1 to 24 of 24 Azure Sentinel Jobs in the UK excluding London

part of NCC Group’s managed services portfolio. This role will be to join our expanding team and focus predominately on our Microsoft Sentinel service. Previous experience with Sentinel is not a pre-requisite. We are looking for a wide range of backgrounds for potential candidates … that contribute to a detection's effectiveness Programming & Data Handling Experience in search query language such as SPL (in Splunk), KQL (In Microsoft Sentinel) Experience with Scripting languages such as PowerShell, Python, Bash Experience writing Regex Experience with source control (Git, Azure Dev Ops) Knowledge of … using statistical methods to find anomalies in data Domain-Specific Knowledge Any of the following: Experience with Microsoft Sentinel and/or Microsoft Defender Knowledge of Azure (or other cloud technologies, AWS, GCP) Knowledge of Windows Active Directory Knowledge of Windows Operating System fundamentals Knowledge of more »

and checklists for detection that aligns to MITRE ATT&CK TTP Hunting Framework. Develop and maintain a repository of detection queries stored within Azure DevOps with a CICD methodology. Maintaining and managing CI/CD Azure Sentinel pipelines Experience Needed: Familiarity with Azure services and security features is essential. This includes understanding Azure Security Centre, Microsoft Sentinel (SIEM), and other Azure-native security tools. Ability to formulate hypotheses about potential threats and develop strategies to detect them. This more »

Tier-1 Microsoft Partner are rapidly expanding their SOC team. They are an accredited Solutions Partner for Security alongside a solutions partner for all other 6 designations. Huge growth plans for the team with unrivaled career progression! Role Overview: Working more »

within a structured 24/7 rotating shift pattern. Essential Experience Minimum of 3 years of commercial experience with the Microsoft 365 suite, Azure, Intune, and Defender. Previous experience in a SOC or security team, with a focus on leadership responsibilities. Strong understanding of Information Security principles. Excellent … installing security software and applications. Relevant Microsoft certifications, such as SC-200. Familiarity with Security Incident and Event Management (SIEM) tools, such as Azure Sentinel. Experience with Endpoint Detection and Response (EDR) tools. If you possess the necessary skills and experience, we encourage you to apply. Interviews will more »

experience of information security, data protection and information rights legislation applied within a public authority knowledge of a wide range of technologies including Azure, M365, MS Purview, MS Security suite, Sentinel, and Operating Systems. No candidate will meet every single desired requirement. If your experience looks more »

Key Skills Proficiency in threat detection and response, with experience using SIEM, EDR, and Vulnerability Management tools. Experience With Microsoft Defender, Endpoint and Azure Sentinel specifically Experience in securing cloud services and enterprise applications, with a focus on IAM. Experience with network tools and concepts such more »

we are recruiting a Senior Security and Cloud Engineer . This role focuses on designing, implementing, and securing cloud-based solutions on the Microsoft Azure platform, ensuring the integrity, confidentiality, and availability of information systems through cybersecurity best practices and Azure's advanced security features. Key … Responsibilities Cloud Infrastructure Design and Security : Design, deploy, and manage Azure cloud infrastructure across IaaS, PaaS, and SaaS, while implementing and maintaining virtual networks, storage accounts, and Azure security resources (e.g., Azure Security Centre, Azure Sentinel, Azure Key … Certified: Azure Solutions Architect, Azure Security Engineer Associate, CISSP, CSSP, or CEH. Azure Expertise : Demonstrable experience with Microsoft Azure services and security features, including a deep understanding of Azure networking, compute, storage, and databases. Security Tools : Hands-on experience with more »

ensuring high availability and security of its infrastructure. This role will be pivotal in driving the Kubernetes migration while managing the company’s Azure infrastructure with a focus on automation, security, and scalability. Job Title : DevOps Engineer Location : Reading, UK (Remote) Sector : Insurance/Finance Salary: £100k + … Bonus Must Have: Strong experience with Azure Expertise in Kubernetes, with hands-on experience in deploying and managing Kubernetes clusters. Proficiency in Terraform for infrastructure automation. Experience with Azure Sentinel or equivalent cloud security tools. Solid understanding of CI/CD pipelines and tools … paced environment. Qualifications : Bachelor’s or Master’s degree in Engineering, Computer Science, or a related field. Relevant certifications such as: Microsoft Certified: Azure Administrator Associate or Azure Solutions Architect Expert Certified Kubernetes Administrator (CKA) HashiCorp Certified: Terraform Associate Azure Security Engineer Associate (optional more »

