9 of 9 Kusto Query Language Jobs in the North of England

complex enterprise environment.A strong record of designing, building, operating and evolving Microsoft Sentinel as a production security monitoring and response capability.Deep expertise in KQL and the engineering of analytics rules, hunting queries, workbooks and threat-informed detection content.Extensive experience designing telemetry architectures and onboarding security data, including connectors, parsing, normalisation ...

enterprise environment. A strong record of designing, building, operating and evolving Microsoft Sentinel as a production security monitoring and response capability. Deep expertise in KQL and the engineering of analytics rules, hunting queries, workbooks and threat-informed detection content. Extensive experience designing telemetry architectures and onboarding security data, including connectors ...

experience Working in an MSP, consultancy, SaaS business or development team. Supporting regulated customers or operating across multiple customer environments. Azure Monitor, Application Insights, KQL or OpenTelemetry. Multi-tenant architecture and tenant isolation. Deploying or operating AI and LLM-based services. Relevant Microsoft certifications, such ...

cleansing data with limited guidance. You can present analysis and visualisations in clear ways to communicate complex messages. You can write SQL or KQL queries and know how to extract data using SQL or KQL. You can work with others to identify areas for improvement and simplify processes ...

triage, threat hunting, data loss prevention, and operational risk analysis. * Demonstrable experience with at least one major SIEM and EDR platform, additional hands on KQL/SPL, PowerShell/Python experience preferred. * Demonstrable experience with Security Orchestration and Automation. * Certifications such as SC-200, AZ-500, GCIA/GCIH/ ...

ESSENTIAL SKILLS Strong hands-on Azure infrastructure experience. Experience writing Terraform configurations and reusable modules. Practical Application Insights experience and the ability to write KQL queries for troubleshooting. Experience implementing observability, monitoring and alerting. Infrastructure configuration and security hardening experience, with an understanding of the controls implemented. CI/ ...

experience with log analysis and telemetry interpretation, including familiarity with querying or analyzing data using tools such as SIEM platforms or query languages (KQL, SPL, SQL, or similar)Exposure to security platforms and technologies such as SIEM, EDR/XDR, identity systems, or cloud environmentsFoundational understanding of common attacker ...

false positives.Considerable proficiency in log analysis, telemetry interpretation, and cross-system data correlation, including the ability to query, manipulate, and optimize data using KQL, SPL, SQL, or similar languages for investigative and detection use casesPractical experience with containment, response actions, and automation, including developing or maintaining SOAR workflows ...

threat hunting and identifying potential security risks Supporting vulnerability assessment and remediation Working across the Microsoft security stack, including Sentinel, Defender and Entra Using KQL and PowerShell as part of investigations and automation Acting as an escalation point for more junior analysts Contributing to improvements across SOC processes and detection … Microsoft Defender A good understanding of security incident investigation and response Knowledge of Windows environments and general networking/security principles Exposure to KQL would be beneficial A genuine desire to develop technically and progress within cyber security Working pattern Initially, the role will operate ...