26 to 42 of 42 Kusto Query Language Jobs

Senior Security Engineering Consultant - SOC, SIEM, XDR, SOAR, KQL, Microsoft - £70,000 - £80,000 - Hampshire (hybrid) We are partnered with a fast-paced fast growing MSSP and they have a key requirement. You will lead the design and delivery of detection and response capabilities across SIEM, XDR, and SOAR. … occasional visits to the Hampshire office for specific team and business reasons will be expected. Key Skills Hands-on SIEM detection engineering and KQL or similar query languages; Microsoft Sentinel preferred. SOAR automation and playbook delivery using Logic Apps, Cortex XSOAR, or similar. Python, PowerShell, or similar scripting, plus ...

Senior Security Engineering Consultant - SOC, SIEM, XDR, SOAR, KQL, Microsoft - £70,000 - £80,000 - Hampshire (hybrid) Please make an application promptly if you are a good match for this role due to high levels of interest. We are partnered with a fast-paced fast growing MSSP and they have … occasional visits to the Hampshire office for specific team and business reasons will be expected. Key Skills Hands-on SIEM detection engineering and KQL or similar query languages; Microsoft Sentinel preferred. SOAR automation and playbook delivery using Logic Apps, Cortex XSOAR, or similar. Python, PowerShell, or similar scripting, plus ...

Clearance. What you’ll be doing: Develop, test and deploy detection content across Microsoft Sentinel and Splunk SIEM. Write and optimise detection logic using KQL and SPL. Turn monitoring requirements and use cases into effective, actionable detections. Tune alerts to reduce false positives and improve SOC efficiency. Validate detections against … bring: Experience in SOC engineering, detection engineering or SIEM engineering. Strong hands-on experience with Microsoft Sentinel and Splunk. Solid knowledge of KQL and SPL. Experience building, testing and maintaining detection rules. Good understanding of SIEM lifecycle management and security telemetry. Knowledge of cloud environments and IT infrastructure. Familiarity with ...

Clearance. What you’ll be doing: Develop, test and deploy detection content across Microsoft Sentinel and Splunk SIEM. Write and optimise detection logic using KQL and SPL. Turn monitoring requirements and use cases into effective, actionable detections. Tune alerts to reduce false positives and improve SOC efficiency. Validate detections against … bring: Experience in SOC engineering, detection engineering or SIEM engineering. Strong hands-on experience with Microsoft Sentinel and Splunk. Solid knowledge of KQL and SPL. Experience building, testing and maintaining detection rules. Good understanding of SIEM lifecycle management and security telemetry. Knowledge of cloud environments and IT infrastructure. Familiarity with ...

website (web and mobile) and support Experience in Integration tools (Biztalk or similar) Proven hands-on experience in writing complex SQL Queries and Azure KQL Queries Proven hand-on experience in managing Digital solutions hosted using IIS services e.g. mobile Experience in supporting ETL/ELT solutions like Azure data ...

Entra ID security controls (Conditional Access, Identity Governance, Entra GSA, PIM) - Azure services: Log Analytics, Azure Monitor, Azure Lighthouse, Azure Policy - Logic Apps, KQL and Microsoft Graph. You will join a small and very successful Microsoft Solutions Partner delivering services across Microsoft Cloud, Business Apps, Managed Services, Security and AI. … Security monitoring, detection engineering and incident response PowerShell scripting and security automation Azure services: Log Analytics, Azure Monitor, Azure Lighthouse, Azure Policy Logic Apps, KQL and Microsoft Graph Cloud security, identity and compliance frameworks (Cyber Essentials, CIS, Zero Trust) Microsoft Intune and baseline security configuration Certifications SC-200 Security Operations ...

