Slough, England, United Kingdom Hybrid / WFH Options
JR United Kingdom
reliability. Provide recommendations and solutions to ensure consistent highl level of service to customers. Develop scripts and queries (KustoQueryLanguage - KQL, PowerShell, Python) for log analysis. Implement automated remediation workflows where possible. Recommend improvements to architecture based on performance data. Work closely with engineering, DevOps, and … or DevOps support. Strong knowledge of Microsoft Azure services (App Service, SQL Database, Blob Storage, Azure Monitor, Application Insights, Log Analytics). Proficiency in KQL (KustoQueryLanguage) for log analysis. Experience with automation scripting (PowerShell, Python, or Azure Functions). Familiarity with SIEM tools (Splunk, ELK More ❯
Slough, England, United Kingdom Hybrid / WFH Options
JR United Kingdom
reliability. Provide recommendations and solutions to ensure consistent highl level of service to customers. Develop scripts and queries (KustoQueryLanguage - KQL, PowerShell, Python) for log analysis. Implement automated remediation workflows where possible. Recommend improvements to architecture based on performance data. Work closely with engineering, DevOps, and … or DevOps support. Strong knowledge of Microsoft Azure services (App Service, SQL Database, Blob Storage, Azure Monitor, Application Insights, Log Analytics). Proficiency in KQL (KustoQueryLanguage) for log analysis. Experience with automation scripting (PowerShell, Python, or Azure Functions). Familiarity with SIEM tools (Splunk, ELK More ❯
Reading, England, United Kingdom Hybrid / WFH Options
JR United Kingdom
reliability. Provide recommendations and solutions to ensure consistent highl level of service to customers. Develop scripts and queries (KustoQueryLanguage - KQL, PowerShell, Python) for log analysis. Implement automated remediation workflows where possible. Recommend improvements to architecture based on performance data. Work closely with engineering, DevOps, and … or DevOps support. Strong knowledge of Microsoft Azure services (App Service, SQL Database, Blob Storage, Azure Monitor, Application Insights, Log Analytics). Proficiency in KQL (KustoQueryLanguage) for log analysis. Experience with automation scripting (PowerShell, Python, or Azure Functions). Familiarity with SIEM tools (Splunk, ELK More ❯
retail clients. Key Responsibilities Advanced threat detection and monitoring using industry-leading tools. Building and tuning detections using KustoQueryLanguage (KQL). Responding to and managing security incidents effectively. Engineering robust detections and performing proactive threat hunts. Supporting security automation and infrastructure-as-code initiatives. Qualifications … re looking for someone with relevant experience in the following: Security Monitoring & Detection (e.g., XDR tools like Carbon Black, Microsoft Defender XDR, CrowdStrike) Strong KQL capabilities for log analysis and detection tuning Cloud Security (Microsoft Azure, Google Cloud Platform) Kubernetes and container technologies (e.g., Docker) Threat Hunting, Detection Engineering, Incident More ❯
Reading, Berkshire, United Kingdom Hybrid / WFH Options
Thames Water Utilities Limited
problems for non-technical audiences. • Strong understanding of OT infrastructure, networking, and end-user computing. • Proficiency in writing KustoQueryLanguage (KQL) for creating and tuning SIEM queries and alerts. • Experience in configuring and troubleshooting MFA, Privileged Access Management (PAM), and Security Information & Event Management (SIEM) systems More ❯
Reading, Berkshire, United Kingdom Hybrid / WFH Options
DCL
to Development and tuning of custom analytic rules. Workbook creation and dashboarding. Automation using Playbooks and SOAR integration. KustoQueryLanguage (KQL). More ❯
Windsor, England, United Kingdom Hybrid / WFH Options
Centrica plc
technologies such as Docker and Kubernetes. Proficiency in cloud platforms: Azure and AWS. Expertise in Microsoft Defender and KustoQueryLanguage (KQL). Qualifications: Bachelor’s degree in Computer Science, IT, or related field. Minimum of 5 years of experience in IT infrastructure engineering, focusing on Microsoft More ❯
Reading, England, United Kingdom Hybrid / WFH Options
Axiom Software Solutions Limited
simple manner to non-technical audiences Strong understanding of OT infrastructure, networking, and end-user computing. Experience writing KustoQueryLanguage (KQL) for creating and tuning SIEM queries and alerts. Proficient in configuration and troubleshooting of multi-factor authentication (MFA), Privileged Access Management (PAM) and Security Information More ❯
Slough, England, United Kingdom Hybrid / WFH Options
JR United Kingdom
Sentinel solutions at SMC and enterprise levels Understanding of security telemetry across identity, endpoint, cloud, and network layers Experience in SIEM content development, including KQL, analytics rules, and custom data connectors Scripting and engineering skills: Python, PowerShell, APIs, Function Apps Background in cyber threat detection, incident response, or DFIR is More ❯
Reading, England, United Kingdom Hybrid / WFH Options
JR United Kingdom
Microsoft Sentinel at SMC and enterprise levels Understanding of security telemetry across identity, endpoint, cloud, and network layers Experience in SIEM content development, including KQL, analytics rules, and custom data connectors Scripting and engineering skills – Python, PowerShell, APIs, Function Apps A background in cyber threat detection, incident response, or DFIR More ❯
