276 to 300 of 305 Digital & IT Jobs

escalation quality, handoff, and case closure - Design and facilitate tabletop exercises and translate findings into control improvements SIEM optimization and detection engineering: - Tune Microsoft Sentinel for signal quality and cost efficiency, including connector selection, ingestion tiering, and table-level retention decisions - Author and maintain analytic rules and hunting queries … models - Support segmentation and egress control initiatives Required Qualifications - 7+ years in security engineering or security operations - Deep hands-on Microsoft security stack experience: Sentinel, Defender XDR, Defender for Cloud, Entra ID, Intune - Direct, demonstrable Microsoft Purview experience across DLP, sensitivity labels, and Insider Risk Management - Strong KQL authoring ability ...

technical role for engineers who love seeing things work. Job Responsibilities Execute end-to-end platform deployments across Google SecOps and/or Microsoft Sentinel for new customers Onboard log sources, configure data connectors, and validate ingestion pipelines Load and deploy existing TENEX content into customer environments - including parsers, dashboards … cybersecurity, IT operations, cloud engineering, or a related technical field Hands-on experience with SIEM platforms, particularly Google SecOps and/or Microsoft Sentinel Experience with log source onboarding, data connectors, and ingestion pipeline configuration Familiarity with data pipeline technologies such as Bindplane, OpenTelemetry, Cribl, or similar Scripting experience ...

secure, resilient, available and well-optimised. Troubleshoot complex infrastructure, network and virtualisation issues. Cyber Security & Compliance Lead cyber security initiatives and administer Microsoft Defender, Sentinel and Purview services. Monitor alerts, investigate incidents, manage vulnerabilities, conduct risk reviews and maintain security baselines. Support compliance, audits, business continuity and disaster recovery planning … across Azure, Microsoft 365, VMware, Intune, Autopilot, Entra ID and Conditional Access. Cyber security capability across security operations, vulnerability management, monitoring, incident response, Defender, Sentinel, Zero Trust, risk, compliance and governance. Professional strengths in PowerShell automation, documentation, problem solving, project delivery, vendor management, stakeholder engagement and continuous improvement. What ...

technical role for engineers who love seeing things work. Job Responsibilities Execute end-to-end platform deployments across Google SecOps and/or Microsoft Sentinel for new customers Onboard log sources, configure data connectors, and validate ingestion pipelines Load and deploy existing TENEX content into customer environments — including parsers, dashboards … cybersecurity, IT operations, cloud engineering, or a related technical field Hands-on experience with SIEM platforms, particularly Google SecOps and/or Microsoft Sentinel Experience with log source onboarding, data connectors, and ingestion pipeline configuration Familiarity with data pipeline technologies such as Bindplane, OpenTelemetry, Cribl, or similar Scripting experience ...

doing Designing and maintaining identity and access controls across Entra ID, including Conditional Access and Privileged Identity Management. Enhancing security controls across Microsoft Defender, Sentinel and Purview environments. Developing endpoint security standards for Windows and macOS platforms. Automating security processes, reporting and evidence collection using PowerShell, Microsoft Graph and related … smarter, more effective ways to solve complex challenges. Experience in Cyber Security Engineering, Infrastructure Security or Cloud Security. Exposure to Microsoft Defender XDR, Microsoft Sentinel and KQL. Knowledge of Entra ID, including Conditional Access, PIM and identity lifecycle controls. Experience with vulnerability management and security operations processes. Practical automation skills ...

continuous improvement of SOC operations. What You'll Bring: Proven experience working within a Security Operations Centre. Hands-on experience with Microsoft Sentinel and Splunk. Strong understanding of MITRE ATT&CK. It would be great if you had: Networking protocols and infrastructure (TCP/IP, LAN/WAN, HTTP, SMTP … engineering experience. Python, PowerShell, Bash, Perl or C++ scripting skills. CySA+, Blue Team Level 2 or other SOC-focused certifications. Experience with QRadar alongside Sentinel and Splunk. If you are interested in this role but not sure if your skills and experience are exactly what were looking for, please ...

