26 to 50 of 108 Kusto Query Language Jobs in the UK

Skills and Experience required: Have a high level of ability to create and develop security orchestration and automated response (SOAR). Strong proficiency in KQL and detection engineering Experience and working knowledge with operating systems - both Linux and Windows platforms Extensive knowledge of Azure including Azure functions and Logic Apps. ...

troubleshooting and operational support Experience applying Detection-as-Code, CI/CD, source control and peer-review practices Technical Skills: Microsoft Sentinel Identity Cloud KQL Analytics Rules Hunting Workbooks Playbooks Data Collection Rules Custom Tables Parsers Custom Ingestion Windows Event Forwarding and Collection XPath Filtering Windows Event IDs Sysmon PowerShell ...

approximately once every five weeks). Preferred Qualifications, Capabilities, and Skills Experience with detection engineering and writing/tuning detection content (e.g., Sigma, YARA, KQL, SPL, or equivalent). Hands-on threat hunting experience using hypothesis-driven methodologies. Familiarity with SOAR platforms, scripting/automation, and AI-assisted security tooling. ...

technologies. Awareness of data protection principles and security frameworks (e.g. ISO 27001, NIST). Previous involvement in security audits, risk assessments or policy development. KQL or other scripting/automation skills beyond PowerShell. Advanced M365 and Azure backup/disaster recovery experience. Experience working in a global or multi‐site ...

technologies.* Awareness of data protection principles and security frameworks (e.g. ISO 27001, NIST).* Previous involvement in security audits, risk assessments or policy development.* KQL or other scripting/automation skills beyond PowerShell.* Advanced M365 and Azure backup/disaster recovery experience.* Experience working in a global or multi-site ...

response methodologies, digital forensics and frameworks such as MITRE ATT&CK and NIST. Exposure to Microsoft security technologies, threat hunting, scripting (PowerShell, Python or KQL) or forensic tooling would be advantageous. If you think this role is a fit, we'd love to hear from you. Reference ...

cloud platforms, SaaS, and internal systems. Documenting security processes, tool configurations, and contributing to service delivery documentation. Supporting colleagues with ISO 27001 compliance and KQL-related tasks. What we are looking for: Previously worked as a Threat Detection Engineer or in a similar role. Must have strong expertise in KQL.Hands ...

enterprise environment. A strong record of designing, building, operating and evolving Microsoft Sentinel as a production security monitoring and response capability. Deep expertise in KQL and the engineering of analytics rules, hunting queries, workbooks and threat-informed detection content. Extensive experience designing telemetry architectures and onboarding security data, including connectors ...

enterprise environment. A strong record of designing, building, operating and evolving Microsoft Sentinel as a production security monitoring and response capability. Deep expertise in KQL and the engineering of analytics rules, hunting queries, workbooks and threat-informed detection content. Extensive experience designing telemetry architectures and onboarding security data, including connectors ...

tooling and services we use and the backing to implement this. You’ll be an innovative collaborator with strong technical skills, particularly in using KQL and excellent communication skills, with an appetite for complex problem solving. Seize the opportunity to join a dynamic security team, reporting to the Head ...

Defender across endpoint, identity, Office 365, and cloud apps, including triage and tuning of Defender alerts. Microsoft Sentinel, including writing and tuning your own KQL queries, analytic rules, and workbooks. Microsoft Entra ID and Conditional Access policy design, testing, and troubleshooting. Microsoft Purview, Intune security controls, email security, and endpoint ...

best practices Ability to operate effectively in high-pressure environments and manage multiple incidents simultaneously Desirable Skills Experience with Microsoft Defender technologies Knowledge of KQL and detection rule development Previous experience within highly regulated or large enterprise environments Relevant cyber security certifications (SC-200, GCIA, GCIH, CISSP, Security+, etc.) Contract ...

macOS, Linux, Windows) investigation experience; IDS, IPS, EDR, and basic malware analysis Basic understanding of at least one of the following: OSQuery, SQL, and KQL Knowledge of frameworks such as MITRE Attack and Cyber Kill Chain Ability to work some weekends and holidays Experience with Windows and Linux command ...