Job Overview We are seeking an experienced Sentinel and SOX Solution Designer to join our client on an initial 3-month contract (potential to extend after this). You will work closely with the architecture team, taking high-level designs and creating detailed, low-level design documents for … a Microsoft Sentinel instance. This role requires a blend of technical design expertise and knowledge of SOX compliance and SIEMs to ensure the solution meets both business and technical requirements. Key Responsibilities Design Development : Translate high-level designs from the architecture team into detailed low-level designs for … a Sentinel implementation. Ensure the design meets both business and technical requirements, focusing on security, compliance, and operational efficiency. Technical Integrations : Account for all necessary technical integrations and ensure they are clearly defined in the design. Collaborate with external partners to ensure seamless integration with SIEM tools and more »

focuses on designing, deploying, and optimizing workflows that enhance operational efficiency in security processes. The ideal candidate will have extensive experience with Microsoft Sentinel, Azure Logic Apps, and related technologies to drive automation and handle routine SOC tasks. Key Responsibilities: Develop and deploy automated workflows using … Azure Logic Apps to streamline SOC operations. Create, maintain, and optimise Sentinel playbooks for security event response. Build and integrate APIs to support SOC functions. Ensure efficient threat detection and response using advanced configurations. Work collaboratively to enhance the organization's security infrastructure. Key Requirements: SOC … background with hands-on experience in developing and integrating APIs. Proficient in JSON, KQL, and PowerShell. Proven experience in building, maintaining, and optimizing Azure Logic Apps and Sentinel playbooks. Familiarity with automating routine SOC tasks to improve security operations. To be considered, candidates should demonstrate hands more »

Eligible for SC clearance Additionally, any experience of working with customers/stakeholders would be advantageous, as would exposure to any of Splunk, Sentinel, AWS, Azure, networking, system administration, data analytics tools. Please send CV for job description and an informal chat. Excellent opportunity to kick more »

Eligible for SC clearance Experience of working with customers/stakeholders would be advantageous, as would exposure to any of the folloiwng: Splunk, Sentinel, AWS, Azure, networking, system administration, data analytics tools. Please send CV for job description and an informal chat. Excellent opportunity to kick more »

in the Technical Centre of Excellence supports partners by delivering expertise in Microsoft Cloud solutions, with a focus on Security, AI, Modern Work, Azure, and Business Applications. The ideal candidate should be skilled in Microsoft 365 solutions, including Microsoft Defender, Sentinel, Intune, and Copilot. The role … providing technical enablement and pre-sales support across teams, engaging with customers to understand their business needs, and offering strategic guidance on leveraging Azure and Microsoft 365 solutions. Responsibilities include conducting workshops, assessments, and demos to showcase the value of these services, collaborating with sales teams to provide … technical leadership, and staying updated on the latest advancements in Azure and M365. As a trusted advisor, the role requires a consultative approach, addressing partner needs, responding to queries, and contributing to various cross-functional projects and team initiatives. The Candidate: In-depth knowledge of Microsoft 365, Azure more »

Cyber Ops Manager Location: Home/Brighton Contract Rate: £(Apply online only) per day (Inside IR35) Skills: MS Security skills - Defender, Sentinel & Azure Security Center, Certifications -CISSP, CISM, Hand-on team leader, Communication This is an exciting role in a forward-thinking organisation and the Interim … demonstrate accountability at Board level Cyber certification (CISSP), plus other relevant qualifications such as CISM, (ISC)² ISSEP or SSCP, CompTIA Security+, Microsoft Certified: Azure Security Engineer Associate etc. In-depth technical experience with Microsoft security and infrastructure services, including Defender, Sentinel, Azure Security Center more »

Cyber Ops Manager Location: Home/Brighton Salary: £650 - 750 per day (Inside IR35) Skills: MS Security skills - Defender, Sentinel & Azure Security Center, Certifications -ISC2, (ISSEP or SSCP), CISP, CISP, Hand-on team leader, Communication This is an exciting role in a forward-thinking organisation and … to demonstrate accountability at Board level Cyber certification (CISSP), plus other relevant qualifications such as (ISC)² ISSEP or SSCP, CompTIA Security+, Microsoft Certified: Azure Security Engineer Associate etc. In-depth technical experience with Microsoft security and infrastructure services, including Defender, Sentinel, Azure Security Center more »

skills and the ability to present complex technical topics in clear and easy-to-understand language Familiarity with tools such as Malware Sandboxes, Sentinel, Splunk, EDR solutions Strong knowledge of the following: Enterprise Cloud Solutions (Azure, GCP, AWS) Modern authentication systems and attacks (SSO, OATH, Entra … etc.) SIEM workflows (preferably Sentinel and Splunk) Packet Analysis Malware Detection, to include dynamic and light static analysis Network Monitoring metadata (web logs, firewall logs, WAF/IDS) Email Security and common business email compromise attacks Vulnerability Identification and correlation to attacker behavior Preferred Qualifications Experience in network … GIAC certification(s) strongly preferred. CISSP, Security +, Network +, CEH, RHCA, RHCE, MCSA, MCP, or MCSE preferred Familiarity with technologies such as Sentinel, Splunk, Microsoft Defender suites, Crowdstrike Falcon, SentinelOne Familiarity with Group Policy, Intune, Virtualization, and other IT Infrastructure tools Understanding and/or experience with more »

investigations of cloud security incidents and violations. What We're Looking For: Proven experience of working within a security operations environment Experience of Azure and M365 security. Strong hands on knowledge of Windows end-user devices, as well as Microsoft Sentinel and Defender. In-depth understanding more »