Slough, England, United Kingdom Hybrid / WFH Options
JR United Kingdom
Microsoft Sentinel. Experience in building and maintaining workflows with Azure Logic Apps to automate processes. Strong experience in API development and integration. Proficiency in KQL, JSON, and PowerShell. Good written and verbal communication skills. Technical understanding of IT infrastructure – Microsoft 365 suite, Defender XDR, Entra ID (Azure Active Directory), Azure More ❯
Reading, England, United Kingdom Hybrid / WFH Options
JR United Kingdom
Microsoft Sentinel. Experience in building and maintaining workflows with Azure Logic Apps to automate processes. Strong experience in API development and integration. Proficiency in KQL, JSON, and PowerShell. Good written and verbal communication skills. Technical understanding of IT infrastructure – Microsoft 365 suite, Defender XDR, Entra ID (Azure Active Directory), Azure More ❯
Maidenhead, England, United Kingdom Hybrid / WFH Options
ZipRecruiter
security architectures. Knowledge of security monitoring and compliance best practices. Experience working with Microsoft Sentinel and XDR frameworks, an advantage. Scripting experience in PowerShell, KQL, or Python, an advantage. Microsoft certifications: SC-200, SC-300, SC-400, AZ-500, MS-500, SC-100, an advantage Self-starter with great attention More ❯
Reading, England, United Kingdom Hybrid / WFH Options
JR United Kingdom
exploits, malware, ransomware, etc. their creation and activation and detection methods. • Knowledge of web application architecture and system administration. • Experienced building complex custom RQL, KQL or SQL queries. • Experienced with Microsoft Azure, AWS or GCP installation, configuration, and administration of security features and services. • Programming experience with Python or PowerShell More ❯
Slough, England, United Kingdom Hybrid / WFH Options
JR United Kingdom
exploits, malware, ransomware, etc. their creation and activation and detection methods. • Knowledge of web application architecture and system administration. • Experienced building complex custom RQL, KQL or SQL queries. • Experienced with Microsoft Azure, AWS or GCP installation, configuration, and administration of security features and services. • Programming experience with Python or PowerShell More ❯
technical coach). Position might be filled at a higher level based on candidate experience. What will help you succeed Preferred Requirements: Experience with query languages such as SQL, SPL, or KQL. Experience with observability and log collectors/pipelines such as FluentBit, OpenTelemetry, Cribl, and Logstash. Experience with More ❯
years in Cyber Security within enterprise and OT environments. • Strong knowledge of ICS, SCADA, and critical infrastructure security. • Hands-on experience with Microsoft Sentinel, KQL, MFA, and PAM tools. • Proven ability to triage and remediate cyber risks in real-time. • Excellent communication skills for non-technical stakeholders. Seniority level Seniority More ❯
security tooling, including: Microsoft Sentinel – connector management, rule tuning, data enrichment Microsoft Defender solutions (Endpoint, Identity, Cloud Apps) Develop and refine detection logic using KQL, and implement SOAR playbooks via Logic Apps. Integrate data sources from hybrid environments (cloud/on-premise) into the SIEM. Optimise alert fidelity and reduce More ❯
with and responding to escalated and most high profile incidents. Comprehensive knowledge and experience utilising/fine-tuning the Microsoft Security stack – Defender, Sentinel, KQL, etc. Experience working in hybrid-cloud SOC environments – Azure/AWS preferably. Ability to articulate specific projects that you have built, developed or led on More ❯
and common attacker techniques. Strong communication and leadership skills, with the ability to influence and guide both technical and non-technical stakeholders. Experience with KQL and customizing Sentinel detections. Exposure to cloud security operations (Azure preferred). Microsoft certifications such as SC-200 or AZ-500 are a bonus but More ❯
Reading, Berkshire, United Kingdom Hybrid / WFH Options
Bytes Group
Additional Knowledge Management Tools - Microsoft SCCM, Windows Admin Center, SCOM Monitoring - SCOM, WAC, Windows Network, Azure Log analytical Workspace, Sentinel Workspace, Event Logs and Kusto Queries Skills Ability to work under own initiative Ability to follow written and verbal instructions Ability to work to strict deadlines Ability to provide More ❯
Privileged Access Management (PAM) tools such as CyberArk and/or IGA platforms like SailPoint ISC is advantageous. General proficiency in Microsoft tooling, PowerShell, KQL, Copilot etc. Certifications (Preferred) Microsoft Certified: Identity and Access Administrator Associate Other relevant Microsoft or security certifications Soft Skills Strong problem-solving and analytical abilities. More ❯
SIEMplify) and cloud platforms (e.g., AWS, Azure, O365). Experience investigating intrusions in Linux and cloud environments. Proficiency in scripting, regular expression development, and query optimization (e.g., Kusto, SQL). If you’re ready to step up your career in a dynamic and global environment, apply today to More ❯
SIEMplify) and cloud platforms (e.g., AWS, Azure, O365). Experience investigating intrusions in Linux and cloud environments. Proficiency in scripting, regular expression development, and query optimization (e.g., Kusto, SQL). If you’re ready to step up your career in a dynamic and global environment, apply today to More ❯