18 of 18 Kusto Query Language Jobs in the South East

investigation and analytical skills. Desirable Banking, financial services or other regulated-sector experience. Microsoft Sentinel, Defender XDR, Defender for Identity or Defender for Cloud. KQL, PowerShell, Python or similar scripting/automation. Threat hunting, malware analysis and detection engineering. Azure and Microsoft 365 investigation experience. EnCase, FTK, Velociraptor, Volatility ...

cyber operations or security engineering experience. Hands-on Sentinel, Defender XDR and CrowdStrike expertise. Incident response, malware analysis, forensics and threat hunting. Advanced KQL; PowerShell and/or Python automation. Entra ID, Conditional Access, Intune and Microsoft 365 security. Cloud and networking knowledge; MITRE ATT&CK, NIST and SANS frameworks. ...

automate their SOC functions, tooling, and detection capabilities.Key Responsibilities:Design and deliver detection rulesets across SIEM and XDR platformsDevelop and tune detection logic using KQL or equivalent query languagesDesign detection use cases aligned to MITRE ATT&CK and real-world attack techniquesMap customer log sources to detection use cases … detection outcomesJob Requirements:Strong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferredExperience writing detection logic using KQL or similar query languagesProven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR or similarScripting and automation capability using ...

evolve their detection capabilities.ResponsibilitiesKey responsibilities of the role include:DeliverDesign and deliver detection rulesets across SIEM and XDR platformsDevelop and tune detection logic using KQL or equivalent query languagesDesign detection use cases aligned to MITRE ATT&CK and real-world attack techniquesMap customer log sources to detection use cases … Skills and ExperienceStrong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR or similar Scripting and automation ...

will help you find ways to work more efficiently, while using your own judgement to check their output. Experience with Intune, Autopilot, Defender, PowerShell, KQL, SQL Server, Salesforce or security certification evidence would be useful. You don’t need experience with all of these to apply. What’s on offer ...

unapproved integrations, third-party model risk, and inadequate monitoring; translate findings into proportionate safeguards. Build automation and proof-of-concept solutions using PowerShell, Python, KQL, APIs, policy-as-code, infrastructure-as-code, cloud-native functions, and workflow technologies, and mature successful concepts into governed, supportable services. Monitoring, Governance, Reporting & Leadership ...

risks and operational impacts.Excellent communication and stakeholder management skills.Bonus points for experience with: Azure DevOps, Power Automate, Dataverse, ServiceNow, APIs, Azure services, App Registrations, KQL/App Insights, chatbots/contact centre platforms, and working in regulated environments.Qualifications: Relevant technical qualification or equivalent experience. Microsoft Power Platform, Copilot Studio ...

Analytics, Defender for Cloud) Excellent understanding of cloud performance, IaaS/PaaS, networking fundamentals, API performance and capacity modelling Skilled in dashboards, log queries (KQL), custom metrics and performance analysis Ability to diagnose complex issues across infrastructure, networks, applications or databases Confident scripting and automation skills (PowerShell, Azure Automation, Graph ...

carry out malware analysis and threat validation. Design, implement and optimise detection content across Microsoft Sentinel, Defender XDR, CrowdStrike and associated platforms, developing advanced KQL queries and analytics rules aligned to MITRE ATT&CK. Act as senior technical owner for security platforms including Microsoft Sentinel, Defender XDR, CrowdStrike Falcon, Entra … Microsoft Defender XDR, CrowdStrike Falcon and associated security technologies. Proven experience in incident response, threat hunting, malware analysis, digital forensics and security investigations. Advanced KQL skills, with the ability to develop and optimise complex detections and threat hunting queries. Strong scripting and automation experience using PowerShell and/or Python ...

Entra ID security controls (Conditional Access, Identity Governance, Entra GSA, PIM) - Azure services: Log Analytics, Azure Monitor, Azure Lighthouse, Azure Policy - Logic Apps, KQL and Microsoft Graph. You will join a small and very successful Microsoft Solutions Partner delivering services across Microsoft Cloud, Business Apps, Managed Services, Security and AI. … Security monitoring, detection engineering and incident response PowerShell scripting and security automation Azure services: Log Analytics, Azure Monitor, Azure Lighthouse, Azure Policy Logic Apps, KQL and Microsoft Graph Cloud security, identity and compliance frameworks (Cyber Essentials, CIS, Zero Trust) Microsoft Intune and baseline security configuration Certifications SC-200 Security Operations ...

measures, Data Loss Prevention (DLP), endpoint protection and threat detection capabilities. Develop and optimise security monitoring, alerting and automated detection using Microsoft Sentinel and KQL . Ensure technical solutions align with NCSC guidance, Secure by Design principles and government security standards . Essential Skills & Experience Active SC clearance Strong hands … Strong understanding of IAM, PAM, Zero Trust, DLP, cloud security and security operations . Experience developing detection rules, investigating security events and working with KQL . ...

measures, Data Loss Prevention (DLP), endpoint protection and threat detection capabilities. Develop and optimise security monitoring, alerting and automated detection using Microsoft Sentinel and KQL . Ensure technical solutions align with NCSC guidance, Secure by Design principles and government security standards . Essential Skills & Experience Active SC clearance Strong hands … Strong understanding of IAM, PAM, Zero Trust, DLP, cloud security and security operations . Experience developing detection rules, investigating security events and working with KQL . ...

Welcome to Hastings Direct We’re a digital insurance provider with ambitious plans to become The Best and Biggest in the UK market. Over the past few years, we've made significant investments in our ...

Azure Cloud Security Engineer Hybrid 1day/wk Evaluate new security technologies and cloud services, performing engineering work and security analysis to determine if solutions should be pursued, and subsequently implementing them as required, focusing ...

We're a digital insurance provider with ambitious plans to become The Best and Biggest in the UK market. Over the past few years, we've made significant investments in our data and tech capabilities ...

specific platforms is desirable rather than essential. We welcome applicants who have worked with other SIEM technologies. The following would also strengthen your application: KQL or similar query languages used to investigate security events. Threat hunting and the use of threat intelligence within investigations. Familiarity with MITRE ...

Running security assessments and delivering the remediation Migrating customers from third-party security tools onto the Microsoft stack Automating with Logic Apps, PowerShell and KQL Supporting the SOC with incident investigation and escalations Writing high-level and low-level design documentation What youll need Solid, proven implementation experience of Microsoft … endpoint engineering Practical Sentinel deployment and tuning (data connectors, analytics rules, workbooks) and Defender XDR rollout Strong Entra ID implementation experience (Conditional Access, PIM) KQL and PowerShell skills Confidence working directly with customers Helpful, but not essential Logic Apps, Microsoft Graph, Azure Lighthouse and Azure Policy Exposure to Cyber Essentials ...

PermanentSurrey, UKPosted 3 weeks ago11884SR 60k – 80k per yearSenior Data Platform Engineer – RemoteOur client is looking for an experienced Senior Data/Platform Engineer to join their Data & Analytics team.This is not a traditional Azure ...