3 of 3 Kusto Query Language Jobs in the North West

Monitoring: Experience working with endpoint, identity, cloud, network, authentication and security telemetry across enterprise environments. 4. Detection Analytics & Automation: Development of detection logic using KQL, SPL, Sigma, Python and PowerShell, including data correlation and Detection-as-Code practices. 5. Security Operations & Incident Response: Strong understanding of incident response, threat hunting ...

Skills: Threat-led detection engineering and behavioural analytics MITRE ATT&CK mapping and adversary TTP analysis Threat intelligence, modelling and hunting Detection development using KQL, SPL or Sigma Python and PowerShell automation Security telemetry across endpoint, identity, cloud and network environments Detection tuning, validation and false-positive reduction Detection ...

positives. Considerable proficiency in log analysis, telemetry interpretation, and cross-system data correlation, including the ability to query, manipulate, and optimize data using KQL, SPL, SQL, or similar languages for investigative and detection use casesPractical experience with containment, response actions, and automation, including developing or maintaining SOAR workflows ...