11 of 11 Kusto Query Language Jobs in the North of England

description attached for full list of responsibilities. Person Specification Knowledge Knowledge of Microsoft Defender, Sentinel, including Kusto Query Language (KQL), threat hunting, analytics rule development, security monitoring, incident investigation and automation capabilities. Education/Qualifications Holds highly developed specialist knowledge and expertise acquired through master's degree ...

Solid understanding of networking principles and security technologies, including firewalls, WAFs, application gateways and network infrastructure. Experience using Kusto Query Language (KQL) and PowerShell to investigate, automate and improve security operations. Ability to create clear technical documentation, including security playbooks, processes and network diagrams. Self-motivated ...

Skill Level LogicMonitor/Monitoring Tools Proficient — alert management, dashboard navigation, threshold tuning Azure Monitor/Log Analytics Awareness to Proficient — alert review, basic KQL queries, VM metrics ServiceNow/Helpdesk Tool Proficient — incident, change, and request management Windows Server (2016/2019/2022) Awareness to Proficient — event logs ...

enterprise environment. A strong record of designing, building, operating and evolving Microsoft Sentinel as a production security monitoring and response capability. Deep expertise in KQL and the engineering of analytics rules, hunting queries, workbooks and threat‐informed detection content. Extensive experience designing telemetry architectures and onboarding security data, including connectors ...

pressured environment and whilst dealing with competing priorities Demonstrable experience with at least one major SIEM and EDR platform, additional hands‐on KQL/SPL, PowerShell/Python experience preferred Demonstrable experience with Security Orchestration and Automation Strong understanding of ITSM workflows, implementing operational processes, and service delivery Practical experience ...

cross-functional teams. You’ll bring 5+ years in Security Operations/Incident Response, strong SIEM/EDR experience, and hands-on skills in KQL/SPL, PowerShell and Python. #J-18808-Ljbffr ...

triage, threat hunting, data loss prevention, and operational risk analysis. * Demonstrable experience with at least one major SIEM and EDR platform, additional hands on KQL/SPL, PowerShell/Python experience preferred. * Demonstrable experience with Security Orchestration and Automation. * Certifications such as SC-200, AZ-500, GCIA/GCIH/ ...

efficiency across the platforms in use and surrounding technical practicesDeliver end‐to‐end SIEM/Sentinel engineering by onboarding customers, configuring data connectors, integrations, KQL, automation, dashboards and reporting.Implement tuning, enrichment and optimisation across Sentinel and align with other SIEM tools.Maintain SIEM ingestion pipeline reliability by investigating and resolving issues ...

across the platforms in use and surrounding technical practices Deliver end‐to‐end SIEM/Sentinel engineering by onboarding customers, configuring data connectors, integrations, KQL, automation, dashboards and reporting. Implement tuning, enrichment and optimisation across Sentinel and align with other SIEM tools. Maintain SIEM ingestion pipeline reliability by investigating ...

experience with log analysis and telemetry interpretation, including familiarity with querying or analyzing data using tools such as SIEM platforms or query languages (KQL, SPL, SQL, or similar) Exposure to security platforms and technologies such as SIEM, EDR/XDR, identity systems, or cloud environments Foundational understanding of common ...

false positives.Considerable proficiency in log analysis, telemetry interpretation, and cross-system data correlation, including the ability to query, manipulate, and optimize data using KQL, SPL, SQL, or similar languages for investigative and detection use casesPractical experience with containment, response actions, and automation, including developing or maintaining SOAR workflows ...