15 of 15 Azure Sentinel Jobs in the North West

customers and colleagues. You will need to demonstrate your Multi-Platform SIEM Expertise: you need proven experience with Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions. Security Operations: Strong analytical skills in threat detection, incident response, and security event analysis … Proficiency in Cribl Stream is expected. Awareness/experience of the following is an advantage - Cloud Security & Modern Infrastructure: Proficiency with AWS/Azure cloud security, containerised environments, and SaaS-based security solutions. Programming & Scripting: Advanced skills in Python, PowerShell, KQL, SPL, and SQL for automation, custom integrations ...

Role: Senior Azure Infrastructure Engineer Location: Manchester Salary: £70,000-95,000 per annum Work pattern: Hybrid What's on Offer: Hybrid working. Professional development. Cycle to Work Scheme. Company perks and free breakfasts. Regular company events. 25 days holiday plus Bank Holidays. We're looking … hands-on Senior Azure Platform & Infrastructure Engineer to take ownership of the Azure environment, working closely with the CTO. This is a practical role within a smaller business, focused on improving, securing and supporting an existing Azure estate. You'll be comfortable working independently ...

Role: Senior Azure Infrastructure Engineer Location: Manchester Salary: £70,000-95,000 per annum Work pattern: Hybrid What's on Offer: Hybrid working. Professional development. Cycle to Work Scheme. Company perks and free breakfasts. Regular company events. 25 days holiday plus Bank Holidays. We're looking … hands-on Senior Azure Platform & Infrastructure Engineer to take ownership of the Azure environment, working closely with the CTO. This is a practical role within a smaller business, focused on improving, securing and supporting an existing Azure estate. You'll be comfortable working independently ...

risks, escalating issues where required. Technical Skills Strong hands‐on experience with Security Operations tools and capabilities, including SIEM and SOAR platforms (e.g. Sentinel, ServiceNow, Splunk SOAR, Cortex), Endpoint Detection & Response (EDR/XDR). Strong hands‐on experience with Threat Intelligence platforms (e.g. Recorded Future, Doppel, ZeroFox … management tools and processes. Strong awareness of cloud services and supporting security controls and monitoring capabilities. Working knowledge of Microsoft security stack (Defender, Sentinel, Purview), Active Directory and Azure AD, Windows and Linux environments. Experience with data loss prevention and insider risk tooling advantageous. Hands ...

Engineer, where one should have experience with: Minimum Qualification - bachelor's degree Multi-Platform SIEM Expertise: Proven experience with Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions. Security Operations: Strong analytical skills in threat detection, incident response, and security event … translate complex security concepts for diverse audiences. Some other highly valued skills may include: Cloud Security & Modern Infrastructure: Proficiency with AWS/Azure cloud security, containerized environments, and SaaS-based security solutions. Programming & Scripting: Advanced skills in Python, PowerShell, KQL, SPL, and SQL for automation, custom integrations ...

/NIST CSF/CIS CSC v8.1) - design, maturity tracking and assurance across full programme lifecycles Enterprise & Cloud Security Architecture - AWS, Azure, GCP, Oracle Cloud (multi-cloud landing zones, hybrid identity, secure migration patterns) Classified Platform Design - OFFICIAL, OFFICIAL-SENSITIVE, SECRET and ABOVE SECRET environments, ROSA, Garrison, Citadel … Cisco, Juniper, F5, Zscaler, NSX-T, SD-WAN, encrypted WAN, DMZ, NAC ServiceNow & M365 Architecture - ITSM, ITOM, CSM, EAM, SharePoint Online, Purview, Entra, Sentinel, Defender, Power Platform, CoPilot Container & DevSecOps - Kubernetes (EKS, Tanzu), Terraform, Ansible, CI/CD security, image scanning, container hardening Architecture Frameworks - TOGAF, ArchiMate, SABSA ...

office locations globally and stay away from home on occasion. Knowledge and experience of these technologies is a key requirement: Microsoft EntraID/Azure Microsoft Defender 365 (including Microsoft Defender XDR) Microsoft Sentinel Microsoft Active Directory Microsoft Intune VMWare Experience in as many of these technologies ...

