2 of 2 Kusto Query Language Jobs in the South West

incidents when required Escalate complex incidents with clear, detailed findings Support incident response, client communications and incident bridges Maintain runbooks, internal documentation and the KQL library Tune detections and manage improvement requests through Azure DevOps What we’re looking for Strong experience in a security operations or analytical role Hands … expertise with Microsoft Defender and Microsoft Sentinel Advanced KQL skills and a strong understanding of Log Analytics Broad knowledge of the Microsoft security stack Strong written and verbal communication skills, including confidence communicating with clients during high-priority incidents Desirable experience Python, Bicep, ARM templates or JSON Microsoft or security ...

bench of analysts who can operate at the same standard. Key Responsibilities Set the detection engineering standard - author, tune, and peer-review detections in KQL, SPL, EQL, or Sigma; manage the false-positive backlog; map coverage to MITRE ATT&CK; and train L1/L2 analysts to write and tune … Security Manager (CISM) CompTIA Advanced Security Practitioner (CASP+) Experience leading detection engineering in a SOC or similar environment - including writing and tuning detections in KQL, SPL, EQL, or Sigma, and managing coverage against MITRE ATT&CK Experience designing or improving a log and telemetry pipeline, including application-level telemetry from ...