76 to 100 of 103 Remote/Hybrid Digital & IT Jobs

security operations, improve detection and response, and maximise their investment in Microsoft Security technologies. What Youll Do Lead the architecture and delivery of Microsoft Sentinel, Defender XDR and MXDR solutions. Shape enterprise SOC and Security Operations transformation programmes. Advise senior stakeholders, including CISOs and security leadership teams. Lead client workshops … accelerators and go-to-market propositions. Provide technical leadership and delivery assurance across major security engagements. Act as a senior escalation point for complex Sentinel, Defender and managed security challenges. Mentor and develop architects and consultants across the Cyber Security practice. Support business growth through strategic client relationships and opportunity ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, London (Hybrid) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity to join a leading … Engineer (SIEM/XDR) Strong Security Engineer (SIEM/XDR), security engineering or detection engineering experience Hands-on SIEM and XDR tooling, ideally Microsoft Sentinel and Microsoft Defender for Endpoint Detection engineering, detection-as-code, KQL, security content and alert logic Security telemetry, logging pipelines, data quality and telemetry coverage ...

operations, improve detection and response, and maximise their investment in Microsoft Security technologies. What You’ll Do Lead the architecture and delivery of Microsoft Sentinel, Defender XDR and MXDR solutions. Shape enterprise SOC and Security Operations transformation programmes. Advise senior stakeholders, including CISOs and security leadership teams. Lead client workshops … accelerators and go-to-market propositions. Provide technical leadership and delivery assurance across major security engagements. Act as a senior escalation point for complex Sentinel, Defender and managed security challenges. Mentor and develop architects and consultants across the Cyber Security practice. Support business growth through strategic client relationships and opportunity ...

worldwide. Software companies and smart device manufacturers can use these solutions to reliably license, deliver and protect their software, enabling steady business growth. The Sentinel product portfolio helps customers get the most value from their software whether it is on-premise, in the cloud or on an embedded device. Sentinel … BeNeLux and the Nordics. As Sales Manager you are an active part of the sales team and inspire potential new customers about the Sentinel solutions in the field. The range of tasks includes: Direct sales of our products, solutions and services in the key account environment and in the upper ...

Hybrid London (1 day per month) Salary: Up to £65,000 + Benefits Job Type: Permanent IT Project Manager | Cyber Security | Managed Services | Microsoft Sentinel | Hybrid Are you an experienced IT Project Manager with a background in delivering infrastructure or cyber security projects? We're working with a growing Managed … customers, engineers and senior stakeholders to ensure successful delivery from initiation through to completion. What you'll be working on Managed SOC implementations Microsoft Sentinel deployments Endpoint Detection & Response (EDR) projects Infrastructure and networking projects Security transformation initiatives Customer onboarding and service transition projects Key Responsibilities Manage multiple customer-facing ...

Management processes Implement identity access control measures and DLP controls Respond to Tier 3 security incidents Monitor threat intelligence Participate in pentests Engineer Microsoft Sentinel detections & SOAR playbooks Senior Cyber Security Engineer: Technical Experience XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure … Microsoft Purview Cloud & Endpoint Security Azure Sentinel The permanent opportunity for a Senior Cyber Security Engineer will be based out of the Birmingham offices on a hybrid basis. This is an opportunity to join an industry leader that has grown year on year. For more information, please apply with ...

DHCP, Group Policy and identity services Oversee Microsoft Entra, Conditional Access, MFA, PIM and SSPR Monitor and respond to security incidents using Defender and Sentinel Manage email protection, retention policies, eDiscovery and VPN services Develop PowerShell automation to improve operational efficiency Contribute to platform upgrades, security improvements and cloud adoption … administration experience Hybrid Exchange and Exchange Online expertise Active Directory administration and troubleshooting Microsoft Entra ID (Azure AD) experience Microsoft Defender and/or Sentinel security experience PowerShell scripting and automation Strong understanding of security best practices and identity management Desirable Azure platform experience Public sector or local government experience ...

protecting critical systems and data, while driving improvements across security operations, threat detection and incident response. You’ll work with technologies including Microsoft Sentinel, Security Copilot and Azure, collaborating with internal IT teams and an outsourced SOC to strengthen security capabilities. You’ll also have the opportunity to support … attack methods. We’re looking for someone with: Experience in Cyber Security Operations, Incident Response or Threat Detection Strong hands-on experience with Microsoft Sentinel (SIEM) Experience with Microsoft Security Copilot or similar AI-assisted security tools Azure cloud security experience Experience working with an outsourced SOC/MDR provider ...

