101 to 112 of 112 Sentinel Jobs

SHIFT LEAD ESSENTIAL SKILLS Proven experience within a Security Operations Centre Previous line management or team leadership experience Strong hands on experience with Microsoft Sentinel and Splunk Solid understanding of MITRE ATT and threat informed defence Strong networking knowledge including TCP IP, LAN, WAN, SMTP, HTTP, FTP, POP and LDAP … subject to required skills, your application to our client in conjunction with this vacancy only. KEY SKILLS SOC Shift Lead, Security Operations Centre, Microsoft Sentinel, Splunk, MITRE ATT, Incident Response, DV Cleared ...

breadcrumbs - fully integrated with Microsoft Defender XDR (Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps), Microsoft Sentinel, and Microsoft Security Copilot. The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering … Microsoft Defender XDR across endpoint, identity, email, and cloud-app workloads. Integrate all deception signals (honeypot, honeytoken, decoy, breadcrumb) into Defender XDR and Microsoft Sentinel as first-class, high-fidelity detections. Define and enforce a unified detection and response strategy across the Microsoft security stack. Defender for Identity & Identity Deception ...

diverse technologies and real cyber threats. SOC Analyst essential skills Experience working in a Security Operations Centre environment Hands-on experience with Microsoft Sentinel or Splunk Knowledge of the MITRE ATT&CK framework Understanding of networks and systems, including TCP/IP, firewalls, VPNs and endpoint security Strong analytical … submit (subject to required skills) your application to our client in conjunction with this vacancy only. KEY SKILLS: SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, MITRE ATT and CK, Networking, SC Clearance ...

Vault, Entra ID (AAD), and Data Lake with least-privilege access. You'll also work with Azure Policy, Microsoft Defender for Cloud, Microsoft Sentinel, and Kubernetes security features (RBAC, NetworkPolicies, Pod Security Standards, admission controllers). Experience with ACR image scanning (e.g., Defender, Trivy), OPA/Gatekeeper or Kyverno, CodeQL … feature stores; add model artifact signing, provenance, and runtime isolation for training/serving. Monitoring, logging & response : wire platform and security telemetry to Microsoft Sentinel/Defender, define alerts/runbooks, and support incident response and tabletop exercises. CVE & vulnerability management : maintain and publish SBOMs; continuously scan for vulnerabilities; triage ...

using Azure Active Directory, RBAC, and Privileged Identity Management. The role encompasses the integration of Azure-native security tools such as Defender for Cloud, Sentinel, Key Vault, and managed identities, ensuring encryption of data at rest and in transit, and secure deployment of services like Azure Data Lake, Synapse Analytics … secure landing zones, network segmentation, and identity/access management (Azure AD, RBAC, Privileged Identity Management) Implement Azure-native security controls: Defender for Cloud, Sentinel, Key Vault, managed identities, encryption-at-rest/in-transit Oversee secure integration of Azure services (Data Lake, Synapse, Databricks, Cosmos DB, API Management) Data ...

security and endpoint management. This includes Windows Active Directory and integration with Microsoft Entra ID, unified security operations with Microsoft Defender XDR and Microsoft Sentinel, and modern endpoint and device management with Microsoft Intune and Microsoft Configuration Manager (SCCM/ConfigMgr), providing practical guidance, design assurance and implementation support where … capability across Microsoft Azure and core Microsoft cloud services Proficiency in security technologies, frameworks, and secure architecture patterns (including Microsoft Defender XDR and Microsoft Sentinel) Strong expertise in Windows Active Directory and hybrid identity integration with Microsoft Entra ID Experience with modern endpoint and device management and configuration management, including ...

documentation. Key Responsibilities Monitoring and Triage Monitor security events and alerts using industry-standard SIEM and incident/event management platforms (e.g., Elastic, Microsoft Sentinel, Splunk). Perform rapid triage to determine alert validity, severity, scope, and potential business or operational impact. Correlate related events and identify patterns across multiple … excellent written communication (clear, structured incident notes and stakeholder updates). Strong foundational knowledge of incident and event management/SIEM platforms (e.g., Elastic, Sentinel, Splunk), including query languages used for investigations and detections such as: Kusto Query Language (KQL) ES|QL Kibana Query Language Strong understanding of attacker tactics ...

than simply follow a process, this is the right environment for you. Core Responsibilities: Security Monitoring & Incident Response Monitor security alerts generated by Microsoft Sentinel, Microsoft Defender, Datadog and Elastic. Assess severity and impact of alerts, triage and investigate incidents independently. Execute containment and remediation actions using defined runbooks … reviews for internal and client use. Maintain accurate incident records in JIRA Service Management. Detection Engineering Develop and implement new detection rules in Microsoft Sentinel aligned to the MITRE ATT&CK framework. Draft and optimise KQL queries for detection and threat hunting. Refine existing detection logic based on false positive ...

point of escalation/subject matter expert for other members of the team. Providing support to forces for the configuration of Sentinel and log sources. Co-ordination of the testing, implementation and configuration of new data sources. Contribute towards the management of SIEM content such as detections. Line Management responsibilities … security awareness and practical experience. Desirable Relevant cloud certification or equal experience. Previous public sector experience. Experience with Microsoft Power Platform, Azure DevOps, Microsoft Sentinel (or other SIEM's). Experience working with code repositories and CI/CD. Why Join us? Balance is important and we want ...

team of Cyber Security Consultants specialized in Microsoft security technologies. These consultants are assigned to customer projects in the field of Microsoft Sentinel, Microsoft Defender, Microsoft Entra, Microsoft Intune, Microsoft Purview, and broader Microsoft security architecture and engineering. You will guide them through their personal career growth, support their technical … leadership and team building skills; Strong understanding of cybersecurity principles, frameworks, and best practices; Hands on experience with Microsoft security technologies such as Microsoft Sentinel, Microsoft Defender XDR, Microsoft Entra, Intune, Purview, and Azure security services; Experience translating customer requirements into technical architectures and implementation roadmaps; Affinity with service development ...

operational risks, escalating issues where required. Technical Skills: Strong hands-on experience of Security Operations tools and capabilities, including SIEM and SOAR platforms (e.g. Sentinel, ServiceNow, Splunk SOAR, Cortex), Endpoint Detection & Response (EDR/XDR), Strong hands-on experience of Threat Intelligence platforms (e.g. Recorded Future, Doppel, ZeroFox, Google Threat … vulnerability management tools and processes Strong awareness of cloud services and supporting security controls and monitoring capabilities Working knowledge of Microsoft security stack (Defender, Sentinel, Purview), Active Directory and Azure AD, Windows and Linux environments. Experience with data loss prevention and insider risk tooling advantageous Hands-on experience with automation ...

document, covering cloud, network, identity, data, and application layers — reviewed and updated bi‐annually. Cloud security policy‐as‐code library (OPA/Rego, Terraform Sentinel, or cloud‐native equivalents) integrated into deployment pipelines. IAM strategy and RBAC model documentation, including privileged access management implementation and zero‐trust roadmap. Data security … microservices, service mesh, serverless, and event‐driven patterns — and their security implications. Experience designing and implementing security guardrails as code (OPA/Rego, Terraform Sentinel, cloud‐native policy engines, Kubernetes admission controllers). Understanding of cryptographic principles and their practical application in payment systems: tokenisation, format‐preserving encryption, HSM/ ...