1 to 25 of 42 Kusto Query Language Jobs

Cyber Security team on an initial 3-month contract . This is a fully remote opportunity for an analyst with strong Microsoft Sentinel and KQL expertise who can contribute immediately within a live Security Operations Centre (SOC) environment. The successful candidate will play a key role in developing, tuning … translated into effective detections. This role requires strong hands-on experience with Microsoft Sentinel, security telemetry and Kusto Query Language (KQL), alongside the ability to work autonomously within a fast-paced cyber security environment. Key Responsibilities Develop, test, deploy and maintain Microsoft Sentinel detection content Write, optimise ...

Advantageous: MS Certified Fabric Data Engineer Associate, Medallion, Delta Lakes, Azure Data Factory, DevOps, IaC, CI/CD, Kusto Query Language (KQL), MS Purview, Key Vault, GenAI, + Agile Delivery. Benefits: Salary to £40,000 (DOE) + Remote/Hybrid Working + Pension + 25 days holiday ...

Advantageous: MS Certified Fabric Data Engineer Associate, Medallion, Delta Lakes, Azure Data Factory, DevOps, IaC, CI/CD, Kusto Query Language (KQL), MS Purview, Key Vault, GenAI, + Agile Delivery. Benefits: Salary to £40,000 (DOE) + Remote/Hybrid Working + Pension + 25 days holiday ...

investigation and analytical skills. Desirable Banking, financial services or other regulated-sector experience. Microsoft Sentinel, Defender XDR, Defender for Identity or Defender for Cloud. KQL, PowerShell, Python or similar scripting/automation. Threat hunting, malware analysis and detection engineering. Azure and Microsoft 365 investigation experience. EnCase, FTK, Velociraptor, Volatility ...

cyber investigations. Desirable Experience in banking, financial services or another regulated environment. Experience with threat intelligence, malware analysis, scripting or automation using PowerShell, Python, KQL or similar languages. Experience developing detection rules, response playbooks, threat hunts or security orchestration and automation workflows. Knowledge of Microsoft security technologies such as Sentinel ...

Skills and Experience required: Have a high level of ability to create and develop security orchestration and automated response (SOAR). Strong proficiency in KQL and detection engineering Experience and working knowledge with operating systems - both Linux and Windows platforms Extensive knowledge of Azure including Azure functions and Logic Apps. ...

Skills and Experience required: Have a high level of ability to create and develop security orchestration and automated response (SOAR). Strong proficiency in KQL and detection engineering Experience and working knowledge with operating systems - both Linux and Windows platforms Extensive knowledge of Azure including Azure functions and Logic Apps. ...

response methodologies, digital forensics and frameworks such as MITRE ATT&CK and NIST. Exposure to Microsoft security technologies, threat hunting, scripting (PowerShell, Python or KQL) or forensic tooling would be advantageous. If you think this role is a fit, we'd love to hear from you. Reference ...

cloud platforms, SaaS, and internal systems. Documenting security processes, tool configurations, and contributing to service delivery documentation. Supporting colleagues with ISO 27001 compliance and KQL-related tasks. What we are looking for: Previously worked as a Threat Detection Engineer or in a similar role. Must have strong expertise in KQL.Hands ...

best practices Ability to operate effectively in high-pressure environments and manage multiple incidents simultaneously Desirable Skills Experience with Microsoft Defender technologies Knowledge of KQL and detection rule development Previous experience within highly regulated or large enterprise environments Relevant cyber security certifications (SC-200, GCIA, GCIH, CISSP, Security+, etc.) Contract ...

environment. Key Skills & Experience: Strong background in Security Engineering, SOC, Detection Engineering, or Incident Response Hands-on experience with SIEM/XDR platforms and KQL, SPL, or LogScale Microsoft 365 security experience Threat hunting and detection engineering aligned to MITRE ATT&CK Python and/or PowerShell scripting EDR experience ...

triage, threat hunting, data loss prevention, and operational risk analysis. * Demonstrable experience with at least one major SIEM and EDR platform, additional hands on KQL/SPL, PowerShell/Python experience preferred. * Demonstrable experience with Security Orchestration and Automation. * Certifications such as SC-200, AZ-500, GCIA/GCIH/ ...

will help you find ways to work more efficiently, while using your own judgement to check their output. Experience with Intune, Autopilot, Defender, PowerShell, KQL, SQL Server, Salesforce or security certification evidence would be useful. You don’t need experience with all of these to apply. What’s on offer ...

scale medical research. You will work closely with engineering, architecture and cloud teams to integrate security throughout the software development lifecycle. Microsoft Azure and KQL experience are essential , alongside relevant experience in CI/CD, Kubernetes, API security, security-as-code and security automation . This is a hands ...

