sentinel SIEM and adjacent security suite technologies Design and refine engineering standards and best practices Conduct periodic Microsoft tenant health check assessments, audits and architecture reviews ...

processes - enrichment, ticketing, containment - using Python, Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius of an incident Run hypothesis-led threat hunts, not just reactive alert triage … equivalent) Practical scripting/automation experience (Python, Logic Apps, REST APIs) or hands‐on SOAR platform configuration Working knowledge of several of: Microsoft Sentinel, Defender XDR, CrowdStrike, Microsoft Entra ID/Azure AD, Microsoft 365, AWS security tooling Experience investigating identity and cloud-based compromise, including OAuth consent abuse ...

delivery role. They need someone who has implemented Microsoft security solutions for real organisations, not just administered or supported them. If youve taken Sentinel, Defender XDR or Entra ID from design through to go-live, this is the role for you. The role is home-based, with … customer security and identity projects, working with architects, engineers, SOC analysts and project managers. Day to day that means: Implementing and tuning Microsoft Sentinel and Defender XDR Designing and deploying Entra ID controls, including Conditional Access, PIM, Identity Governance and Entra GSA Configuring Intune security baselines and hardening endpoints ...

role for someone with a sound foundation in cyber security and Microsoft technologies who wants to build deeper capability across Azure security, Microsoft Defender, Sentinel, identity security, vulnerability management and incident response. Working within Platform Engineering, you will collaborate with Cyber Security, Infrastructure, Cloud, Network, Application, Service and Operations teams … remediate identified security risks. Support security reviews for new and existing infrastructure services. Security Monitoring & Threat Detection Monitor and investigate security alerts using Microsoft Sentinel, Microsoft Defender XDR and associated security platforms. Analyse security events across identity, endpoint, server, network and cloud environments. Investigate suspicious activity and determine the scope ...

breadcrumbs - fully integrated with Microsoft Defender XDR (Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps), Microsoft Sentinel, and Microsoft Security Copilot. The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering … Microsoft Defender XDR across endpoint, identity, email, and cloud‐app workloads. Integrate all deception signals (honeypot, honeytoken, decoy, breadcrumb) into Defender XDR and Microsoft Sentinel as first‐class, high‐fidelity detections. Define and enforce a unified detection and response strategy across the Microsoft security stack. Data Protection, DLP & Insider Risk ...

secure and resilient. You will also work to integrate GCP-native security controls and telemetry with Arden’s wider security tools, including Microsoft Sentinel SIEM/SOAR, to support a consistent and effective approach to security monitoring and response. Reporting to the Senior Information Security Engineer, this is an opportunity … risks associated with prompt injection, sensitive-data leakage, tool access, autonomous actions and output validation. Experience integrating GCP security logs and findings with Microsoft Sentinel SIEM/SOAR to support monitoring, detection, investigation and incident response. At least two years’ experience in incident detection, incident response and digital forensics. Experience ...

automation across client environments. Responsibilities: Design, implement and optimise security controls. Develop detection capabilities using KQL and Advanced Hunting. Build and maintain Microsoft Sentinel analytical rules. Deploy and manage Content Hub solutions. Tune Microsoft Defender and wider threat policies. Manage phishing simulation campaigns. Lead vulnerability scanning activities. Analyse vulnerability results … Skills/Must Have: Extensive Security Engineering or Senior Security Analysis experience. Strong Microsoft Defender XDR experience. Strong KQL and Advanced Hunting knowledge. Microsoft Sentinel experience. Experience with vulnerability scanning and risk analysis. Strong understanding of security protocols and industry standards. Ability to interpret vulnerability scanning results. Experience with Microsoft ...

automation across client environments. Responsibilities: Design, implement and optimise security controls. Develop detection capabilities using KQL and Advanced Hunting. Build and maintain Microsoft Sentinel analytical rules. Deploy and manage Content Hub solutions. Tune Microsoft Defender and wider threat policies. Manage phishing simulation campaigns. Lead vulnerability scanning activities. Analyse vulnerability results … Skills/Must Have: Extensive Security Engineering or Senior Security Analysis experience. Strong Microsoft Defender XDR experience. Strong KQL and Advanced Hunting knowledge. Microsoft Sentinel experience. Experience with vulnerability scanning and risk analysis. Strong understanding of security protocols and industry standards. Ability to interpret vulnerability scanning results. Experience with Microsoft ...