guidance, helping customers optimize their security defenses and mitigate risks effectively. Microsoft Focus: Utilize your knowledge of Microsoft security products, including Azure, Microsoft Sentinel, KQL, and the Microsoft Defender suite, to offer tailored recommendations and solutions. Relationship Building: Build and nurture strong relationships with customers, acting as a reliable … levels of business and providing informal leadership in cyber security matters. Strong understanding of Microsoft security products and technologies, with proficiency in Azure, Microsoft Sentinel, KQL, and the Microsoft Defender suite or related product lines. Deep understanding of attacker tradecraft and security hardening techniques, enabling you to offer valuable insights ...

strategy. Monitor security alerts and investigate cyber security incidents. Manage vulnerability remediation across servers, endpoints, cloud platforms and network infrastructure. Support Microsoft Defender, Microsoft Sentinel, Microsoft Intune and Microsoft Entra security capabilities. Implement and maintain security controls including Conditional Access, Multi-Factor Authentication, Privileged Identity Management and Zero Trust principles. … across the UK. Desirable: Microsoft Azure Administrator Associate certification. Microsoft security certifications such as AZ-500, SC-200 or SC-300. Experience with Microsoft Sentinel, Defender XDR, Qualys or Tenable. Experience with Microsoft Power BI, Microsoft Fabric and data visualisation. Experience with Microsoft Copilot, Azure AI Services or enterprise ...

implementatie en het beheer van specifieke security-oplossingen. Je bent de kartrekker voor onder andere het opzetten van ons nieuwe SOC, Microsoft Sentinel (SIEM) voor actieve threat detection en het beheren van Microsoft Defender for Cloud voor vulnerability management. Je analyseert en volgt security-incidenten op, en bent de drijvende … denkniveau, aangevuld met security-certificeringen (bijv. AZ-500, SC-200); Diepgaande, specialistische kennis van de Azure security-stack; Hands-on ervaring met Microsoft Sentinel voor het opzetten van detectieregels, incident response (SOAR) en threat hunting; Ervaring met Microsoft Defender for Cloud voor Cloud Security Posture Management (CSPM) en vulnerabilitymanagement; Sterke ...

will initially lead a major enterprise migration from an incumbent endpoint detection and limited-hours outsourced monitoring model to Microsoft Defender XDR and Microsoft Sentinel, transitioning into a Cyro-managed SOC. The successful candidate will own the engagement from discovery and target-state design through migration, assurance and service transition. … monitoring strategies, target operating models, service boundaries, responsibilities, escalation paths, service levels and transition plans for client-operated and managed SOC services. Design Microsoft Sentinel and Defender XDR solutions, including Defender for Endpoint, Defender for Identity, Defender for Office 365 and Defender for Cloud Apps where relevant, making effective ...

identity and access management (IAM), Privileged Identity Management (PIM) encryption, and network security controls. Design and run SIEM/SOAR use-cases in Microsoft Sentinel (data connectors, analytics rules, workbooks, automation playbooks) to support SOC operations, threat detection, and incident response. Support DevSecOps practices and secure software development. Governance & Awareness … management, and endpoint protection Cloud security (AWS, Azure, or similar) Security frameworks (ISO 27001, NIST, CIS) Proven experience with Azure Security tools, including Microsoft Sentinel (SIEM) and the Microsoft Defender suite, covering onboarding, configuration, alert tuning, and day-to-day monitoring. Experience with security posture management in Azure (e.g., Defender ...

understanding of Cyber Security Engineering, Security Operations and Security Architecture. Experience working with enterprise security tooling and platforms. Knowledge of technologies such as Microsoft Sentinel, and Zscaler. Experience driving tooling improvements, automation and operational efficiency. The ability to translate technical concepts into practical business outcomes. A pragmatic and risk-based … opportunity to: Lead a high-performing cyber engineering team. Influence strategic cyber investment decisions. Work with modern security technologies including Microsoft Defender, Microsoft Sentinel and Zscaler. Partner with senior leaders across technology and cyber security. Play a key role in protecting critical services and infrastructure used by millions of customers ...