experience Working in an MSP, consultancy, SaaS business or development team. Supporting regulated customers or operating across multiple customer environments. Azure Monitor, Application Insights, KQL or OpenTelemetry. Multi-tenant architecture and tenant isolation. Deploying or operating AI and LLM-based services. Relevant Microsoft certifications, such ...

days onsite Full time Skills Mandatory Skills : .Net Core Primary Skills: C#, .NET, NET Core, JavaScript, HTML CSS Azure Data Explorer Kusto KQL Secondary Skills: React AngularAngularJS TypeScript PowerShell Azure Storage Azure Monitor Application Insights Geneva Monitoring Azure DevOps REST APIs YAMLJSON Azure SQL Python JD: 3+ years ...

unapproved integrations, third-party model risk, and inadequate monitoring; translate findings into proportionate safeguards. Build automation and proof-of-concept solutions using PowerShell, Python, KQL, APIs, policy-as-code, infrastructure-as-code, cloud-native functions, and workflow technologies, and mature successful concepts into governed, supportable services. Monitoring, Governance, Reporting & Leadership ...

Microsoft Fabric solutions: OneLake, Lakehouse, Warehouse, Data Factory pipelines, Dataflows Gen2, Notebooks (PySpark/Spark SQL), Real-Time Intelligence (Eventstreams, Eventhouse/KQL) and Power BI + Power BI CoPilotDesign governance, security and operating frameworks: data governance with Microsoft Purview, sensitivity labels, RLS/OLS, identity and access models, tenant ...

Experience within the NHS or wider public sector would be valuable, as would exposure to Oracle Fusion or HCM security, ServiceNow, major programme transitions, KQL, scripting or security across AWS and Google Cloud. br br Relevant certifications may include SC-100, SC-200, AZ-500, CISSP, CISM, TOGAF, SABSA ...

Analytics, Defender for Cloud) Excellent understanding of cloud performance, IaaS/PaaS, networking fundamentals, API performance and capacity modelling Skilled in dashboards, log queries (KQL), custom metrics and performance analysis Ability to diagnose complex issues across infrastructure, networks, applications or databases Confident scripting and automation skills (PowerShell, Azure Automation, Graph ...

Analytics, Defender for Cloud) Excellent understanding of cloud performance, IaaS/PaaS, networking fundamentals, API performance and capacity modelling Skilled in dashboards, log queries (KQL), custom metrics and performance analysis Ability to diagnose complex issues across infrastructure, networks, applications or databases Confident scripting and automation skills (PowerShell, Azure Automation, Graph ...

experience at Level 3 SOC Analyst or senior security operations level Strong hands-on experience with Microsoft Sentinel, Microsoft Defender for Endpoint (MDE) and KQL Experience onboarding, configuring, tuning and reporting on SIEM solutions Threat intelligence experience Leadership and mentoring experience Commercial experience in security monitoring and/or penetration … Cyber Security master's with relevant experience is also considered Desirable In-depth Microsoft Sentinel expertise: use case and rule development, workbooks and playbooks, KQL, Logic Apps and SOAR Managing Sentinel as an MSSP, including Azure Lighthouse and multi-customer environments using DevOps Wider Microsoft security experience across Defender ...

ESSENTIAL SKILLS Strong hands-on Azure infrastructure experience. Experience writing Terraform configurations and reusable modules. Practical Application Insights experience and the ability to write KQL queries for troubleshooting. Experience implementing observability, monitoring and alerting. Infrastructure configuration and security hardening experience, with an understanding of the controls implemented. CI/ ...

development practices. Security Operations & Detection Engineering Lead day-to-day SOC operations. Own Microsoft Sentinel administration and optimisation. Develop and tune detection logic using KQL and MITRE ATT&CK methodologies. Lead incident response, investigation, containment and post-incident reviews. Build automated response workflows using Logic Apps and security playbooks. Conduct … operations. Essential Experience Experience leading or managing a SOC, Security Operations, Detection Engineering or Incident Response function. Strong hands-on Microsoft Sentinel experience. Advanced KQL skills and detection engineering expertise. Experience investigating and responding to security incidents within cloud environments. Strong knowledge of Azure security technologies, including: Entra ID Conditional ...

Senior Security Engineering Consultant - SOC, SIEM, XDR, SOAR, KQL, Microsoft - £70,000 - £80,000 - Hampshire (hybrid) We are partnered with a fast-paced fast growing MSSP and they have a key requirement. You will lead the design and delivery of detection and response capabilities across SIEM, XDR, and SOAR. … occasional visits to the Hampshire office for specific team and business reasons will be expected. Key Skills Hands-on SIEM detection engineering and KQL or similar query languages; Microsoft Sentinel preferred. SOAR automation and playbook delivery using Logic Apps, Cortex XSOAR, or similar. Python, PowerShell, or similar scripting, plus ...