13 of 13 Azure Sentinel Jobs in the North West

demonstrable capability in pipeline engineering and Infrastructure as Code, with hands‐on experience designing, implementing and optimising CI/CD pipelines (for example Azure DevOps, GitHub Actions or GitLab CI) and defining reusable, governed infrastructure using Terraform and Azure‐native tooling (ARM or Bicep), setting … engineering standards that others follow. Containerisation and orchestration Extensive experience building and operating scalable, resilient container platforms using Docker and Kubernetes, preferably Azure Kubernetes Service, from design through to production support. Security and DevSecOps Strong, practical application of secure‐by‐design and Zero Trust principles, including managed identities ...

across identity, security, cloud, infrastructure, networking, data protection and operational security domains, with a particular focus on Microsoft technologies including Entra ID, Defender, Sentinel, Purview, Azure and Microsoft 365.Salary & BenefitsThe budgeted salary for this role is up to 90,000 year, depending on experience. Click here … Directory, Identity Governance, PIM, Conditional Access, SSO, Federation, and B2B/B2C identity. Provide architectural ownership across the Microsoft security stack, including Defender, Sentinel, Purview, Intune, Security Copilot, Azure Security, and Microsoft 365 Security & Compliance. Develop reusable security patterns for identity, threat, data protection, monitoring, compliance ...

platform that’s quick, secure and resilient for customers, and easy, modern and sustainable for developers. Our core technology focus is on Microsoft Azure and Google Cloud PlatformWe’re looking for an experienced, motivated and innovative Cloud‐focused DevOps Engineer to join our Google Cloud team. ...

Cortex XDR. Data Protection & Compliance Support and monitor the company's Data Loss Prevention controls within Microsoft Purview, and data classification through Azure Information Protection labelling. Help maintain the evidence and controls that support the company's accreditations, including ISO/IEC 27001, 27017, and 27018, Cyber Essentials … Request, Change, and Problem management. Understanding of GDPR, data protection, and information governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience with Endpoint Detection ...

Microsoft-focused technology environment. The role will have a particular focus on Identity & Access Management (IAM), Microsoft Entra ID, Privileged Identity Management (PIM), Azure, Microsoft 365 security and Power Platform governance. You will work closely with Cyber Security, Architecture and Infrastructure teams to strengthen identity governance, improve privileged … Governance. Implement, operate and continuously improve Privileged Identity Management (PIM) controls and privileged access reviews. Support the secure configuration and operation of Microsoft Azure and Microsoft 365. Implement and maintain Microsoft Defender security controls. Support security monitoring, threat investigation and incident response activities. Support vulnerability management, including identifying ...

tenant architecture, data ingestion, retention design, RBAC, and feed onboarding. Build and maintain parsers, UDM mappings, and data models for Google Cloud, AWS, Azure, endpoint, identity, and network sources Write, test, and tune YARA-L detection rules, including single-event, multi-event, and composite detections Design SOAR playbooks … analysts and executive stakeholders Nice to have Google Professional Cloud Security Engineer or Google SecOps certification Prior SIEM migration experience (Splunk → SecOps, Sentinel → SecOps, etc.) Experience with adjacent tooling: Wiz, CrowdStrike, Splunk, Sentinel, Snyk Consulting or systems-integrator background Contributions to open detection content (Sigma, MITRE ...

tenant architecture, data ingestion, retention design, RBAC, and feed onboarding. Build and maintain parsers, UDM mappings, and data models for Google Cloud, AWS, Azure, endpoint, identity, and network sources. Write, test, and tune YARA‐L detection rules, including single‐event, multi‐event, and composite detections. Design SOAR playbooks … analysts and executive stakeholders. Nice to have Google Professional Cloud Security Engineer or Google SecOps certification. Prior SIEM migration experience (Splunk → SecOps, Sentinel → SecOps, etc.). Experience with adjacent tooling: Wiz, CrowdStrike, Splunk, Sentinel, Snyk. Consulting or systems‐integrator background. Contributions to open detection content (Sigma ...

adjacent modules), either in a vendor, partner, or customer capacity Experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Experience with enterprise security architectures, including identity infrastructure, cloud … environments (AWS, Azure, GCP), OT/ICS environments, or hybrid data center Bachelor's degree or equivalent work experience. Bonus points if you haveActive CrowdStrike certification(s): CCFA, CCSE, or CrowdStrike Champions Professional/Expert Direct experience with CrowdStrike NG-SIEM: migration delivery, parser development, CQL, or LogScale ...

against Windows, macOS, and Linux platforms. Awareness of anti-virus, anti-malware, and endpoint protection concepts. Familiarity with SIEM concepts (Cortex XSIAM, Microsoft Sentinel, or equivalent). Familiarity with cloud services (Microsoft Azure, Microsoft 365, AWS). Awareness of incident management processes. Understanding of adversary motivations ...

dedicated Security Operations Centre (SOC) to support the defence of a major UK CNI organisation. The networks protected are predominantly hosted in Azure and AWS cloud platforms, with many hundred systems within these environments that must be protected. The customer is committed to development of this improved … groups or targeted ransomware attacks). Understand TCP/IP component layers to identify normal and abnormal traffic Understanding of AWS &/or Azure cloud services Experience of Splunk (with ES) &/or Sentinel, content development experience desirable Non-technical Client side consulting, including stakeholder engagement ...

modern DevOps practices to enhance security operations. Understanding of social engineering tactics, phishing attacks, and physical security measures. Experience with secured cloud architectures (Azure, AWS) and tools such as Microsoft Defender for Endpoint and Microsoft Sentinel. Attainment of relevant Microsoft accreditations (e.g. … empower individuals to create sustainable value through innovative technology solutions. As one of Microsoft's leading partners in the UK specializing in Azure, Security, Dynamics 365, and Microsoft 365, we have a proven track record of delivering transformational IT services. Our Selection Process: We are committed to providing ...

facts when evidence is incomplete, coordinate technical teams during live incidents and apply sound incident response methodology even when tooling is degraded. Microsoft Sentinel and Defender XDR will be central to your work, but calm judgement, investigative discipline and clear communication will matter just as much. What … complex security incident investigations from initial assessment through containment, recovery and review. Establish incident scope, business impact and likely root cause using Microsoft Sentinel, Defender XDR and evidence from across the enterprise environment. Direct response actions in partnership with infrastructure, identity, cloud, application and wider IT teams. Maintain ...

This role can offer 3 days remote working. Essential Experience: Strong technical expertise in security, network, and infrastructure technologies, including experience with secure Azure/AWS cloud environments, Microsoft Defender for Endpoint, Microsoft Sentinel, and security tooling development. Proven ability to drive security automation and operational ...