controls. Develop and maintain incident response procedures, playbooks and documentation aligned to industry best practice. Detection Engineering & Security AutomationConfigure, optimise and continuously improve Microsoft Sentinel and Microsoft Defender technologies. Develop and tune detection logic using KQL to identify emerging threats and attacker behaviours. Build and maintain automated SOAR workflows using … Security Operations, Cyber Defence, Incident Response or Blue Team functions. Experience operating within hybrid cloud and on-premise environments. Hands-on experience with Microsoft Sentinel, Microsoft Defender XDR and Azure security technologies. Experience with detection engineering, threat detection and security automation. Exposure to vulnerability management platforms such as Tenable ...

perfect opportunity for you. Required Skills and ExperienceStrong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR … working in customer-facing or consultancy roles Strong communication skills, with the ability to explain technical concepts clearlyTechnical CompetenciesSIEM and XDR platforms, including Microsoft Sentinel, Microsoft Defender, Palo Alto XSIAM or XDR, CrowdStrike and SentinelOne SOAR development, including automation and playbook design using platforms such as Palo Alto XSOAR ...

business continuity and disaster recovery planning activities. Security Engineering & Technology Support the deployment and management of security tools including: Microsoft Purview Microsoft Defender Microsoft Sentinel Microsoft Entra ID Email Security Solutions Endpoint Protection Technologies Vulnerability Management Platforms Assist with security configuration reviews and hardening activities. Reporting & Stakeholder Engagement Produce security … networking, operating systems, cloud technologies, and identity management. Strong analytical and problem‐solving skills. Excellent written and verbal communication skills. Desirable Experience with Microsoft Sentinel and Defender XDR. Experience with third‐party risk management. Knowledge of GDPR and data protection requirements. Experience working with managed SOC providers. Exposure to security ...

tools and recommend modernization strategies Lead Zero Trust initiatives across identity, endpoint, application, and cloud environments Architect solutions using Microsoft Entra ID, Intune, Defender, Sentinel, Purview, and Azure Security services Partner with infrastructure, compliance, application, and security teams on strategic initiatives Conduct architecture reviews, risk assessments, and security evaluations Improve … security architecture experience 5+ years designing and implementing Microsoft security solutions in enterprise environments Strong experience with: Microsoft Entra ID Microsoft Defender XDR Microsoft Sentinel Microsoft Intune Microsoft Purview Azure Security Services Experience implementing or supporting Zero Trust security strategies Experience developing security architectures, standards, and remediation roadmaps Ability ...

attack patterns, and provide recommendations to reduce risk and improve resilience. Security Platforms & Service Improvement Own the technical effectiveness and continual improvement of Microsoft Sentinel, Microsoft Defender, SIEM, SOAR, EDR, and XDR capabilities. Develop and maintain detection rules, use cases, automation, and response playbooks to improve operational efficiency. Work with … Incident Response role. Strong hands-on experience investigating and responding to complex cyber security incidents. Deep technical knowledge of Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID. Experience designing, tuning, and optimising SIEM, SOAR, EDR, and XDR solutions. Strong ...

Defender for Endpoint, ensuring the platform remains healthy, effective and aligned to evolving security requirements.* Develop, maintain and continuously improve Microsoft Defender and Microsoft Sentinel capabilities, including monitoring coverage, automation opportunities and operational effectiveness.* Support the onboarding of new applications, services and technology platforms, ensuring appropriate security monitoring and detection … operations and engineering disciplines. **Key Experience Required** * Experience deploying, configuring and managing Microsoft security technologies, particularly Microsoft Defender for Endpoint.* Experience working with Microsoft Sentinel in an engineering environment.* Experience working within Azure cloud environments and supporting cloud security controls.* Experience working with log management, data ingestion and integration technologies. ...

customer environments. You will work closely with Senior and Lead Analysts for guidance, development and collaborative investigation. You will use platforms such as Microsoft Sentinel, Google SecOps, Defender XDR, CrowdStrike Falcon, SentinelOne and Cortex XSOAR/XSIAM to understand what has happened, how activity progressed and what actions need … read and interpret logs from multiple sources. Awareness of MITRE ATT&CK and differentiating legitimate admin activity vs suspicious behaviour. Experience with Microsoft Sentinel, Google SecOps or other SIEM platforms. Experience with Defender, CrowdStrike, SentinelOne or other XDR solutions. Ability to query in KQL, CQL, S1QL, XQL or similar languages. ...

