24 of 24 Kusto Query Language Jobs in the UK

Cyber Security team on an initial 3-month contract . This is a fully remote opportunity for an analyst with strong Microsoft Sentinel and KQL expertise who can contribute immediately within a live Security Operations Centre (SOC) environment. The successful candidate will play a key role in developing, tuning … translated into effective detections. This role requires strong hands-on experience with Microsoft Sentinel, security telemetry and Kusto Query Language (KQL), alongside the ability to work autonomously within a fast-paced cyber security environment. Key Responsibilities Develop, test, deploy and maintain Microsoft Sentinel detection content Write, optimise ...

Knowledge of cyber security frameworks, attack methodologies and threat actor tactics. Experience developing and tuning SIEM detections. Strong Kusto Query Language (KQL) skills. Ability to work independently within a Security Operations environment. Excellent analytical and problem-solving skills. Desirable Skills Security Operations Centre (SOC) experience. Experience with ...

Advantageous: MS Certified Fabric Data Engineer Associate, Medallion, Delta Lakes, Azure Data Factory, DevOps, IaC, CI/CD, Kusto Query Language (KQL), MS Purview, Key Vault, GenAI, + Agile Delivery. Benefits: Salary to £40,000 (DOE) + Remote/Hybrid Working + Pension + 25 days holiday ...

investigation and analytical skills. Desirable Banking, financial services or other regulated-sector experience. Microsoft Sentinel, Defender XDR, Defender for Identity or Defender for Cloud. KQL, PowerShell, Python or similar scripting/automation. Threat hunting, malware analysis and detection engineering. Azure and Microsoft 365 investigation experience. EnCase, FTK, Velociraptor, Volatility ...

Skills and Experience required: Have a high level of ability to create and develop security orchestration and automated response (SOAR). Strong proficiency in KQL and detection engineering Experience and working knowledge with operating systems - both Linux and Windows platforms Extensive knowledge of Azure including Azure functions and Logic Apps. ...

logs, databases, messaging platforms, external integrations) rather than through a single tool Strong working knowledge of Microsoft Azure, including Portal fluency, Application Insights/KQL, Log Analytics, Azure Functions, Storage and Key Vault Practical experience of event-driven messaging platforms (Azure Service Bus or equivalent) producer/consumer patterns, dead ...

cyber operations or security engineering experience. Hands-on Sentinel, Defender XDR and CrowdStrike expertise. Incident response, malware analysis, forensics and threat hunting. Advanced KQL; PowerShell and/or Python automation. Entra ID, Conditional Access, Intune and Microsoft 365 security. Cloud and networking knowledge; MITRE ATT&CK, NIST and SANS frameworks. ...

participate in an on-call rota. What we're looking for Strong hands-on experience with Microsoft Defender XDR and Sentinel. Very good KQL and Advanced Hunting skills. Practical experience building, configuring or improving security solutions. Familiarity with DevOps and CI/CD pipelines. Confidence communicating with clients and explaining ...

cleansing data with limited guidance. You can present analysis and visualisations in clear ways to communicate complex messages. You can write SQL or KQL queries and know how to extract data using SQL or KQL. You can work with others to identify areas for improvement and simplify processes ...

scale medical research. You will work closely with engineering, architecture and cloud teams to integrate security throughout the software development lifecycle. Microsoft Azure and KQL experience are essential , alongside relevant experience in CI/CD, Kubernetes, API security, security-as-code and security automation . This is a hands ...

triage, threat hunting, data loss prevention, and operational risk analysis. * Demonstrable experience with at least one major SIEM and EDR platform, additional hands on KQL/SPL, PowerShell/Python experience preferred. * Demonstrable experience with Security Orchestration and Automation. * Certifications such as SC-200, AZ-500, GCIA/GCIH/ ...

incident response processes. Experience across enterprise networks, identity, endpoint security and cloud environments. Financial services experience and knowledge of Microsoft Sentinel, Defender XDR, KQL or forensic tools would be advantageous. Whats in it for you? Up to £675 per day, Inside IR35. London-based contract, with 3 days onsite ...

Analytics, Defender for Cloud) Excellent understanding of cloud performance, IaaS/PaaS, networking fundamentals, API performance and capacity modelling Skilled in dashboards, log queries (KQL), custom metrics and performance analysis Ability to diagnose complex issues across infrastructure, networks, applications or databases Confident scripting and automation skills (PowerShell, Azure Automation, Graph ...