environment. Key Skills & Experience: Strong background in Security Engineering, SOC, Detection Engineering, or Incident Response Hands-on experience with SIEM/XDR platforms and KQL, SPL, or LogScale Microsoft 365 security experience Threat hunting and detection engineering aligned to MITRE ATT&CK Python and/or PowerShell scripting EDR experience ...

environment. Key Skills & Experience: Strong background in Security Engineering, SOC, Detection Engineering, or Incident Response Hands-on experience with SIEM/XDR platforms and KQL, SPL, or LogScale Microsoft 365 security experience Threat hunting and detection engineering aligned to MITRE ATT&CK Python and/or PowerShell scripting EDR experience ...

security operations workflows: alert triage, incident handling, and vulnerability/finding remediation lifecycles Comfort with scripting to support automation and tooling (e.g. Python, KQL) Experience coordinating remediation across multiple engineering or platform teams, and keeping work moving to closure Working knowledge of cloud environments (e.g. AWS, Azure ...

cleansing data with limited guidance. You can present analysis and visualisations in clear ways to communicate complex messages. You can write SQL or KQL queries and know how to extract data using SQL or KQL. You can work with others to identify areas for improvement and simplify processes ...

500. Hands‐on experience with other SIEM and EDR/XDR platforms such as CrowdStrike, Splunk, QRadar, Rapid7 or Elastic. Experience with KQL, Sigma, Logic Apps, PowerShell or other automation and detection‐as‐code approaches. Knowledge of MITRE ATT&CK, NIST SP 800-61, NCSC CAF and recognised security operations … SIEM, EDR/XDR or protective monitoring transformations. Deep practical design experience with Microsoft Sentinel, Defender XDR and Defender for Endpoint, including Log Analytics, KQL, data connectors, analytics and automation. Full lifecycle delivery experience from discovery and HLD/LLD development through migration, testing, service transition and implementation assurance. Experience ...

will help you find ways to work more efficiently, while using your own judgement to check their output. Experience with Intune, Autopilot, Defender, PowerShell, KQL, SQL Server, Salesforce or security certification evidence would be useful. You don’t need experience with all of these to apply. What’s on offer ...

experience Working in an MSP, consultancy, SaaS business or development team. Supporting regulated customers or operating across multiple customer environments. Azure Monitor, Application Insights, KQL or OpenTelemetry. Multi-tenant architecture and tenant isolation. Deploying or operating AI and LLM-based services. Relevant Microsoft certifications, such ...

experience Working in an MSP, consultancy, SaaS business or development team. Supporting regulated customers or operating across multiple customer environments. Azure Monitor, Application Insights, KQL or OpenTelemetry. Multi-tenant architecture and tenant isolation. Deploying or operating AI and LLM-based services. Relevant Microsoft certifications, such ...

rehosting, re‐platforming and refactoring, not just lift and shift. Infrastructure as Code and automation: Strong Terraform skills, plus scripting in PowerShell, Bash, SQL, KQL and Packer. Experience with Azure DevOps YAML pipelines and CI/CD is essential, including building security and code quality tools into those pipelines. Containers ...

within hybrid environments. Experience with Azure DevOps, Git, CI/CD and DACPAC-based database deployments. Experience supporting SSIS, SSRS and SSAS. Experience using KQL for Azure resource inventory and operational reporting. Proven experience delivering SQL Server upgrades or migrations, including testing, rollback and post-upgrade validation. ...

triage, threat hunting, data loss prevention, and operational risk analysis. * Demonstrable experience with at least one major SIEM and EDR platform, additional hands on KQL/SPL, PowerShell/Python experience preferred. * Demonstrable experience with Security Orchestration and Automation. * Certifications such as SC-200, AZ-500, GCIA/GCIH/ ...

Engineer or SOC Engineer Experience with Microsoft Sentinel and other SIEM solutions (Splunk, Rapid7, LogRhythm, McAfee or equivalent) Strong analytical mindset with hands-on KQL experience and familiarity with related Microsoft Security technologies Ability to lead and design automation and scripting within SIEM tooling Experience analysing cloud security risks ...