salary * 9-month fixed-term contract * Hybrid working with UK and occasional EU site travel * Microsoft 365, Azure, Entra ID, Intune, Autopilot, Sentinel & Defender * Lead technical integrations following business acquisitions ABOUT THE CLIENT We're working with a growing technology-led organisation that is expanding through acquisition and investing heavily … environments before designing practical integration plans. A major part of the role will involve Microsoft technologies including Microsoft 365, Azure, Entra ID, Intune, Autopilot, Sentinel and Defender for Endpoint. You'll also lead system rationalisation, identify duplication and technical gaps, and work closely with internal IT teams, stakeholders within acquired ...

processes - enrichment, ticketing, containment - using Python, Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius of an incident Run hypothesis-led threat hunts, not just reactive alert triage … equivalent) Practical scripting/automation experience (Python, Logic Apps, REST APIs) or hands-on SOAR platform configuration Working knowledge of several of: Microsoft Sentinel, Defender XDR, CrowdStrike, Microsoft Entra ID/Azure AD, Microsoft 365, AWS security tooling Experience investigating identity and cloud-based compromise, including OAuth consent abuse ...

similar role within enterprise software environments Strong technical expertise and hands-on experience across Microsoft Entra and Identity, the Microsoft Defender suite, Microsoft Sentinel, and Microsoft Purview. Proven ability to manage compliance with ISO 27001 controls and to coordinate the Cyber Essentials recertification process. Strong reporting skills with the ability … access management across Entra, Azure, Intune, Jira, AWS and SaaS platforms, maintaining Conditional Access, MFA, PIM and Identity Protection Implement and maintain Microsoft Sentinel, Purview and the Defender suite Manage the vulnerability-scanning lifecycle and coordinate penetration-testing activities Maintain security and sharing controls across email, SharePoint, OneDrive and Teams ...

breadcrumbs - fully integrated with Microsoft Defender XDR (Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps), Microsoft Sentinel, and Microsoft Security Copilot. The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering … Microsoft Defender XDR across endpoint, identity, email, and cloud-app workloads. Integrate all deception signals (honeypot, honeytoken, decoy, breadcrumb) into Defender XDR and Microsoft Sentinel as first-class, high-fidelity detections. Define and enforce a unified detection and response strategy across the Microsoft security stack. Data Protection, DLP & Insider Risk ...

breadcrumbs - fully integrated with Microsoft Defender XDR (Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps), Microsoft Sentinel, and Microsoft Security Copilot. The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering … Microsoft Defender XDR across endpoint, identity, email, and cloud-app workloads. Integrate all deception signals (honeypot, honeytoken, decoy, breadcrumb) into Defender XDR and Microsoft Sentinel as first-class, high-fidelity detections. Define and enforce a unified detection and response strategy across the Microsoft security stack. Data Protection, DLP & Insider Risk ...

cyber threats and security incidents . Administer Identity & Access Management (IAM) across Microsoft , Azure , AWS , and SaaS platforms. Deploy and optimise Microsoft Defender , Microsoft Sentinel , and Microsoft Purview . Drive vulnerability management and penetration testing programmes. Secure Microsoft 365 , including Exchange , SharePoint , OneDrive , and Teams . Implement Data Loss Prevention … . Requirements 4+ years' experience in a cyber security or information security role. Strong technical expertise in Microsoft Entra ID , Microsoft Defender Suite , Microsoft Sentinel , and Microsoft Purview . Proven experience managing vulnerability scanning and penetration testing programmes. Experience supporting ISO 27001 compliance and coordinating Cyber Essentials and Cyber Essentials ...

Access Management (IAM) across Microsoft , Microsoft Azure , Amazon Web Services (AWS) , and Software as a Service (SaaS) platforms. Implement and maintain Microsoft Defender , Microsoft Sentinel , Microsoft Purview , and other security technologies . Lead vulnerability management and coordinate penetration testing activities. Secure Microsoft 365 services, including Exchange Online , SharePoint Online , OneDrive … . Requirements 4+ years' experience in a cyber security or information security role. Strong technical expertise in Microsoft Entra ID , Microsoft Defender Suite , Microsoft Sentinel , and Microsoft Purview . Proven experience managing vulnerability scanning and penetration testing programmes. Experience supporting ISO 27001 compliance and coordinating Cyber Essentials and Cyber Essentials ...

team What we're looking for Around 3–5 years in a Security Operations Centre in an engineering or platform capacity Strong Microsoft Sentinel experience, with confident KQL Hands-on with Microsoft Defender and the wider Microsoft security stack — Intune, Entra ID, Defender for Endpoint Exposure to endpoint tooling such … advantage, though we're equally happy to hear from strong in-house SOC engineers. You don't need every tool on this list. Strong Sentinel and KQL with a willingness to develop the rest is enough. What's on offer Up to £65,000 depending on experience Fully home-based ...