Cortex XDR. Data Protection & Compliance Support and monitor the company's Data Loss Prevention controls within Microsoft Purview, and data classification through Azure Information Protection labelling. Help maintain the evidence and controls that support the company's accreditations, including ISO/IEC 27001, 27017, and 27018, Cyber Essentials … Request, Change, and Problem management. Understanding of GDPR, data protection, and information governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience with Endpoint Detection ...

solutions that provide business, platform, and technology capabilities for customers and colleagues. This role focuses on administering and optimizing Splunk Enterprise Security, Microsoft Sentinel, and supporting modern Security Operations by developing SIEM use cases, managing data pipelines, automating security workflows, and strengthening enterprise cyber defense capabilities. What … Build and maintain Splunk data models to support advanced analytics and security monitoring. Configure and support Splunk Cloud environments. Administer and maintain Microsoft Sentinel security monitoring capabilities. Manage log ingestion, routing, parsing, normalization, and transformation using Splunk Enterprise and Cribl Stream. Develop automation workflows and security playbooks using ...

tenant architecture, data ingestion, retention design, RBAC, and feed onboarding. Build and maintain parsers, UDM mappings, and data models for Google Cloud, AWS, Azure, endpoint, identity, and network sources. Write, test, and tune YARA‐L detection rules, including single‐event, multi‐event, and composite detections. Design SOAR playbooks … analysts and executive stakeholders. Nice to have Google Professional Cloud Security Engineer or Google SecOps certification. Prior SIEM migration experience (Splunk → SecOps, Sentinel → SecOps, etc.). Experience with adjacent tooling: Wiz, CrowdStrike, Splunk, Sentinel, Snyk. Consulting or systems‐integrator background. Contributions to open detection content (Sigma ...

dedicated Security Operations Centre (SOC) to support the defence of a major UK CNI organisation. The networks protected are predominantly hosted in Azure and AWS cloud platforms, with many hundred systems within these environments that must be protected. The customer is committed to development of this improved … groups or targeted ransomware attacks). Understand TCP/IP component layers to identify normal and abnormal traffic Understanding of AWS &/or Azure cloud services Experience of Splunk (with ES) &/or Sentinel, content development experience desirable Non-technical Client side consulting, including stakeholder engagement ...

against Windows, macOS, and Linux platforms. Awareness of anti-virus, anti-malware, and endpoint protection concepts. Familiarity with SIEM concepts (Cortex XSIAM, Microsoft Sentinel, or equivalent). Familiarity with cloud services (Microsoft Azure, Microsoft 365, AWS). Awareness of incident management processes. Understanding of adversary motivations ...

technical authority across cloud, device, and identity security. Key Focus Areas Microsoft Security Ecosystem: End-to-end hands-on execution across Defender XDR, Sentinel, Purview, Entra ID (PIM, Conditional Access), and Intune. Cloud & Hybrid Infrastructure: Securing cloud-hosted platforms across Microsoft Azure and AWS environments. Identity ...

design and delivery of cloud services. Act as security SME for cloud services Standard Technical Skills & Competencies Experience working in enterprise cloud environments (Azure, AWS, GCP). Experience building cloud infrastructure and using cloud IaC tooling (Terraform, Cloudformation, BICEP) Experience in threat modelling, security reviews and testing. Proficiency … SSPM tooling and use Container knowledge, particularly in Kubernetes. Experience with Linux operating systems. Experience with IaC policy-as-code security tools - Terraform Sentinel, Wiz, etc. Strong understanding of cryptography, modern authentication and authorization mechanisms, networking, and enterprise security architectures. Desirable Previous experience in the financial/regulated ...

technical response to P1 and P2 major incidents, managing Dell VxRail and VMware VCF platform lifecycle operations, overseeing Veeam backup architecture and Azure DR strategy, and delivering capacity management reporting. You'll present complex RFCs at the weekly Change Advisory Board, manage vendor escalations with Dell, HPE, VMware … storage Backup, DR & cloud * Own Veeam Backup & Replication architecture, policy design and recovery testing, maintaining a >98% success rate * Oversee Azure DR strategy, landing zone governance and hybrid platform management Reporting & governance * Deliver monthly capacity management reports across compute, storage and backup * Prepare and present RFCs ...