13 of 13 Kusto Query Language Jobs in London

gaps and improve system observability. Support incident investigation and continuous service improvement. Manage monitoring configuration using Infrastructure as Code (Bicep) and version control. Develop KQL queries, dashboards and visualisations. Define monitoring standards, SLIs and SLOs where appropriate. Produce documentation and share knowledge across the engineering team. Essential Skills & Experience Significant … Grafana administration, dashboards and alerting. Experience with Microsoft Azure, including Azure Monitor, Application Insights and Log Analytics. Strong Kusto Query Language (KQL) skills. Experience monitoring Azure Integration Services, including Function Apps, Logic Apps, Service Bus and API Management. Experience integrating monitoring platforms with ITSM tools such ...

Microsoft Sentinel. Proven ability to design and implement Conditional Access, identity protection, and device compliance policies. Experience developing detection rules, analytics, and automation using KQL and Sentinel playbooks. Solid understanding of Zero Trust architecture and practical implementation across enterprise environments. Strong knowledge of endpoint hardening, EDR tuning, and modern attack ...

advising and influencing enterprise SIEM platforms (e.g., Microsoft Sentinel, Splunk, Chronicle/SecOps). Must be proficient in writing/reviewing advanced detection logic (KQL, SPL, or YARA rules). Deep execution knowledge of generating, managing, and analyzing Software Bills of Materials (SBOMs using frameworks like CycloneDX or SPDX ...

security risk clearly to engineering and product audiences. A growth mindset and genuine curiosity to keep learning. SC‐200 (Microsoft Security Operations Analyst) certification. KQL proficiency for detection rule authoring and threat hunting. Experience working in a similar fintech or financial services environment. All are welcome: At Flagstone ...

Microsoft Fabric-based solutions while collaborating closely with clients to ensure effective implementation and performance. The ideal candidate will have expertise in SQL, KQL, and Azure data services, alongside experience in modern data architectures. This position offers a remote-first work environment with occasional travel to London. #J-18808-Ljbffr ...

maintain and tune the detection catalogue Build automated reporting dashboards using Microsoft Sentinel workbooks Support security initiatives including ISO 27001 activities and KQL-based tasks Ensure monitoring coverage across cloud platforms, SaaS apps, and internal systems Contribute to documentation of processes, tools, and detection logic What You’ll Bring Must … Have Skills & Experience: Previously worked as a Threat Detection Engineer or in a similar role. Strong proficiency in KQL and hands-on experience with Microsoft Sentinel Familiarity with Microsoft Defender tools (Endpoint & O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ATT&CK frameworks ...

maintain and tune the detection catalogue Build automated reporting dashboards using Microsoft Sentinel workbooks Support security initiatives including ISO 27001 activities and KQL-based tasks Ensure monitoring coverage across cloud platforms, SaaS apps, and internal systems Contribute to documentation of processes, tools, and detection logic What You’ll Bring Must … Have Skills & Experience: Previously worked as a Threat Detection Engineer or in a similar role. Strong proficiency in KQL and hands-on experience with Microsoft Sentinel Familiarity with Microsoft Defender tools (Endpoint & O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ATT&CK frameworks ...

Threat Detection Engineer - Permanent - SOC, KQL, Active Directory, Powershell, Python - Hedge Fund Our Hedge Fund clients SOC is going through a transformation, we are looking for an experienced Threat Detection Engineer to drive our best-in-class posture. This is a highly technical role, and successful candidates will have demonstrable … demonstrable experience. 3 years' experience working in a security engineering role, financial industry experience preferred. Experience in creating detections in modern query languages (KQL, SQL, SPL). Possesses security certifications (Security+, OSCP, CISSP, CEH, GCIA, GCIH). Experience with modern security tooling across security domains; network, endpoint, data, identity ...

senior stakeholders. A background in developing or improving vulnerability management strategies, frameworks or operating models. Strong knowledge of Microsoft security technologies. Experience using KQL to interrogate and report on security data. Excellent stakeholder management and communication skills. Previous experience within a regulated environment would be advantageous. ...

Threat Detection Engineer (KQL, SPL, Python/PowerShell, Microsoft Security) - Permanent Location: London Job Type: Permanent A leading global financial services organisation is looking for a Threat Detection Engineer to help transform its Security Operations capability. You'll be responsible for threat hunting, detection engineering, security automation and incident response … developing high-quality detections to protect a large enterprise environment. Key Responsibilities Proactive threat hunting across multiple data sources. Build and optimise detections using KQL, SPL and SQL . Develop automated detection and response playbooks. Lead technical security investigations and incident response. Improve monitoring capabilities and security operations. Work closely ...

Engineering and maintaining Microsoft Sentinel , Defender XDR , and Log Analytics platforms Onboarding and normalising log sources across hybrid/cloud environments Writing and tuning KQL detection rules and analytics logic Building SOAR playbooks (Logic Apps, automation workflows) to reduce manual effort Managing telemetry ingestion, parsers, and data retention for cost … contributing to team development Acting as technical SME during incidents What we're looking for: Deep experience with Microsoft Sentinel , Defender suite , and KQL Strong scripting/automation skills ( PowerShell, Python, Logic Apps ) Solid understanding of MITRE ATT&CK , NCSC CAF , NIST CSF Stakeholder management able to translate technical complexity ...

Collaborate with SRE and DevOps teams to optimise CI/CD pipelines for performance improvements. Collaborate with wider IT teams to Implement caching strategies, query optimisation, and autoscaling to enhance system efficiency. Observability Platform Development & Implementation Design and implement end-to-end observability frameworks covering metrics, logs, traces … cloud expenses. Qualifications, Skills and Experience Technical Skills Experience in using and maintaining Observability & APM Tools – Grafana experience is essential Experience of using KQL Performance Testing & Load Testing Cloud & Infrastructure Monitoring – AWS CloudWatch, Azure Monitor, GCP Operations Suite, Kubernetes Observability. Knowledge of Log Aggregation & Analysis – eg: Grafana Loki, Splunk ...

Monitoring security events across cloud, endpoint, identity and network environments Threat hunting and proactive security investigations Querying and analysing data using KQL within Microsoft Sentinel Working with Microsoft Defender XDR technologies Supporting vulnerability management and security posture improvements Detection engineering, alert tuning and security tooling optimisation Producing technical reports … Senior SOC Analyst SOC Analyst Cyber Security Analyst Security Analyst Security Operations Analyst Incident Response Analyst Blue Team Analyst Experience with Microsoft Sentinel, KQL and the wider Microsoft security ecosystem would be highly advantageous. Package £48,654.60 base salary £9,965.40 shift allowance 4 on/4 off 12-hour ...