work in a fast-paced technical environment, supporting a global customer base while gaining exposure to modern Microsoft technologies including Azure Virtual Desktop, Microsoft Sentinel, Defender and Privileged Identity Management. What you'll do Provide 2nd Line support across incidents and service requests, troubleshooting through to resolution. Support technologies including … evolves, will also be valued. Why join? Build your expertise across Azure, Microsoft 365 and cloud security . Work with modern Microsoft technologies including Sentinel, Defender and Azure Virtual Desktop . Support a varied, international customer base. Join a growing technology business with opportunities to develop your skills and pursue ...

play a key role in the development and enhancement of security monitoring, detection, response, and automation capabilities. Key responsibilities include: Managing and enhancing Microsoft Sentinel and wider Microsoft Security technologies Leading the investigation and response to complex security incidents Developing and optimising detection rules, use cases and alerting capabilities Building … interested in experienced Security Engineers or SOC Engineers who combine strong technical skills with a proactive mindset. You'll ideally have experience with: Microsoft Sentinel Microsoft Defender security products Security Operations Centre (SOC) environments SIEM technologies and security monitoring Incident response and threat detection Kusto Query Language (KQL) Security automation ...

provide recommendations to strengthen detection outcomes Job Requirements: Strong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR … customer-facing or consultancy roles Strong communication skills, with the ability to explain technical concepts clearly Technical Competencies: SIEM and XDR platforms, including Microsoft Sentinel, Microsoft Defender, Palo Alto XSIAM or XDR, CrowdStrike and SentinelOne SOAR development, including automation and playbook design using platforms such as Palo Alto XSOAR ...

genuine threats from false positives Investigating potential security incidents Understanding logs and identifying unusual activity Working with SIEM and security monitoring technologies Learning Microsoft Sentinel and the wider Microsoft security stack Understanding when incidents need to be escalated Supporting security reporting and documentation Developing your knowledge of incident response Working … study. Some previous IT, MSP, MSSP or SOC experience would certainly be useful, but commercial cyber security experience is not essential. Exposure to Microsoft Sentinel, another SIEM platform or Microsoft Defender would also be a bonus rather than a requirement. More importantly, we want somebody who: Is fascinated by cyber ...

controls. Develop and maintain incident response procedures, playbooks and documentation aligned to industry best practice. Detection Engineering & Security AutomationConfigure, optimise and continuously improve Microsoft Sentinel and Microsoft Defender technologies. Develop and tune detection logic using KQL to identify emerging threats and attacker behaviours. Build and maintain automated SOAR workflows using … Security Operations, Cyber Defence, Incident Response or Blue Team functions. Experience operating within hybrid cloud and on-premise environments. Hands-on experience with Microsoft Sentinel, Microsoft Defender XDR and Azure security technologies. Experience with detection engineering, threat detection and security automation. Exposure to vulnerability management platforms such as Tenable ...

sales activities, workshops, proof of concepts, and executive presentations. Technology & Innovation Drive capability development across: Microsoft Azure Microsoft 365 Security Microsoft Defender Suite Microsoft Sentinel Microsoft Entra Microsoft Copilot for Security Microsoft Purview AWS Security Google Cloud Security Wiz Platform Emerging AI security platforms Evaluate and introduce new technologiesand services … Private Access) Microsoft 365 Defender (Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps) Microsoft Defender for Cloud Microsoft Sentinel Microsoft Copilot for Security Microsoft Intune AWS Security Services Google Cloud Platform Security Zero Trust Architectures DevSecOps CNAP platforms (like Wiz and Palo Alto) Secure ...

vulnerability exception and risk acceptance process: assess compensating controls, document residual risk, and obtain formal sign-off. • Integrate VM tooling with SIEM (Splunk, Microsoft Sentinel), ITSM (ServiceNow VR module), and CMDB for automated ticket creation and asset correlation. • Automate vulnerability reporting and remediation tracking using Python, REST APIs (Qualys/… Security. • Automation and API integration: Python scripting, REST API calls to Qualys/Tenable/Rapid7; ServiceNow VR module configuration. • SIEM integration: Splunk, Microsoft Sentinel – correlating vulnerability data with threat events. • CMDB-driven asset correlation: ServiceNow CMDB, ensuring VM data reflects accurate asset inventory. • Network and infrastructure knowledge sufficient ...

identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge of DevSecOps practices and integrating security … maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations, threat hunting activities and security improvement ...

identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge of DevSecOps practices and integrating security … maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations, threat hunting activities and security improvement ...