6 of 6 Kusto Query Language Jobs in the Thames Valley

/SIEM platforms (e.g., Elastic, Sentinel, Splunk), including query languages used for investigations and detections such as: Kusto Query Language (KQL) ES|QL Kibana Query Language Strong understanding of attacker tactics, techniques, and procedures (TTPs), including detecting indicators of compromise (IOCs) and knowing ...

Skills * Strong knowledge of SIEM platforms (e.g. Microsoft Sentinel, Splunk, Elastic) * Experience writing and tuning queries using: o Kusto Query Language (KQL) o ES|QL/Kibana Query Language o Splunk SPL * Understanding of event correlation, alerting, and detection use-case development ________________________________________ Technical Foundations * Strong … client's supplier list for this role. ________________________________________ Keywords SIEM Analyst, Security Monitoring Analyst, SOC Analyst, Cyber Security Analyst, Microsoft Sentinel, Splunk, Elastic SIEM, KQL, SPL, ES|QL, Threat Detection, Incident Response, EDR, IDS/IPS, MITRE ATT&CK, Cyber Defence ...

documentation, runbooks, and operational procedures. Skills & Experience Experience engineering and supporting SIEM platforms, ideally Microsoft Sentinel. Strong scripting and automation skills (Python, PowerShell, Bash, KQL). Experience with SOAR technologies and security automation. Knowledge of detection engineering and threat hunting. Strong understanding of Windows and Linux logging. Good networking knowledge ...

runbooks. We’re looking for 3+ years in a SOC or MSSP, hands-on with SIEM, EDR, and Microsoft 365/Entra ID security. KQL or PowerShell scripting, phishing and malware triage experience, and clear written communication are essential. Security+, SC-200, BTL1 or similar certs beneficial. ...

governance principles Understanding of identity and access control (e.g. Entra ID, RBAC) Experience across structured and unstructured data Scripting/automation skills (PowerShell, Python, KQL) Qualifications Relevant technical qualifications or equivalent experience. Microsoft certifications (e.g. SC-400, AZ-500, DP-203, AZ-305) Experience with Azure data services (e.g. Data ...

governance principles Understanding of identity and access control (e.g. Entra ID, RBAC) Experience across structured and unstructured data Scripting/automation skills (PowerShell, Python, KQL) Qualifications Relevant technical qualifications or equivalent experience. Microsoft certifications (e.g. SC-400, AZ-500, DP-203, AZ-305) Experience with Azure data services (e.g. Data ...