take technical ownership across a broad security landscape, including: Designing and implementing security architecture across Microsoft 365, Azure, Entra ID, Defender XDR, Sentinel and Purview Building modern security controls around Zero Trust, secure-by-design and automation Leading architecture reviews and threat modelling for major projects and new technologies Taking … wants genuine ownership and influence. Ideally, you'll bring: Strong hands-on experience within a Microsoft-centric security environment Excellent knowledge of Defender XDR, Sentinel, Entra ID, Azure, Microsoft 365 and Purview Experience designing and implementing security controls, not just recommending them Strong knowledge across identity, cloud, endpoint, data, network ...

security platform engineering, or a closely related technical security role. Microsoft Security Technologies: Hands-on experience with Microsoft security technologies, including Defender XDR, Purview, Sentinel, Defender for Cloud, and Entra security capabilities. Technical Security Expertise: A relevant technical security qualification or equivalent practical experience, such … activity across multiple stakeholders. What’s involved: Engineer, configure and maintain cyber security controls across the Microsoft security estate, including Microsoft Defender XDR, Microsoft Sentinel, Microsoft Defender for Cloud, Entra, Microsoft Purview and associated integrations. Develop and maintain security telemetry, data connectors, alerting integrations, workbooks and technical monitoring coverage across ...

tooling, help teams threat model, sit on design reviews for security‐relevant changes, and coach the security champions. SOC operations and Microsoft Sentinel Run the SOC day to day: queue health, shift and on‐call cover, escalation, and the runbooks the analysts work from. Administer SOC tooling: workspace and data … telemetry and bring threat intelligence into detections. Analytics and monitoring Own the logging and telemetry standard with the architect: which sources go to Sentinel, at what level, and how a new service is onboarded before go‐live. Build SIEM workbooks and dashboards for coverage, alert quality and response times ...

driven and endpoint-focused security architecture for user-facing environments Data protection and compliance capabilities through Microsoft Purview Modern SOC enablement leveraging Defender and Sentinel telemetry alongside broader tooling The secure adoption of Microsoft Copilot and AI/LLM-driven capabilities, ensuring appropriate governance, data protection and access controls What … Entra ID (P2), including Conditional Access, MFA and Privileged Identity Management (PIM) Support the modernisation of our clients SOC operating model, leveraging Defender and Sentinel for user and endpoint telemetry, alongside integration of broader infrastructure data sources Conduct security architecture reviews and provide assurance for solutions leveraging Microsoft security technologies ...

ensure compliance with security standards. Work with security teams to maintain network security policies, privileged access controls using CyberArk, and monitoring integrations with Microsoft Sentinel and Microsoft Defender. Operations, Monitoring & Backup Configure proactive monitoring, alerting, and automation through Prism and X-Play. Manage backup and recovery processes using Cohesity … lifecycle management. Experience with networking technologies, segmentation, and security controls. Practical experience supporting disaster recovery and resilience solutions. Knowledge of CyberArk, Microsoft Sentinel, Microsoft Defender, Cohesity, and enterprise monitoring tools. Experience delivering migration projects and infrastructure transformations. Strong troubleshooting, analytical, and stakeholder management skills. Ability to work independently ...

attack patterns, and provide recommendations to reduce risk and improve resilience. Security Platforms & Service Improvement Own the technical effectiveness and continual improvement of Microsoft Sentinel, Microsoft Defender, SIEM, SOAR, EDR, and XDR capabilities. Develop and maintain detection rules, use cases, automation, and response playbooks to improve operational efficiency. Work with … Incident Response role. Strong hands-on experience investigating and responding to complex cyber security incidents. Deep technical knowledge of Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID. Experience designing, tuning, and optimising SIEM, SOAR, EDR, and XDR solutions. Strong ...