Company DescriptionWe're ASOS. We blend our flair for fashion with our love of cutting- edge technology, but more importantly were interested in how we can bring the best out of you. We exist to ...

measures, Data Loss Prevention (DLP), endpoint protection and threat detection capabilities. Develop and optimise security monitoring, alerting and automated detection using Microsoft Sentinel and KQL . Ensure technical solutions align with NCSC guidance, Secure by Design principles and government security standards . Essential Skills & Experience Active SC clearance Strong hands … Strong understanding of IAM, PAM, Zero Trust, DLP, cloud security and security operations . Experience developing detection rules, investigating security events and working with KQL . ...

measures, Data Loss Prevention (DLP), endpoint protection and threat detection capabilities. Develop and optimise security monitoring, alerting and automated detection using Microsoft Sentinel and KQL . Ensure technical solutions align with NCSC guidance, Secure by Design principles and government security standards . Essential Skills & Experience Active SC clearance Strong hands … Strong understanding of IAM, PAM, Zero Trust, DLP, cloud security and security operations . Experience developing detection rules, investigating security events and working with KQL . ...

positives. Considerable proficiency in log analysis, telemetry interpretation, and cross-system data correlation, including the ability to query, manipulate, and optimize data using KQL, SPL, SQL, or similar languages for investigative and detection use casesPractical experience with containment, response actions, and automation, including developing or maintaining SOAR workflows ...

Python Developer 1-2 days a week on-site in London £450-£650 outside IR35 Requires Active SC Clearance The Role We are seeking an experienced Python Developer to join a growing engineering team delivering ...

Azure Cloud Security Engineer Hybrid 1day/wk Evaluate new security technologies and cloud services, performing engineering work and security analysis to determine if solutions should be pursued, and subsequently implementing them as required, focusing ...

APIs, files, SaaS applications, SAP, streaming sources) using pipelines, shortcuts and mirroringWrite clean, reusable and tested code in PySpark, Spark SQL, T-SQL and KQL, optimizing Delta tablesAdd data quality checks, validation rules, logging and alerting to data pipelinesBuild enterprise semantic models (star schema) using Direct Lake, Import or DirectQuery … Solid understanding of data warehousing and lakehouse concepts, Delta/Parquet formats and dimensional modeling (Kimball)Experience with Real-Time Intelligence (Eventstreams, Eventhouse/KQL, Activator)Ability to turn architecture documents and requirements into working, well-documented solutionsAnalytical mindset, structured way of working and strong focus on qualityEnglish (B2+ ...

Running security assessments and delivering the remediation Migrating customers from third-party security tools onto the Microsoft stack Automating with Logic Apps, PowerShell and KQL Supporting the SOC with incident investigation and escalations Writing high-level and low-level design documentation What youll need Solid, proven implementation experience of Microsoft … endpoint engineering Practical Sentinel deployment and tuning (data connectors, analytics rules, workbooks) and Defender XDR rollout Strong Entra ID implementation experience (Conditional Access, PIM) KQL and PowerShell skills Confidence working directly with customers Helpful, but not essential Logic Apps, Microsoft Graph, Azure Lighthouse and Azure Policy Exposure to Cyber Essentials ...

threat hunting and identifying potential security risks Supporting vulnerability assessment and remediation Working across the Microsoft security stack, including Sentinel, Defender and Entra Using KQL and PowerShell as part of investigations and automation Acting as an escalation point for more junior analysts Contributing to improvements across SOC processes and detection … Microsoft Defender A good understanding of security incident investigation and response Knowledge of Windows environments and general networking/security principles Exposure to KQL would be beneficial A genuine desire to develop technically and progress within cyber security Working pattern Initially, the role will operate ...

ESSENTIAL SKILLS * Strong hands-on Azure infrastructure experience. * Experience writing Terraform configurations and reusable modules. * Practical Application Insights experience and the ability to write KQL queries for troubleshooting. * Experience implementing observability, monitoring and alerting. * Infrastructure configuration and security hardening experience, with an understanding of the controls implemented. * CI/… required skills) your application to our client in conjunction with this vacancy only. KEY SKILLS DevOps Engineer, Azure, Terraform, Infrastructure as Code, Application Insights, KQL, Observability, CI/CD, PowerShell, Ansible, Kubernetes ...

unauthorized data sharing and mitigate data leakage risks. Leveraging Microsoft Defender for endpoint monitoring, threat hunting, and incident response. Performing advanced threat investigations using KQL queries and Defender portals. Acting as a liaison for external services such as Microsoft Defender Experts for proactive threat hunting. Supporting vulnerability management initiatives using … monitor policies to detect, investigate, and act on malicious or unintentional activities. Experience with Microsoft Defender for endpoint security and threat hunting. Familiarity with KQL for advanced threat investigations. Experience in managing and monitoring Zscaler and Proofpoint. Strong knowledge of vulnerability management tools such as Qualys or similar. Understanding ...