/Infrastructure Engineer and are now in the Cyber Security/InfoSec space? Do you know how to help design and implement new Azure cloud infrastructure services along with identifying potential improvements for security and existing IT infrastructure? The technology stack is primarily based around Microsoft so MS … Defender, Sentinel, Intune, Azure Arc etc, plus some new security toys to play with… The company is dynamic, fast paced, and growing. They will provide you with continuous learning and development to progress your Security career. The team are great, very friendly and work in collaborative … own! To be considered you will have the following experience: Strong experience of supporting and maintaining Microsoft Infrastructure/Cloud technologies such as Azure and M365 Experience in a Cyber Security type role or strong elements of cyber security as part of your role. It would be great more »

in shifts for a 24hr service coverage rota including overnight & weekend hours. You will be monitoring and responding to security incidents using Microsoft Sentinel and ticket system. You will be following processes for including Incident, Problem and Service request management based on ITIL practices. You will help produce … have passed the SC-200 exam by the end probation. Be able to achieve a successful security clearance screening (SC) Essential skills: Microsoft Sentinel operations Microsoft Sentinel administration - Desirable Microsoft Defender XDR operations & administration Microsoft 365 administration - Desirable Graylog SIEM Experience of Azure cloud more »

in shifts for a 24hr service coverage rota including overnight & weekend hours. You will be monitoring and responding to security incidents using Microsoft Sentinel and ticket system. You will be following processes for including Incident, Problem and Service request management based on ITIL practices. You will help produce … have passed the SC-200 exam by the end probation. Be able to achieve a successful security clearance screening (SC) Essential skills: Microsoft Sentinel operations Microsoft Sentinel administration - Desirable Microsoft Defender XDR operations & administration Microsoft 365 administration - Desirable Graylog SIEM Experience of Azure cloud more »

focuses on designing, deploying, and optimizing workflows that enhance operational efficiency in security processes. The ideal candidate will have extensive experience with Microsoft Sentinel, Azure Logic Apps, and related technologies to drive automation and handle routine SOC tasks. Key Responsibilities: Develop and deploy automated workflows using … Azure Logic Apps to streamline SOC operations. Create, maintain, and optimise Sentinel playbooks for security event response. Build and integrate APIs to support SOC functions. Ensure efficient threat detection and response using advanced configurations. Work collaboratively to enhance the organization's security infrastructure. Key Requirements: SOC … background with hands-on experience in developing and integrating APIs. Proficient in JSON, KQL, and PowerShell. Proven experience in building, maintaining, and optimizing Azure Logic Apps and Sentinel playbooks. Familiarity with automating routine SOC tasks to improve security operations. To be considered, candidates should demonstrate hands more »

within a structured 24/7 rotating shift pattern. Essential Experience Minimum of 3 years of commercial experience with the Microsoft 365 suite, Azure, Intune, and Defender. Previous experience in a SOC or security team, with a focus on leadership responsibilities. Strong understanding of Information Security principles. Excellent … installing security software and applications. Relevant Microsoft certifications, such as SC-200. Familiarity with Security Incident and Event Management (SIEM) tools, such as Azure Sentinel. Experience with Endpoint Detection and Response (EDR) tools. If you possess the necessary skills and experience, we encourage you to apply. Interviews will more »

to the 3rd line IT Infrastructure Engineers. Knowledge in monitoring/maintaining of Endpoint detection and response platforms (EDR) (Example: BitDefender, Carbon Black, Sentinel One, CrowdStrike); To act at the customer service point of contact between 3rd line and the client. Respond to enquiries from clients and help … Excellent Customer Service Skills; Deep working knowledge of the Microsoft stack of technology at administrator level, including Windows Server, Microsoft365 Admin Centres including Azure Entra ID, Office 365, Compliance, Exchange, etc. Additionally, exposure to Azure Virtual Desktop is desirable. Highly technical around networking (TCP/IP more »

audiences, including senior management. · Strong time management and able to coordinate projects and delegate tasks · Confident in developing complex SIEM rules in Microsoft Sentinel based off real-world attacks and threat intelligence. · Experience and understanding of logic-apps and automation, able to design and implement new automation to … response experience · Threat Intelligence experience including new threat hunting rules. · Fluent in KQL Desirable Skills/Experience: · Experience in troubleshooting bespoke developed connectors. · Azure Experience · Defender Experience · Scripting/Automation · Docker/Virtualisation Benefits: - Private Medical Insurance/Company Health Cash Plan - 25 Days Holiday + Birthday Off more »