adoption programmes. Support pre-sales activities, workshops, proof of concepts, and executive presentations. Technology & Innovation Microsoft Azure Microsoft 365 Security Microsoft Defender Suite Microsoft Sentinel Microsoft Entra Microsoft Copilot for Security Microsoft Purview AWS Security Google Cloud Security Wiz Platform Emerging AI security platforms Evaluate and introduce new technologiesand services … Private Access) Microsoft 365 Defender (Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps) Microsoft Defender for Cloud Microsoft Sentinel Microsoft Copilot for Security Microsoft Intune AWS Security Services Google Cloud Platform Security Zero Trust Architectures DevSecOps CNAP platforms (like Wiz and Palo Alto) Secure ...

threat models. Advise on and implement security program strategy, including risk frameworks, maturity assessments, and roadmap development. Support SaaS security platform implementations (CrowdStrike, Sentinel, Splunk, Chronicle, and similar). Apply foundational networking principles and cloud security best practices across AWS, Azure, and GCP environments. Stay current on AI-driven security … hunting, SOC operations, MDR. Working knowledge of security program development, cyber risk frameworks, and compliance landscapes. Experience with major security platforms (CrowdStrike, Splunk, Microsoft Sentinel, Palo Alto, Chronicle, or similar). Strong understanding of networking fundamentals (TCP/IP, DNS, firewall architecture, segmentation) and cloud infrastructure security. Proven track record ...

driven and endpoint-focused security architecture for user-facing environments Data protection and compliance capabilities through Microsoft Purview Modern SOC enablement leveraging Defender and Sentinel telemetry alongside broader tooling The secure adoption of Microsoft Copilot and AI/LLM-driven capabilities, ensuring appropriate governance, data protection and access controls What … Entra ID (P2), including Conditional Access, MFA and Privileged Identity Management (PIM) Support the modernisation of Colt’s SOC operating model, leveraging Defender and Sentinel for user and endpoint telemetry, alongside integration of broader infrastructure data sources Conduct security architecture reviews and provide assurance for solutions leveraging Microsoft security technologies ...

colleagues across the Club, promoting practical security behaviours and helping teams understand and manage information security risks. Work with Microsoft security technologies, including Defender, Sentinel, Entra ID, Intune and Purview, supporting monitoring, investigation, configuration review and control improvement activity. Support supplier and third‐party security assurance activities, including security questionnaires … role. Experience of investigating security alerts, vulnerabilities, incidents or control weaknesses in a business environment. Knowledge of Microsoft 365 security technologies, ideally including Defender, Sentinel, Entra ID, Intune and Purview. Understanding of cyber security frameworks and standards such as ISO 27001, Cyber Essentials, PCI DSS and NIST. Experience working with ...

Security or SOC-related security qualification or apprenticeship such as: Cisco Certified CyberOps Associate, or Cyber Technologist L4 Apprenticeship Sentinel, PowerShell, M365, InTune, MS Dynamics, Tenable You will be required to have/go through SC vetting. Role Profile Working within CSOC, this key function supports the group in providing … Static and Dynamic analysis Event Log analysis (preferrable) DNS Investigations and Blocking Privileged Access Management Solutions Familiar with intelligence sources Basic Threat Hunting MS Sentinel MS 365 Tenable Cyro is committed to ensuring that we offer industry leading career opportunities, salary and benefits packages. Join us and you can expect ...

containers and AKS, App Service, Functions, storage, databases and other platform services. Configure security logging and monitoring using Azure Monitor, Log Analytics and Microsoft Sentinel, and integrate relevant Defender XDR telemetry. Implement Microsoft Purview capabilities where required, including information protection, sensitivity labels, data classification, data loss prevention, retention and records … data classification or data loss prevention. Microsoft certifications such as AZ-500, AZ-104, SC-300, SC-400 or SC-100. Experience with Microsoft Sentinel, Defender XDR or Defender for Cloud Apps. Experience implementing security controls through Azure DevOps or GitHub CI/CD pipelines. Knowledge of the Microsoft Cloud ...