formats, mapping detections to MITRE ATT&CK. You will onboard new client log sources, from endpoint agents and firewalls to cloud tenants and Microsoft Sentinel integrations, and make sure each feed is parsed correctly and monitored for silence. You will maintain the Nagios monitoring that watches the platform itself … BPSS level. Desirable Hands-on Wazuh decoder and rule writing; Graylog and OpenSearch or Elasticsearch cluster administration; HAProxy; Nagios, Zabbix or similar; Microsoft Sentinel or Azure Log Analytics; familiarity with MITRE ATT&CK; MySQL and PHP; Linux or SIEM certifications such as Linux+, LPIC, RHCSA, Security+ or CySA+; managed service ...

formats, mapping detections to MITRE ATT&CK. You will onboard new client log sources, from endpoint agents and firewalls to cloud tenants and Microsoft Sentinel integrations, and make sure each feed is parsed correctly and monitored for silence. You will maintain the Nagios monitoring that watches the platform itself … BPSS level. Desirable Hands-on Wazuh decoder and rule writing; Graylog and OpenSearch or Elasticsearch cluster administration; HAProxy; Nagios, Zabbix or similar; Microsoft Sentinel or Azure Log Analytics; familiarity with MITRE ATT&CK; MySQL and PHP; Linux or SIEM certifications such as Linux+, LPIC, RHCSA, Security+ or CySA+; managed service ...

adoption programmes. Support pre-sales activities, workshops, proof of concepts, and executive presentations. Technology & Innovation Microsoft Azure Microsoft 365 Security Microsoft Defender Suite Microsoft Sentinel Microsoft Entra Microsoft Copilot for Security Microsoft Purview AWS Security Google Cloud Security Wiz Platform Emerging AI security platforms Evaluate and introduce new technologiesand services … Private Access) Microsoft 365 Defender (Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps) Microsoft Defender for Cloud Microsoft Sentinel Microsoft Copilot for Security Microsoft Intune AWS Security Services Google Cloud Platform Security Zero Trust Architectures DevSecOps CNAP platforms (like Wiz and Palo Alto) Secure ...

driven and endpoint-focused security architecture for user-facing environments Data protection and compliance capabilities through Microsoft Purview Modern SOC enablement leveraging Defender and Sentinel telemetry alongside broader tooling The secure adoption of Microsoft Copilot and AI/LLM-driven capabilities, ensuring appropriate governance, data protection and access controls What … Entra ID (P2), including Conditional Access, MFA and Privileged Identity Management (PIM) Support the modernisation of Colt’s SOC operating model, leveraging Defender and Sentinel for user and endpoint telemetry, alongside integration of broader infrastructure data sources Conduct security architecture reviews and provide assurance for solutions leveraging Microsoft security technologies ...

CyberOne is a pure-play Microsoft security partner dedicated to helping enterprises realise the full value of the Microsoft Security portfolio—across Defender XDR, Sentinel, Entra, Purview, Intune, Copilot for Security and more. We combine deep technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection … similar technologies. Experience developing threat hunts, response playbooks, detection rules, or security orchestration and automation workflows. Experience with Microsoft security technologies such as: Microsoft Sentinel Microsoft Defender XDR Microsoft Defender for Identity Microsoft Defender for Cloud Exposure to forensic tools including EnCase, FTK, Velociraptor, Volatility, Wireshark, or equivalent technologies. Experience ...

Security or SOC-related security qualification or apprenticeship such as: Cisco Certified CyberOps Associate, or Cyber Technologist L4 Apprenticeship Sentinel, PowerShell, M365, InTune, MS Dynamics, Tenable You will be required to have/go through SC vetting. Role Profile Working within CSOC, this key function supports the group in providing … Static and Dynamic analysis Event Log analysis (preferrable) DNS Investigations and Blocking Privileged Access Management Solutions Familiar with intelligence sources Basic Threat Hunting MS Sentinel MS 365 Tenable Cyro is committed to ensuring that we offer industry leading career opportunities, salary and benefits packages. Join us and you can expect ...