Analytics, Defender for Cloud) Excellent understanding of cloud performance, IaaS/PaaS, networking fundamentals, API performance and capacity modelling Skilled in dashboards, log queries (KQL), custom metrics and performance analysis Ability to diagnose complex issues across infrastructure, networks, applications or databases Confident scripting and automation skills (PowerShell, Azure Automation, Graph ...

client. Desirable Relevant vendor or Microsoft security certification (e.g. SC-200, Zscaler, Cribl), though hands-on experience is the priority. Experience with KQL and with scripting or automation. Experience in a regulated or large enterprise environment. Familiarity with formal change governance, including change approval boards and maintenance windows. Networking People ...

experience at Level 3 SOC Analyst or senior security operations level Strong hands-on experience with Microsoft Sentinel, Microsoft Defender for Endpoint (MDE) and KQL Experience onboarding, configuring, tuning and reporting on SIEM solutions Threat intelligence experience Leadership and mentoring experience Commercial experience in security monitoring and/or penetration … Cyber Security master's with relevant experience is also considered Desirable In-depth Microsoft Sentinel expertise: use case and rule development, workbooks and playbooks, KQL, Logic Apps and SOAR Managing Sentinel as an MSSP, including Azure Lighthouse and multi-customer environments using DevOps Wider Microsoft security experience across Defender ...

Entra ID security controls (Conditional Access, Identity Governance, Entra GSA, PIM) - Azure services: Log Analytics, Azure Monitor, Azure Lighthouse, Azure Policy - Logic Apps, KQL and Microsoft Graph. You will join a small and very successful Microsoft Solutions Partner delivering services across Microsoft Cloud, Business Apps, Managed Services, Security and AI. … Security monitoring, detection engineering and incident response PowerShell scripting and security automation Azure services: Log Analytics, Azure Monitor, Azure Lighthouse, Azure Policy Logic Apps, KQL and Microsoft Graph Cloud security, identity and compliance frameworks (Cyber Essentials, CIS, Zero Trust) Microsoft Intune and baseline security configuration Certifications SC-200 Security Operations ...

with best practice Configuring and tuning Microsoft security controls, including Defender policies, Entra settings and Exchange Online security Building and maintaining detection capabilities using KQL, Advanced Hunting and Microsoft Sentinel Managing phishing simulation campaigns and supporting vulnerability scanning Reviewing client environments and identifying opportunities to improve their Microsoft 365 security … Support or Technical Delivery Working knowledge of Microsoft security technologies, particularly Defender XDR, Entra, Defender for Cloud Apps and Exchange Online Strong knowledge of KQL and Advanced Hunting Experience with Microsoft Sentinel, including analytics rules and Content Hub solutions Good understanding of security protocols, standards and best practices Knowledge ...

Python Developer 1-2 days a week on-site in London £450-£650 outside IR35 Requires Active SC Clearance The Role We are seeking an experienced Python Developer to join a growing engineering team delivering ...

Azure Cloud Security Engineer Hybrid 1day/wk Evaluate new security technologies and cloud services, performing engineering work and security analysis to determine if solutions should be pursued, and subsequently implementing them as required, focusing ...

specific platforms is desirable rather than essential. We welcome applicants who have worked with other SIEM technologies. The following would also strengthen your application: KQL or similar query languages used to investigate security events. Threat hunting and the use of threat intelligence within investigations. Familiarity with MITRE ...

Running security assessments and delivering the remediation Migrating customers from third-party security tools onto the Microsoft stack Automating with Logic Apps, PowerShell and KQL Supporting the SOC with incident investigation and escalations Writing high-level and low-level design documentation What youll need Solid, proven implementation experience of Microsoft … endpoint engineering Practical Sentinel deployment and tuning (data connectors, analytics rules, workbooks) and Defender XDR rollout Strong Entra ID implementation experience (Conditional Access, PIM) KQL and PowerShell skills Confidence working directly with customers Helpful, but not essential Logic Apps, Microsoft Graph, Azure Lighthouse and Azure Policy Exposure to Cyber Essentials ...

ESSENTIAL SKILLS * Strong hands-on Azure infrastructure experience. * Experience writing Terraform configurations and reusable modules. * Practical Application Insights experience and the ability to write KQL queries for troubleshooting. * Experience implementing observability, monitoring and alerting. * Infrastructure configuration and security hardening experience, with an understanding of the controls implemented. * CI/… required skills) your application to our client in conjunction with this vacancy only. KEY SKILLS DevOps Engineer, Azure, Terraform, Infrastructure as Code, Application Insights, KQL, Observability, CI/CD, PowerShell, Ansible, Kubernetes ...

threat hunting and identifying potential security risks Supporting vulnerability assessment and remediation Working across the Microsoft security stack, including Sentinel, Defender and Entra Using KQL and PowerShell as part of investigations and automation Acting as an escalation point for more junior analysts Contributing to improvements across SOC processes and detection … Microsoft Defender A good understanding of security incident investigation and response Knowledge of Windows environments and general networking/security principles Exposure to KQL would be beneficial A genuine desire to develop technically and progress within cyber security Working pattern Initially, the role will operate ...